Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Pkqoj5_wUq9hdMbZAgSJgM4qpR8.roa
File: Pkqoj5_wUq9hdMbZAgSJgM4qpR8.roa (raw, json)
Hash identifier: WcX/pv8gyu0TWPnwXDZ7b5lt4UjP6I9h/wE+EvklVws=
Subject key identifier: 3E:4A:A8:8F:9F:F0:52:AF:61:74:C6:D9:02:04:89:80:CE:2A:A5:1F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018AA92E2D19AF1BE80A0DA4159E20872414
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Pkqoj5_wUq9hdMbZAgSJgM4qpR8.roa
Signing time: Mon 18 Sep 2023 16:44:50 +0000
ROA not before: Mon 18 Sep 2023 16:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50887
IP address blocks: 188.214.31.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
94.177.58.0/24 maxlen: 24
46.102.191.0/24 maxlen: 24
94.177.96.0/23 maxlen: 23
94.177.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:2e:2d:19:af:1b:e8:0a:0d:a4:15:9e:20:87:24:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Sep 18 16:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4aa88f9ff052af6174c6d902048980ce2aa51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:36:c5:95:e2:91:8e:52:54:59:d5:0c:72:
70:30:ec:2b:65:9a:47:b3:da:bd:0a:ae:cc:2e:61:
84:1d:5d:80:6c:10:a8:f8:2d:b2:9c:a7:13:48:c5:
0c:da:a2:ed:3b:e7:8f:cf:8b:52:0e:e6:3f:e7:cf:
3a:5d:13:94:b2:1e:74:23:31:c2:d8:34:d0:6e:37:
67:9e:c2:47:ea:2c:17:c2:18:55:f2:7e:68:a4:fa:
f4:2d:1c:d3:a8:27:dc:32:61:8f:15:f0:18:29:a0:
fb:26:b2:e9:8a:4d:1e:3f:11:84:84:5e:d2:82:e3:
84:c0:9d:e5:6e:e2:08:2e:07:4f:e2:99:21:06:1a:
b8:b1:3d:24:6c:e6:96:c8:0d:8e:a3:63:e2:11:13:
4d:64:20:e5:78:45:5d:78:cb:4f:0d:29:23:92:da:
4f:07:b6:bb:35:79:25:28:12:5d:e6:09:8d:cd:d3:
83:77:af:50:43:b0:de:be:fe:d7:f8:3d:03:dd:d5:
59:59:c8:1d:40:9e:ac:45:48:95:a2:56:f8:dc:c0:
e7:70:f1:db:b6:3d:47:0a:6e:78:2d:ba:69:56:45:
99:1e:9d:bc:57:7b:fe:b3:49:3f:8a:33:fd:e6:b3:
d2:40:ac:f6:e7:59:9f:79:4d:aa:cc:87:42:79:ea:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:A8:8F:9F:F0:52:AF:61:74:C6:D9:02:04:89:80:CE:2A:A5:1F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Pkqoj5_wUq9hdMbZAgSJgM4qpR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.191.0/24
86.107.47.0/24
94.177.10.0/23
94.177.58.0/24
94.177.96.0/23
188.214.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:67:de:11:29:55:ab:33:f0:49:3d:92:6b:29:8b:05:18:4c:
5d:de:90:ef:61:50:c2:fd:8f:9b:77:c8:7f:24:06:53:66:e4:
f2:4b:06:f6:6c:4e:44:36:90:ab:46:6b:bb:d2:7e:96:ba:2b:
d3:2f:51:cd:29:37:91:0b:5b:83:b0:c6:9d:ca:16:50:da:b8:
c2:19:bf:c3:54:7d:df:4d:b5:80:47:f5:45:6a:58:a8:c0:6c:
8f:37:87:5d:63:2b:6f:ee:c1:79:a8:ff:c0:68:de:0f:b6:7d:
31:6f:81:3e:b8:2b:e6:c7:7b:97:bd:75:9b:46:25:64:9c:9c:
28:5a:77:f4:56:5f:31:c1:fc:ca:15:96:e5:7f:0b:69:10:50:
45:46:55:42:3f:fb:f1:25:02:23:6a:b1:41:71:d3:69:04:58:
fa:7f:91:1c:0c:bc:75:74:a7:da:23:a6:d9:49:fd:ec:c7:19:
e0:1d:23:b4:cf:cc:5a:31:ac:05:29:a3:c2:80:3c:72:c2:3b:
58:42:d4:4e:3c:1c:b2:77:d7:e9:c6:4b:66:c5:3c:af:6e:56:
82:58:b1:e8:5f:97:e6:25:75:51:06:d5:38:a3:6d:95:af:7d:
6b:72:ab:54:de:62:d6:26:39:bf:be:2f:ac:b0:56:4b:67:ac:
38:af:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:16 2025 by rpki-client