Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EolFczESsUdrx5-OTRi264rSXFE.roa
File: EolFczESsUdrx5-OTRi264rSXFE.roa (raw, json)
Hash identifier: trCUC2ri6tWjA3sbgtFdRjMv80QppwpLRhpHiNpeW/s=
Subject key identifier: 12:89:45:73:31:12:B1:47:6B:C7:9F:8E:4D:18:B6:EB:8A:D2:5C:51
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2196E1C96FB3BF5302B46C2564EA0
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EolFczESsUdrx5-OTRi264rSXFE.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43372
IP address blocks: 88.220.112.0/24 maxlen: 24
88.220.130.0/23 maxlen: 23
88.220.134.0/23 maxlen: 23
88.220.161.0/24 maxlen: 24
195.136.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:19:6e:1c:96:fb:3b:f5:30:2b:46:c2:56:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128945733112b1476bc79f8e4d18b6eb8ad25c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:09:e9:4c:03:27:a8:fb:3e:30:27:9d:73:
d6:3e:82:46:50:07:67:8b:53:a6:c0:13:4e:c0:a2:
e9:e4:c3:d7:e4:37:9c:62:ed:4c:69:26:95:b9:e1:
7c:9c:0f:06:d8:90:ae:8b:62:a5:94:39:f4:5a:fd:
b6:7e:69:13:94:94:d9:6f:38:b7:65:d0:af:4d:9c:
ca:13:ff:61:c1:e8:52:8b:0f:19:88:e2:8a:d4:ee:
94:73:1e:4d:4d:95:24:47:8c:a5:16:05:fb:5e:ec:
10:9a:c9:c0:ee:3f:48:b8:59:92:86:d3:ff:d2:70:
ed:ce:8c:8c:fb:67:1a:fa:7c:af:67:a4:5b:f4:d9:
62:ec:8d:da:77:0e:06:83:e4:b5:b2:08:cc:2b:69:
d5:ab:75:4d:6e:54:13:48:1a:22:65:0a:d9:d0:9e:
63:ce:4b:07:9b:f9:bb:15:cb:ad:ee:e1:e7:f6:4d:
69:6c:5f:00:c5:a1:c0:df:60:64:43:14:79:fc:1f:
62:8a:f2:cb:38:b5:7c:28:f5:4b:46:82:a9:0e:c4:
c9:6a:a0:59:84:a7:73:3d:0c:c8:16:17:2b:43:7e:
20:21:e5:c2:84:56:3a:3f:08:75:3b:f4:10:20:c5:
e4:14:f6:62:33:49:c0:7a:82:08:28:55:92:85:5c:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:89:45:73:31:12:B1:47:6B:C7:9F:8E:4D:18:B6:EB:8A:D2:5C:51
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EolFczESsUdrx5-OTRi264rSXFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.112.0/24
88.220.130.0/23
88.220.134.0/23
88.220.161.0/24
195.136.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:7b:83:8b:21:39:d8:6e:5a:9d:2f:f0:d2:a6:02:0c:77:95:
29:ef:e4:5e:07:ad:30:32:60:c9:56:ba:01:25:54:0a:fb:29:
be:cc:5e:04:62:5f:ec:4a:fe:7e:41:6c:70:b7:54:65:73:92:
68:e1:43:61:00:43:75:85:00:ce:da:df:d3:63:1e:9c:f6:85:
fe:1d:08:89:b6:fd:35:f7:84:e6:56:b3:e9:f9:68:ad:4c:2f:
62:46:ac:e9:a0:12:ad:ae:6b:0f:a0:63:9b:5f:01:d4:d0:dc:
da:9c:61:fe:24:07:15:bf:71:d8:2d:33:d8:d7:b0:e7:c0:df:
97:ab:d9:7a:50:f7:d9:83:4b:a8:97:d7:32:1a:50:91:cf:78:
bf:1f:27:68:da:8a:16:70:a4:86:dc:65:5e:37:e3:b9:0e:a1:
82:9c:25:fd:09:d0:12:f7:01:73:f8:90:46:62:1b:78:ea:1a:
7e:24:0c:c6:f7:d0:1a:56:52:57:88:78:e5:27:26:26:39:ee:
83:b7:1c:05:77:45:97:ae:44:98:b5:40:55:0e:c5:de:e5:72:
0d:2b:fe:ea:f7:79:a5:10:33:25:d0:1a:a1:d5:c0:a4:20:74:
0b:46:99:94:1b:08:53:14:28:05:d4:68:13:ff:bc:ce:64:05:
70:c0:8d:7a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQhshluHJb7O/UwK0bCVk6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjg5NDU3MzMxMTJiMTQ3NmJjNzlmOGU0ZDE4YjZlYjhhZDI1YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDcJ6UwDJ6j7PjAnnXPWPoJGUAdn
i1OmwBNOwKLp5MPX5DecYu1MaSaVueF8nA8G2JCui2KllDn0Wv22fmkTlJTZbzi3
ZdCvTZzKE/9hwehSiw8ZiOKK1O6Ucx5NTZUkR4ylFgX7XuwQmsnA7j9IuFmShtP/
0nDtzoyM+2ca+nyvZ6Rb9Nli7I3adw4Gg+S1sgjMK2nVq3VNblQTSBoiZQrZ0J5j
zksHm/m7Fcut7uHn9k1pbF8AxaHA32BkQxR5/B9iivLLOLV8KPVLRoKpDsTJaqBZ
hKdzPQzIFhcrQ34gIeXChFY6Pwh1O/QQIMXkFPZiM0nAeoIIKFWShVzM/wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBKJRXMxErFHa8efjk0YtuuK0lxRMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvRW9sRmN6RVNzVWRyeDUtT1RSaTI2NHJTWEZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWNxwAwQB
WNyCAwQBWNyGAwQAWNyhAwQCw4ioMA0GCSqGSIb3DQEBCwUAA4IBAQAPe4OLITnY
blqdL/DSpgIMd5Up7+ReB60wMmDJVroBJVQK+ym+zF4EYl/sSv5+QWxwt1Rlc5Jo
4UNhAEN1hQDO2t/TYx6c9oX+HQiJtv0194TmVrPp+WitTC9iRqzpoBKtrmsPoGOb
XwHU0NzanGH+JAcVv3HYLTPY17DnwN+Xq9l6UPfZg0uol9cyGlCRz3i/Hydo2ooW
cKSG3GVeN+O5DqGCnCX9CdAS9wFz+JBGYht46hp+JAzG99AaVlJXiHjlJyYmOe6D
txwFd0WXrkSYtUBVDsXe5XINK/7q93mlEDMl0Bqh1cCkIHQLRpmUGwhTFCgF1GgT
/7zOZAVwwI16
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:55 2025 by rpki-client