Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4Y2HIAXwCGHizqdTt460dKCuNs4.roa
File: 4Y2HIAXwCGHizqdTt460dKCuNs4.roa (raw, json)
Hash identifier: ly49Dwn0CCHSTZuTrEvE7rkuJ4frGKb6kh6Po4OjlkI=
Subject key identifier: E1:8D:87:20:05:F0:08:61:E2:CE:A7:53:B7:8E:B4:74:A0:AE:36:CE
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0CBF5A6A30FC2EB8FEC75E74F8B35
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4Y2HIAXwCGHizqdTt460dKCuNs4.roa
Signing time: Mon 02 Jan 2023 05:25:07 +0000
ROA not before: Mon 02 Jan 2023 05:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210587
IP address blocks: 88.220.138.0/24 maxlen: 24
2a00:4120:8005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:cb:f5:a6:a3:0f:c2:eb:8f:ec:75:e7:4f:8b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e18d872005f00861e2cea753b78eb474a0ae36ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:62:5c:b7:c4:a2:a9:7c:d8:f1:1f:ed:52:
35:f7:79:fa:4c:f9:59:9f:ce:2a:1c:e1:98:b6:b1:
e2:5a:fd:f0:ee:9a:24:eb:a3:62:3d:97:a3:5a:00:
13:6b:4f:53:42:03:94:1e:74:c2:cc:50:23:68:c9:
3e:e2:6b:11:c9:a3:36:c7:db:ea:03:aa:05:ed:2a:
46:aa:33:d9:93:13:73:b0:08:24:8f:aa:80:e2:b7:
de:23:7f:4c:82:1b:70:4b:af:a9:76:98:79:1c:aa:
b9:f7:1b:3c:71:9f:fc:f3:be:2b:ee:ce:d4:13:24:
91:ea:db:4e:16:d8:5d:9f:4f:7b:4f:d3:14:72:17:
d6:c9:6e:43:78:a3:e6:3f:60:90:bd:75:86:d3:1c:
9d:66:99:bd:86:5c:ed:a3:49:9b:80:ef:6e:cc:82:
97:57:93:69:a6:3c:e9:b1:d2:52:34:7e:28:e5:2a:
c0:3b:1b:39:cf:4d:75:ff:01:d6:a2:05:03:30:95:
c4:b0:eb:f8:b7:f8:38:db:e8:4b:e3:ba:61:cc:5d:
81:f7:a1:24:ed:a9:54:15:3f:f5:dc:7a:b6:76:9f:
46:ca:45:86:bd:2c:90:60:79:07:2a:d0:58:96:bf:
5f:f1:b4:6e:a9:59:cf:f3:1b:1d:05:2a:79:fb:48:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8D:87:20:05:F0:08:61:E2:CE:A7:53:B7:8E:B4:74:A0:AE:36:CE
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4Y2HIAXwCGHizqdTt460dKCuNs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.138.0/24
IPv6:
2a00:4120:8005::/48
Signature Algorithm: sha256WithRSAEncryption
4b:d9:d0:f2:ea:0d:39:a1:25:08:fd:de:d5:52:5f:b6:2d:b3:
2f:4c:c4:df:6d:75:9a:2b:44:5a:7e:b6:cd:52:95:d9:46:4e:
d7:a3:3a:08:5f:d8:da:19:f2:50:92:7d:5e:91:f5:9d:a3:27:
26:7b:c5:d4:e9:53:75:84:f1:3b:6e:23:0f:22:bc:2e:cf:bb:
22:c7:2c:b9:cf:e2:ad:f4:6e:2b:27:44:f0:54:a0:e9:b5:1f:
4d:1f:d0:fd:06:ed:8f:76:47:85:89:8d:46:bb:81:83:19:0f:
a7:5e:af:66:1d:47:9f:f0:37:5b:81:da:08:de:86:1c:95:d7:
24:21:50:e2:31:32:aa:30:37:60:94:3c:88:4c:5f:a1:84:ff:
51:4c:e6:a5:6c:c0:44:cd:e3:6b:5d:cc:4e:c2:34:11:e4:ca:
7c:a0:3d:9b:62:0a:20:cb:09:90:50:6b:63:1a:5c:30:d8:ee:
62:3f:7f:40:aa:ba:b5:6e:d8:52:65:7f:36:1c:21:41:73:28:
bb:45:d4:c1:88:26:7b:15:00:45:35:5f:00:88:4b:a8:14:00:
04:0e:3f:97:af:37:70:b8:fe:1a:77:9f:b5:cc:33:e5:8c:f8:
e9:13:8c:49:70:d9:5b:c7:1b:65:b8:46:69:ac:71:50:d6:11:
2d:d0:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:01 2025 by rpki-client