Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/tcqwXiEllywsrP-3lN4vHHYhxpY.roa
File: tcqwXiEllywsrP-3lN4vHHYhxpY.roa (raw, json)
Hash identifier: h2r0rptWlt6BC2SxJ/S+gvpaYwbaVHioOx48LAQ/WWc=
Subject key identifier: B5:CA:B0:5E:21:25:97:2C:2C:AC:FF:B7:94:DE:2F:1C:76:21:C6:96
Certificate issuer: /CN=8c3988516b1e6820b436a849f7c20df3192a48aa
Certificate serial: 018CC5000835FA55210EDB40DAC23F6568FC
Authority key identifier: 8C:39:88:51:6B:1E:68:20:B4:36:A8:49:F7:C2:0D:F3:19:2A:48:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDmIUWseaCC0NqhJ98IN8xkqSKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/tcqwXiEllywsrP-3lN4vHHYhxpY.roa
Signing time: Mon 01 Jan 2024 12:29:22 +0000
ROA not before: Mon 01 Jan 2024 12:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209725
IP address blocks: 88.218.124.0/24 maxlen: 24
88.218.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:08:35:fa:55:21:0e:db:40:da:c2:3f:65:68:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3988516b1e6820b436a849f7c20df3192a48aa
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5cab05e2125972c2cacffb794de2f1c7621c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:65:ce:e7:12:88:ff:6e:b9:64:0d:3e:dd:
ca:10:60:f1:44:92:70:e0:9b:c6:50:51:2c:5f:69:
75:26:88:ee:79:68:76:c9:c3:62:ea:ed:6f:0d:b4:
ad:1a:88:f3:7e:3c:17:82:c2:6f:df:96:0c:54:7b:
b3:80:52:b7:b7:13:b7:b9:39:46:53:ba:70:94:d5:
c5:7b:84:1e:af:f7:b7:17:de:61:05:34:9b:6f:2a:
90:7c:3a:c3:ed:e6:04:b8:37:6a:a0:fe:a7:f1:27:
ae:65:d1:ac:f5:ae:bb:7e:d9:a5:f8:9b:fa:4d:3a:
bc:af:fc:ba:c1:0d:b9:db:9b:d8:89:b8:ae:9c:2d:
84:5d:39:22:8f:bd:b9:81:a2:f6:b3:8b:5f:12:42:
cf:05:ad:dc:3d:6d:95:fb:b8:ae:d9:d8:b0:f8:f0:
c8:72:2f:9d:c1:eb:d3:fe:b6:25:83:34:1d:89:be:
87:02:0b:7b:bc:29:83:63:6f:06:7f:f4:82:47:72:
cd:df:72:11:6a:66:96:28:da:88:9c:47:ff:b3:c3:
b7:1f:a7:f2:8f:05:01:66:9a:4d:f8:ef:d0:8f:3b:
23:48:1b:b5:1d:07:45:15:81:29:cf:d9:b9:7c:0f:
a4:c9:19:eb:34:44:d6:e5:9a:16:61:9e:5b:09:b6:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CA:B0:5E:21:25:97:2C:2C:AC:FF:B7:94:DE:2F:1C:76:21:C6:96
X509v3 Authority Key Identifier:
keyid:8C:39:88:51:6B:1E:68:20:B4:36:A8:49:F7:C2:0D:F3:19:2A:48:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDmIUWseaCC0NqhJ98IN8xkqSKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/tcqwXiEllywsrP-3lN4vHHYhxpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/jDmIUWseaCC0NqhJ98IN8xkqSKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.124.0/23
Signature Algorithm: sha256WithRSAEncryption
26:2e:a0:bb:ba:3c:d7:72:b3:26:ed:b6:50:f4:d7:6c:80:3a:
2f:55:1a:e6:12:17:c1:69:b3:8d:15:f5:b4:e0:a5:56:29:28:
21:27:99:e3:9c:69:7d:09:a6:d7:fe:ae:5e:bd:04:f6:9c:8e:
6d:e7:c0:d6:f5:17:2a:61:d4:6b:dd:2a:d6:9a:91:95:cf:01:
27:a5:bf:62:7e:b7:66:1c:1e:45:80:4a:47:a2:e6:a1:e7:66:
90:e7:a7:76:59:15:3b:bd:49:5f:9d:5a:27:01:5e:4f:59:07:
71:d3:85:cc:d8:8f:18:ea:c4:75:a9:04:19:c9:33:2f:26:ce:
b7:fe:f7:b9:92:d4:e2:a3:89:a5:40:26:60:87:8c:04:7f:52:
26:d9:46:55:a8:7a:89:12:e0:47:39:de:f2:87:5e:7a:02:52:
fc:65:a5:8c:de:37:6b:15:bf:a6:36:30:55:6e:bf:75:9c:ea:
9a:b8:fa:30:1f:17:f9:77:32:4e:5c:42:cf:cb:97:85:0f:9a:
aa:a0:b5:dc:01:b8:16:7b:c4:69:8f:a4:d8:8b:c3:0d:fa:89:
17:ef:91:24:30:71:91:1c:ea:a3:65:b4:63:d4:bf:a4:76:0c:
04:db:91:00:6d:68:43:a8:aa:2b:38:29:a4:97:8f:77:96:b0:
3d:ba:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:32 2025 by rpki-client