Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/T1TdPOyeMxW5aJDMzyWHoAbh19Y.roa
File: T1TdPOyeMxW5aJDMzyWHoAbh19Y.roa (raw, json)
Hash identifier: rpfLB9bKOH4JdXbkzUqGlrlf/g8EHkfZPtUJ4O+sCPk=
Subject key identifier: 4F:54:DD:3C:EC:9E:33:15:B9:68:90:CC:CF:25:87:A0:06:E1:D7:D6
Certificate issuer: /CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Certificate serial: 0185714C24EEF394A626D6834183ADABA9F8
Authority key identifier: D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/T1TdPOyeMxW5aJDMzyWHoAbh19Y.roa
Signing time: Mon 02 Jan 2023 07:04:53 +0000
ROA not before: Mon 02 Jan 2023 07:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61108
IP address blocks: 185.163.50.0/24 maxlen: 24
178.238.0.0/22 maxlen: 22
88.218.52.0/22 maxlen: 22
2a10:5300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:24:ee:f3:94:a6:26:d6:83:41:83:ad:ab:a9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Validity
Not Before: Jan 2 07:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f54dd3cec9e3315b96890cccf2587a006e1d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:b5:86:be:7e:72:5d:ee:7a:7c:39:d0:4b:
b9:a6:14:a7:51:9b:df:18:9a:a5:19:b8:1d:cb:20:
a9:f1:3e:5f:51:07:13:ad:23:f4:ad:72:e4:a0:3f:
a5:df:3e:d8:b1:51:6c:3d:ee:94:e0:ab:34:93:52:
a0:8d:cf:f7:4d:ce:bd:31:5d:1f:f4:aa:10:b6:5e:
4a:46:5e:db:f0:79:41:f7:92:73:00:9d:05:36:7e:
3e:44:92:30:65:7d:c9:7d:32:f8:71:1b:49:cf:3c:
7e:2c:af:1e:fa:ec:b7:55:9b:31:a2:af:15:62:2d:
cd:6a:ba:64:7c:c5:00:d9:56:c4:9a:13:fd:39:53:
d5:bf:09:cc:2a:a1:ed:b7:eb:ff:e6:1c:d6:4c:29:
21:b9:ad:3c:9b:24:c1:aa:78:d8:86:ac:03:4d:d6:
35:b5:54:a6:8e:42:b5:0e:e8:89:52:e4:06:4d:2f:
c2:6b:8a:f3:5f:aa:62:f5:b6:4f:35:4a:a4:b9:95:
d5:d8:1d:83:ce:bb:11:60:c0:69:41:b8:e1:3c:1a:
89:f4:7c:f6:7d:ec:14:66:0f:e2:46:d0:32:4b:0d:
7e:12:5b:21:e5:3d:fe:92:08:64:15:f8:fa:9c:44:
11:15:78:8d:f3:3b:0c:8c:26:2a:ba:29:90:49:34:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:DD:3C:EC:9E:33:15:B9:68:90:CC:CF:25:87:A0:06:E1:D7:D6
X509v3 Authority Key Identifier:
keyid:D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/T1TdPOyeMxW5aJDMzyWHoAbh19Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.52.0/22
178.238.0.0/22
185.163.50.0/24
IPv6:
2a10:5300::/29
Signature Algorithm: sha256WithRSAEncryption
64:ad:d3:21:be:1e:0f:6f:9b:b0:eb:05:ea:44:f9:d0:99:39:
6a:be:e6:02:f9:a5:d2:3b:9c:ac:94:57:7a:af:c7:bc:1b:63:
77:0f:a8:86:a4:3b:7d:1b:ec:68:39:e7:5b:f4:97:d7:dc:b5:
c2:0b:59:56:5e:b6:7a:34:18:d6:0f:cb:1d:d0:56:19:24:39:
61:23:2b:5f:02:52:11:80:6a:f6:e2:ce:58:05:92:55:29:19:
bb:21:a5:d5:a9:59:60:ed:aa:15:1c:18:13:cc:c7:19:6a:74:
42:f3:c1:3a:0a:74:b6:e0:52:02:7e:0c:1e:6d:41:7f:60:13:
2e:2a:05:f2:10:34:f8:7d:23:d4:aa:3f:e1:63:bd:24:cd:f3:
49:00:11:00:f9:3c:d7:69:17:df:52:3b:c4:8f:f3:a5:b3:69:
9e:44:37:43:27:f1:ce:fd:1c:03:b3:6c:5b:0d:3e:15:6c:8e:
8b:e1:04:da:ca:44:f3:ba:3b:5b:c9:54:6f:b7:09:32:98:e5:
80:6d:86:f2:6e:b5:b6:1f:78:5e:38:bf:3f:12:05:b3:3c:b0:
b7:3c:8d:df:94:73:88:a3:81:63:33:9b:e5:6c:9a:e1:8d:ee:
d6:8c:29:eb:03:1c:e5:63:db:c3:d2:45:39:96:41:e9:bb:3c:
f2:99:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:19 2025 by rpki-client