Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tUtYoX4EwP7aFoboq_zdgOdj-lg.roa
File: tUtYoX4EwP7aFoboq_zdgOdj-lg.roa (raw, json)
Hash identifier: 37DZPCQw3Q/X0q/QwUBlwJu5lxZ2/8yTeg3qhLWXE14=
Subject key identifier: B5:4B:58:A1:7E:04:C0:FE:DA:16:86:E8:AB:FC:DD:80:E7:63:FA:58
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A95A0E6
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tUtYoX4EwP7aFoboq_zdgOdj-lg.roa
Signing time: Sat 01 Jan 2022 04:52:19 +0000
ROA not before: Sat 01 Jan 2022 04:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207156
IP address blocks: 88.220.45.0/24 maxlen: 24
88.220.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982884582 (0x3a95a0e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b54b58a17e04c0feda1686e8abfcdd80e763fa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:b7:bd:48:6b:12:5a:99:3e:98:f8:25:4f:
38:52:07:12:e6:c1:86:bb:ec:f8:64:c3:84:5c:da:
03:35:a5:b7:ab:48:1f:9b:72:dc:39:52:32:90:f8:
78:00:73:41:ee:8a:01:cd:ae:fe:d4:e1:ec:f2:f5:
41:b2:8f:77:a4:43:a5:3f:1c:e9:fc:c7:a7:08:d3:
95:01:35:be:dd:89:c7:2e:ad:25:69:f3:a3:61:73:
df:43:4e:00:10:fc:c4:e2:e1:49:b2:53:79:4c:6c:
09:dc:f7:0a:fd:a0:7d:9b:ec:51:3b:7e:6f:76:30:
de:8b:da:a9:a5:76:92:50:1a:a6:56:43:4f:6d:18:
cd:5d:69:cf:63:51:cf:5d:6a:a5:4d:18:84:73:ce:
5d:90:7b:ac:2c:84:de:f1:7a:63:38:cc:46:2d:b2:
1b:53:cf:3b:41:db:67:27:2f:08:5d:30:f7:3c:3d:
c6:94:bb:2b:01:9e:61:bf:ca:e9:52:74:2c:4e:ab:
49:95:d6:c0:18:d5:d4:e1:0e:6f:09:54:0a:a7:f7:
1b:dc:8e:d1:5e:c8:51:22:3a:d5:aa:1a:7e:32:09:
99:de:5b:91:03:96:7a:f1:b9:7e:34:7e:5b:fe:b1:
ce:93:79:a3:f2:17:a9:04:ac:1c:e4:fd:91:a5:cc:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:58:A1:7E:04:C0:FE:DA:16:86:E8:AB:FC:DD:80:E7:63:FA:58
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tUtYoX4EwP7aFoboq_zdgOdj-lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.45.0/24
88.220.51.0/24
Signature Algorithm: sha256WithRSAEncryption
33:da:21:94:3d:d9:41:43:b0:dc:45:f4:4c:ef:c8:28:cf:9d:
5f:09:4e:eb:fa:ca:70:c1:cb:8d:46:96:2a:36:6d:58:af:4c:
83:e9:32:f7:22:c6:cb:0f:a0:4b:d5:81:1e:02:3e:fe:12:8f:
4f:70:6d:33:8d:7f:6e:bd:70:13:30:ad:37:a4:12:ab:d1:9e:
64:3a:3a:cf:33:0b:37:78:0b:96:25:b8:65:a0:37:ab:6c:19:
07:43:aa:be:c5:44:a9:c0:3d:39:89:a4:99:80:28:25:98:d3:
68:1c:04:3a:a8:69:50:20:12:e5:02:e9:56:fc:2e:1a:d7:06:
89:6a:7b:39:17:95:95:7b:bd:f7:d6:50:9c:ec:51:38:b3:4d:
c4:18:84:1a:49:89:48:26:c3:0c:ea:c5:05:b9:ad:91:8a:5e:
3d:35:28:01:02:ba:16:92:4f:bf:f1:9f:64:1d:87:64:0d:d9:
2f:bd:9f:42:9d:f3:2a:37:c5:bd:45:95:f0:72:b4:e8:a9:14:
74:e2:61:39:de:fc:e5:bb:01:3e:a4:f4:41:c3:8f:97:d6:42:
d6:2c:0a:88:f7:5b:2e:b7:d4:f0:ba:b4:00:32:bd:60:1a:e3:
f5:ad:80:4a:58:8f:70:59:2c:46:fd:85:b4:3c:43:ce:41:ca:
94:ae:5f:35
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOpWg5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTIxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjU0YjU4YTE3ZTA0
YzBmZWRhMTY4NmU4YWJmY2RkODBlNzYzZmE1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANT/t71IaxJamT6Y+CVPOFIHEubBhrvs+GTDhFzaAzWlt6tI
H5ty3DlSMpD4eABzQe6KAc2u/tTh7PL1QbKPd6RDpT8c6fzHpwjTlQE1vt2Jxy6t
JWnzo2Fz30NOABD8xOLhSbJTeUxsCdz3Cv2gfZvsUTt+b3Yw3ovaqaV2klAaplZD
T20YzV1pz2NRz11qpU0YhHPOXZB7rCyE3vF6YzjMRi2yG1PPO0HbZycvCF0w9zw9
xpS7KwGeYb/K6VJ0LE6rSZXWwBjV1OEObwlUCqf3G9yO0V7IUSI61aoafjIJmd5b
kQOWevG5fjR+W/6xzpN5o/IXqQSsHOT9kaXM4IsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS1S1ihfgTA/toWhuir/N2A52P6WDAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L3RVdFlvWDRFd1A3YUZvYm9xX3pkZ09kai1sZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFjcLQMEAFjcMzANBgkqhkiG9w0B
AQsFAAOCAQEAM9ohlD3ZQUOw3EX0TO/IKM+dXwlO6/rKcMHLjUaWKjZtWK9Mg+ky
9yLGyw+gS9WBHgI+/hKPT3BtM41/br1wEzCtN6QSq9GeZDo6zzMLN3gLliW4ZaA3
q2wZB0OqvsVEqcA9OYmkmYAoJZjTaBwEOqhpUCAS5QLpVvwuGtcGiWp7OReVlXu9
99ZQnOxROLNNxBiEGkmJSCbDDOrFBbmtkYpePTUoAQK6FpJPv/GfZB2HZA3ZL72f
Qp3zKjfFvUWV8HK06KkUdOJhOd785bsBPqT0QcOPl9ZC1iwKiPdbLrfU8Lq0ADK9
YBrj9a2ASliPcFksRv2FtDxDzkHKlK5fNQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:35 2025 by rpki-client