Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Go1OP5ehTWd0gjaKX4cJVqikv8g.roa
File: Go1OP5ehTWd0gjaKX4cJVqikv8g.roa (raw, json)
Hash identifier: oDRUmiFq1IDvlEViu9ILf574WT5gdV3PEYhZIdVSXw8=
Subject key identifier: 1A:8D:4E:3F:97:A1:4D:67:74:82:36:8A:5F:87:09:56:A8:A4:BF:C8
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22C5FAFF60A974C119E70263C72BA
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Go1OP5ehTWd0gjaKX4cJVqikv8g.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201113
IP address blocks: 88.220.154.0/24 maxlen: 24
88.220.167.0/24 maxlen: 24
195.136.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2c:5f:af:f6:0a:97:4c:11:9e:70:26:3c:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a8d4e3f97a14d677482368a5f870956a8a4bfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:2e:e3:f2:f5:ad:47:33:7c:a8:3c:fc:10:
9e:6d:20:ae:b0:36:4d:cb:b6:32:30:2e:d7:13:22:
7a:f6:f0:91:54:6f:19:4f:ed:5d:a6:7a:79:4c:a9:
01:a3:24:f1:7c:e2:7c:56:e6:1c:07:1e:82:e9:43:
0a:0e:25:f8:bb:e9:8a:e5:fc:3b:2b:c9:56:c7:cc:
b4:18:43:93:1f:8e:9f:94:e8:3c:a7:f6:e7:e0:25:
8b:02:04:0e:c7:0d:a2:40:b5:3b:bd:57:05:0e:58:
fb:c5:40:52:d8:de:ae:6d:8e:3a:33:c4:e6:5d:fc:
27:b5:51:cc:7d:a3:80:a9:a8:61:7c:71:38:75:37:
f3:c5:10:49:1c:a3:fa:29:30:02:cf:2d:24:9e:e7:
a1:1c:aa:1d:e6:bd:76:5e:c4:9d:95:ce:57:76:ca:
87:69:18:0d:19:4d:1f:4f:5a:8e:89:c1:3b:58:1d:
2d:ea:96:aa:42:ef:25:a2:a4:87:75:47:36:dc:e6:
b0:38:48:7f:e0:f4:85:4e:5a:bb:48:4a:71:ad:65:
d7:07:58:7e:fc:03:86:92:e9:88:10:1b:65:cb:86:
bd:30:d5:82:62:97:5c:47:d2:8e:c4:b2:7b:91:1b:
8d:8b:c3:75:f5:38:ad:15:ad:61:1a:d0:d0:13:75:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8D:4E:3F:97:A1:4D:67:74:82:36:8A:5F:87:09:56:A8:A4:BF:C8
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Go1OP5ehTWd0gjaKX4cJVqikv8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.154.0/24
88.220.167.0/24
195.136.162.0/23
Signature Algorithm: sha256WithRSAEncryption
99:32:3b:d2:0b:b0:5c:4b:a8:d4:71:b4:ba:9e:f5:44:c6:4b:
b9:b7:38:a6:78:92:21:1c:f5:ee:19:f0:e7:bc:48:e2:10:1b:
93:19:d7:26:a7:6f:6a:e3:0b:fd:f4:95:52:ca:77:17:7e:f0:
4f:3a:6f:a2:3e:21:96:9d:7a:f9:8b:65:2b:89:ae:fe:e5:94:
99:10:a4:93:c2:ea:da:aa:53:84:ec:2c:c9:57:4a:b2:ea:2d:
98:4a:30:8a:79:dc:1e:45:53:bb:d2:cc:bd:eb:49:9b:01:63:
c8:2c:91:8d:29:2a:a9:2b:bf:72:71:23:75:4e:30:f0:d5:e3:
bb:77:75:6b:16:00:f2:02:04:fa:b3:8b:60:dc:c6:18:73:c8:
1b:bd:ef:84:49:82:37:f2:f4:a8:de:97:37:f3:e9:7f:b5:16:
f4:b5:24:3d:4f:b9:29:6f:82:06:7e:34:c3:88:44:85:22:f3:
1a:ec:ad:0a:1f:88:a4:13:74:dd:ee:b5:fb:ce:33:94:5e:7b:
32:a8:81:59:c2:d0:4b:d1:ea:15:c7:ac:67:08:56:a9:91:7c:
19:47:90:59:f6:5b:1b:f5:1a:bb:ea:fb:2d:45:8d:6d:f7:23:
5f:ec:6f:79:2b:4c:2f:c6:ca:27:a9:5f:10:6f:43:05:c8:ad:
33:ef:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:33 2025 by rpki-client