Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/DpgFf4a6W16TkklPO4nVg2GD0io.roa
File: DpgFf4a6W16TkklPO4nVg2GD0io.roa (raw, json)
Hash identifier: 7elq76/QxV9Yfp4buXrE2/5dHvBCH7m+5cPFXHiDaZU=
Subject key identifier: 0E:98:05:7F:86:BA:5B:5E:93:92:49:4F:3B:89:D5:83:61:83:D2:2A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0186CAB4D283FC779C6B4568591A22F8D337
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/DpgFf4a6W16TkklPO4nVg2GD0io.roa
Signing time: Fri 10 Mar 2023 08:48:13 +0000
ROA not before: Fri 10 Mar 2023 08:48:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199823
IP address blocks: 88.220.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:b4:d2:83:fc:77:9c:6b:45:68:59:1a:22:f8:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Mar 10 08:48:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e98057f86ba5b5e9392494f3b89d5836183d22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e4:37:10:e3:88:21:af:48:35:0b:b8:83:b5:
1e:3d:d9:34:0e:e1:7a:f0:41:51:63:db:57:0e:a6:
6a:23:f4:67:f2:85:7c:19:7b:3f:0d:b3:71:e6:ad:
bb:ed:c8:3c:65:5b:7f:e4:28:31:0b:fc:13:19:fd:
39:ae:f6:b0:ed:fc:d9:c1:df:7d:e1:3f:a2:b2:1e:
a6:96:06:65:cb:5b:d0:47:5a:31:ef:c3:89:c4:a9:
ab:e4:8d:c3:e7:f0:29:47:c0:3a:33:57:b6:35:33:
55:8c:5d:e9:a8:a1:b4:f0:73:a5:62:61:89:7d:03:
b4:2c:76:6f:52:0c:7a:57:dd:e8:fa:96:64:27:03:
ce:ca:6e:35:6f:74:47:ab:1e:8d:80:de:84:ae:c4:
a7:f2:d8:8a:c8:a3:5a:ff:17:ae:91:11:b4:12:c5:
95:df:21:47:ee:9d:c8:4e:46:f5:a2:0f:e7:49:fe:
bf:a5:2b:63:d3:b8:0d:72:fd:07:b4:22:f4:b1:5f:
51:22:52:40:a0:cd:ed:74:ba:4d:c4:39:14:e9:93:
f6:01:f4:2c:6b:a1:d1:fd:7e:d1:a2:9e:fa:84:cb:
67:97:6f:45:4a:b0:09:5e:5f:c7:05:f9:f7:3f:cf:
2f:ba:f3:f2:30:ee:63:33:29:15:97:31:21:6a:fe:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:05:7F:86:BA:5B:5E:93:92:49:4F:3B:89:D5:83:61:83:D2:2A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/DpgFf4a6W16TkklPO4nVg2GD0io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.72.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a7:b0:53:1b:5e:51:0c:66:eb:95:b9:e4:ed:58:ac:a4:94:
91:f3:2e:6f:8f:58:2c:25:83:78:51:d9:2b:5e:34:20:8e:10:
0b:9e:5c:a5:04:44:cc:6b:94:05:9c:c0:38:32:99:00:b5:ad:
3b:29:22:5e:71:a2:3d:2f:d2:2a:52:5f:0a:44:ae:7c:0d:11:
16:f5:37:bf:96:de:de:fc:73:ea:07:cb:82:27:00:30:48:0c:
2d:dd:59:e1:3f:a3:45:60:1f:94:9b:f9:92:f5:08:f6:f6:da:
af:bf:65:37:6f:dc:1f:14:ec:4b:fc:cf:34:19:95:82:59:e0:
85:c8:72:fc:5d:2e:4b:78:f6:32:09:ed:94:b2:c1:e3:9c:79:
0a:2e:dc:4d:a1:1a:8b:96:18:b7:1e:f6:19:78:0d:46:fc:1b:
2e:9f:f6:15:e9:a8:95:62:e0:56:d5:36:30:b7:70:8e:c8:17:
40:2a:b9:b9:10:cb:0d:2c:17:59:60:7f:12:34:c1:91:5e:c5:
96:a5:3d:fb:5b:7c:c3:d5:a5:5b:6c:27:3b:9d:cf:64:b8:2b:
9d:b3:46:8e:2b:2b:9e:4b:59:83:d6:4b:bf:42:2e:9e:ba:02:
b6:f3:cb:92:ec:9c:ea:12:24:56:81:a6:31:1d:7b:c6:3a:5d:
c4:b8:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:57 2025 by rpki-client