Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/QXmGoc8tkQ1iA-SVErh-FOtGdnw.roa
File: QXmGoc8tkQ1iA-SVErh-FOtGdnw.roa (raw, json)
Hash identifier: 9DLCyCiZANVuTGC2rTdCkWCfP2yJ9ap/soIxtlotilY=
Subject key identifier: 41:79:86:A1:CF:2D:91:0D:62:03:E4:95:12:B8:7E:14:EB:46:76:7C
Certificate issuer: /CN=1772ca3151cf43fa72ed4e6b0a8b19dbd8c75b68
Certificate serial: 066997E8
Authority key identifier: 17:72:CA:31:51:CF:43:FA:72:ED:4E:6B:0A:8B:19:DB:D8:C7:5B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3LKMVHPQ_py7U5rCosZ29jHW2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/QXmGoc8tkQ1iA-SVErh-FOtGdnw.roa
Signing time: Sat 01 Jan 2022 08:58:51 +0000
ROA not before: Sat 01 Jan 2022 08:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212345
IP address blocks: 88.218.115.0/24 maxlen: 24
88.218.113.0/24 maxlen: 24
2a0f:52c1:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107583464 (0x66997e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1772ca3151cf43fa72ed4e6b0a8b19dbd8c75b68
Validity
Not Before: Jan 1 08:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=417986a1cf2d910d6203e49512b87e14eb46767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:61:6d:82:75:90:a0:f1:c3:cd:32:b2:f0:
17:7f:d2:bf:1a:27:5f:98:94:28:80:5b:a3:ef:96:
38:41:24:4b:68:cf:e8:bb:7b:73:d6:97:d0:1f:b9:
5e:53:72:6c:80:a5:72:14:8e:e4:4b:73:e3:54:47:
69:21:80:1c:79:79:0f:ab:43:cc:f9:06:f1:a9:9e:
86:26:59:5f:b9:74:83:e4:35:a9:1d:d2:ba:22:78:
09:98:68:6f:1d:17:e6:4c:2c:2b:47:69:b1:96:1b:
21:8e:ae:d0:29:0a:fc:c3:cd:05:53:0c:0a:bf:c6:
c9:c3:1b:9d:4b:05:40:16:41:0f:cb:f0:1b:34:50:
42:7e:fb:34:41:58:e2:39:9a:fd:d4:a2:4e:9b:26:
2e:19:7e:3b:10:2e:f3:fc:40:a7:e1:f4:27:27:f4:
e0:7d:a0:ae:39:23:4a:5a:96:51:56:5c:9e:7f:c6:
7c:4e:4d:ba:ff:a4:89:74:72:e1:b7:e0:43:95:e7:
5d:ac:c4:9d:cc:a9:d0:36:80:9a:56:96:b5:86:3e:
df:72:d8:cb:72:29:32:2a:ee:70:52:47:d5:df:43:
98:f6:29:7f:77:c4:98:46:19:4e:43:fa:4d:4b:0e:
c9:8f:67:55:6f:c5:a0:b1:2b:5e:72:d2:d7:2f:3a:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:86:A1:CF:2D:91:0D:62:03:E4:95:12:B8:7E:14:EB:46:76:7C
X509v3 Authority Key Identifier:
keyid:17:72:CA:31:51:CF:43:FA:72:ED:4E:6B:0A:8B:19:DB:D8:C7:5B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3LKMVHPQ_py7U5rCosZ29jHW2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/QXmGoc8tkQ1iA-SVErh-FOtGdnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/F3LKMVHPQ_py7U5rCosZ29jHW2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
IPv6:
2a0f:52c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
94:3f:87:e9:ae:51:59:e3:0c:58:21:da:87:0d:63:fe:52:9d:
8d:8e:45:82:7a:6b:13:cf:da:ab:45:e8:44:05:b5:96:74:17:
97:35:3e:c5:67:ee:94:34:ad:c8:b2:4b:b4:5c:e5:1a:a1:89:
8c:35:80:4f:f0:b5:ba:e0:08:5a:10:34:47:97:0d:2b:15:56:
be:e5:d4:14:c6:ca:db:3e:85:0a:88:e9:d0:0e:4d:6f:d6:41:
23:4a:01:9b:7d:2c:5f:5d:a0:dc:eb:b6:3b:48:ef:15:20:e2:
3d:b0:df:28:c0:cd:ca:b7:0d:69:ec:c7:5a:e0:de:c8:b6:21:
10:f7:c9:fd:66:97:f4:58:e2:35:4a:b5:38:9e:bb:62:05:7b:
d5:99:da:9d:75:96:1a:bb:af:b4:c7:d1:21:47:2b:0b:ee:c3:
fd:d7:fb:44:18:da:18:b4:02:6a:e2:37:6f:ad:41:dc:b7:8b:
58:e2:b1:8e:22:70:db:3f:cf:fb:e3:13:d2:27:85:86:d8:fd:
e7:24:4a:3d:cc:fe:b8:cc:64:37:c8:38:dd:92:5a:b3:cc:d1:
ef:f1:83:4d:63:01:50:e6:1d:67:6b:83:1f:9a:dc:23:fa:e9:
0e:a4:06:79:05:50:55:71:7c:7f:90:33:da:12:8b:d3:b3:6c:
fb:6b:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:14 2023 by rpki-client on console-fra.rpki-client.org