Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/K3E3FjsCXSVcyKApDVst2t-zsMk.roa
File: K3E3FjsCXSVcyKApDVst2t-zsMk.roa (raw, json)
Hash identifier: rQzIyEawp3r0my94VgZPcnqNGXkI4N1xHgexFX4LMuw=
Subject key identifier: 2B:71:37:16:3B:02:5D:25:5C:C8:A0:29:0D:5B:2D:DA:DF:B3:B0:C9
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B226055455B601F46BCA67AC9A940D
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/K3E3FjsCXSVcyKApDVst2t-zsMk.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197136
IP address blocks: 88.220.77.0/24 maxlen: 24
88.220.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:26:05:54:55:b6:01:f4:6b:ca:67:ac:9a:94:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7137163b025d255cc8a0290d5b2ddadfb3b0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:21:6c:9f:04:8a:d0:9c:11:f2:dd:44:81:
5e:e7:42:f6:78:96:94:3a:86:ae:1c:05:49:09:ce:
bf:07:52:fd:c2:9b:0a:96:ea:17:0f:3c:54:3b:95:
18:2c:48:0b:4b:e1:b8:46:6a:66:31:92:75:33:a8:
37:26:d4:8a:00:61:4b:04:0b:7d:e1:32:16:48:a4:
7c:87:cd:c7:8c:53:8a:8b:a9:4b:e6:61:ff:4b:a0:
8a:82:ab:e1:e2:94:55:e8:31:47:6d:ba:7b:a8:cd:
e8:16:f0:58:a4:5e:13:51:c4:94:73:17:a7:b5:37:
9f:78:6f:bc:63:7f:62:e3:d8:20:45:81:43:42:83:
05:89:03:64:05:24:01:9d:17:a0:d5:b9:ba:57:ff:
86:08:a0:fd:1c:79:3b:b0:c3:98:1b:37:b5:41:f7:
d2:78:61:06:81:b0:ab:54:d8:c2:5b:92:09:e0:01:
28:3c:89:88:16:5d:e4:e2:2e:07:d7:91:d9:74:af:
3a:50:80:d9:83:c7:d7:29:d1:dd:82:66:6e:db:3b:
ad:ef:7f:d2:f9:c6:09:28:06:c8:28:f1:33:58:6b:
23:8b:c0:6b:72:e4:a6:f8:c4:38:a1:66:88:01:46:
4f:46:0b:ad:23:e2:c3:ce:cc:6b:70:30:ad:df:0a:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:37:16:3B:02:5D:25:5C:C8:A0:29:0D:5B:2D:DA:DF:B3:B0:C9
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/K3E3FjsCXSVcyKApDVst2t-zsMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.77.0/24
88.220.85.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cb:6a:e6:e7:7d:77:37:d2:1e:c1:6f:a3:d1:32:db:66:3a:
16:25:34:c2:f0:f8:17:79:ef:14:4d:00:f0:59:9f:63:5d:67:
a2:91:a4:fa:94:44:e4:be:c6:75:9d:b3:64:39:4c:23:1a:44:
a1:b8:30:02:f0:dc:75:d4:d9:75:21:19:17:4f:78:b1:e9:18:
ed:45:e1:ed:0b:a2:e6:d5:54:d3:f2:a7:f5:96:f2:df:97:28:
1b:97:3f:78:f1:cf:e4:79:35:f8:7d:c9:6c:1e:8c:9c:90:5b:
40:78:db:c4:67:03:3e:e0:56:47:05:7f:b2:e9:ea:7f:5b:95:
44:b7:d7:50:79:1b:fd:34:b0:b1:4b:19:ab:95:1d:6c:59:e8:
0a:e5:24:24:aa:71:00:6d:01:b6:be:1a:d0:e3:cf:46:47:54:
ad:59:38:b8:c6:2d:17:3d:1d:11:35:d0:02:fd:cc:2e:84:ee:
c7:5b:52:ef:c5:c0:68:ad:ef:31:e5:e3:e3:b9:03:79:a6:dd:
bc:0f:7d:7d:7e:83:40:7c:55:d2:1b:9e:a9:e5:ab:65:08:94:
7b:aa:9f:eb:98:ad:1e:7d:37:8f:37:d5:9f:ac:f6:74:8b:4b:
ff:30:d2:06:31:31:3d:02:1b:99:38:1a:79:5f:14:20:91:01:
44:06:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:55 2025 by rpki-client