Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/XhRqG9Q75YGKi7fkKmQMkJqaVd0.roa
File: XhRqG9Q75YGKi7fkKmQMkJqaVd0.roa (raw, json)
Hash identifier: 7y3miDAN/AxKhshNtJj//HwdwiHzGHqe22jLSs7ytcQ=
Subject key identifier: 5E:14:6A:1B:D4:3B:E5:81:8A:8B:B7:E4:2A:64:0C:90:9A:9A:55:DD
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01887D2F4F1BF25A052B91371C7D49401331
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/XhRqG9Q75YGKi7fkKmQMkJqaVd0.roa
Signing time: Fri 02 Jun 2023 17:37:12 +0000
ROA not before: Fri 02 Jun 2023 17:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60798
IP address blocks: 45.88.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:2f:4f:1b:f2:5a:05:2b:91:37:1c:7d:49:40:13:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jun 2 17:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e146a1bd43be5818a8bb7e42a640c909a9a55dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:98:af:f3:60:6d:ab:b7:70:f8:bd:4b:c4:
38:72:40:95:5f:13:26:ed:26:ad:1a:3c:52:c5:64:
fd:78:c5:ca:ae:35:da:f1:60:a7:79:a3:d9:34:c9:
ef:86:b7:6e:f5:d2:7d:73:63:29:11:94:84:f8:f0:
c6:c1:f0:dd:9c:a0:53:fc:22:89:8c:8a:5e:19:8d:
00:9e:94:39:b4:a4:bf:f9:ed:36:d9:70:37:4b:83:
d9:bb:8d:bb:16:fe:6e:04:17:82:8f:1f:a9:cf:f6:
a4:a7:47:fa:32:df:d8:7a:3c:f7:3f:37:df:ff:42:
b5:1b:01:b0:58:23:7f:8d:a7:47:be:f2:a6:05:bd:
d0:bd:c5:9b:ab:a3:94:4a:e6:0a:26:d6:49:cd:17:
61:68:a0:1f:77:e4:72:31:5a:1e:c3:86:a1:ca:f7:
6f:06:3f:bb:01:26:aa:0f:8e:b2:f7:ae:4c:27:0d:
c5:ec:77:53:dd:a4:d9:04:7f:17:56:7a:72:d2:d9:
fd:41:1e:17:31:39:1c:e6:ab:cf:44:d2:3f:a5:d3:
76:33:ff:c8:a1:e7:10:61:f2:29:6e:58:84:5c:3e:
43:df:81:e5:aa:9c:c9:40:a1:e9:c4:d0:d1:34:9c:
08:c1:9a:27:8c:bb:1e:a4:0e:03:74:88:1e:1f:1e:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:6A:1B:D4:3B:E5:81:8A:8B:B7:E4:2A:64:0C:90:9A:9A:55:DD
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/XhRqG9Q75YGKi7fkKmQMkJqaVd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:82:2c:35:77:5e:4c:c4:77:a7:63:9f:be:73:63:09:99:93:
c8:7b:6d:ad:db:d5:92:f7:b2:db:6d:0a:e4:46:6e:45:95:43:
67:d3:8a:66:92:b6:bb:98:f8:dd:f0:96:12:31:f1:86:f0:8f:
a9:be:cd:84:c9:42:b3:d5:3a:da:80:5e:02:c7:ce:25:46:9b:
6d:c9:82:52:c9:df:45:3a:54:6f:dd:53:0f:6f:ac:5c:d3:96:
8f:2c:c0:d5:89:84:22:36:db:b1:ce:9c:82:c6:ff:c4:ee:6c:
d0:7c:2f:33:3e:8e:dd:1e:dd:a9:cf:bf:22:a5:bb:3a:88:00:
e5:a5:6e:72:83:44:c3:13:42:57:96:60:8f:c7:ef:ed:3a:a0:
e9:0f:3e:80:65:3e:40:16:4a:d9:64:dd:b2:48:1a:4c:25:ea:
f5:fa:2b:1c:72:92:e8:57:da:c1:75:62:dd:5a:91:ef:47:da:
2e:64:5d:e2:75:1a:6f:45:18:81:f0:c4:15:de:cb:df:ae:a5:
ce:7d:94:9b:e4:aa:ee:ca:55:42:eb:e7:8d:a6:9c:7d:53:c3:
ee:a6:f0:21:7f:12:98:90:8e:ac:87:01:9c:07:37:b2:be:78:
b3:be:e1:52:48:ec:3f:77:43:09:73:43:3c:74:66:24:83:24:
72:3f:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:29 2025 by rpki-client