Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa
File: LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa (raw, json)
Hash identifier: 7TRQZhECen5sQILgMQ/YVGL/75Sg6nbZxTLOGOZ3zSk=
Subject key identifier: 2D:7D:25:0D:58:4A:5E:7C:4B:BF:4A:FD:68:B5:C9:84:91:EE:FC:4D
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 019420D5B912A9878FA4F54E05728A6D637B
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213193
IP address blocks: 88.218.156.0/24 maxlen: 24
88.218.157.0/24 maxlen: 24
88.218.158.0/24 maxlen: 24
88.218.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b9:12:a9:87:8f:a4:f5:4e:05:72:8a:6d:63:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d7d250d584a5e7c4bbf4afd68b5c98491eefc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:50:71:91:49:ab:d9:cd:d1:92:90:bd:d3:
dd:4b:79:c9:b4:00:30:d9:f4:cc:14:01:ca:d4:5b:
30:45:17:48:b6:b6:bc:08:a0:e6:e2:14:36:63:37:
0e:bb:bb:96:43:55:ac:33:66:36:c0:dc:78:56:3e:
52:67:8a:b6:40:d4:96:df:cf:3f:82:fe:d3:d8:dc:
82:cc:fd:13:1b:c0:ab:58:4f:73:2a:b2:3f:34:74:
29:3f:f3:a0:41:40:09:c2:b2:34:3f:08:3b:df:da:
f5:56:5b:ca:e2:b7:fa:75:38:32:d6:a9:e5:7d:3e:
48:02:32:7c:41:27:23:7e:8c:e0:60:2b:f5:03:33:
7e:27:46:b6:e5:06:93:99:3d:f6:fb:d9:4b:f1:5a:
5f:f9:94:e2:93:9d:7c:f8:34:3c:f9:8e:cc:e2:ac:
cb:39:40:c2:ca:f7:20:76:3a:0b:59:0f:14:8b:2c:
73:a6:8f:0c:f2:7c:f3:03:30:45:4b:ac:02:eb:40:
06:02:15:66:35:5d:8c:61:0c:93:3a:d8:95:73:42:
a6:3d:62:f9:ff:21:8e:ac:5c:5a:ab:a9:2d:84:63:
76:73:c5:40:31:e4:cf:ee:f7:f8:fe:45:96:ed:cd:
10:df:e2:25:a6:b5:95:91:84:9f:c1:d1:3c:a7:da:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7D:25:0D:58:4A:5E:7C:4B:BF:4A:FD:68:B5:C9:84:91:EE:FC:4D
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.156.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:23:d1:ce:55:e1:e7:e9:37:42:c2:6c:34:96:52:23:5e:ec:
e6:b8:f2:2a:92:a1:ae:5b:ae:37:16:c2:cf:73:4e:be:55:c9:
ed:6b:53:56:05:d0:32:4b:6b:43:5b:d9:39:a9:47:e1:0d:86:
7b:03:82:05:e7:6f:9f:74:7f:bd:bd:7a:31:c7:e9:ea:5c:21:
a0:ab:eb:75:cb:24:19:30:95:d2:8d:1a:68:35:d1:0b:c7:78:
d3:58:5c:63:a6:8c:5a:2d:3d:ea:e2:81:8b:c6:a1:33:36:a5:
14:eb:90:34:93:c1:0d:32:03:0d:bd:c8:57:dc:8b:8f:18:36:
e3:18:b6:e5:12:8d:6c:a7:3a:d1:94:8a:f5:57:db:41:14:c1:
92:d3:e7:09:3f:61:a6:3d:65:ff:6a:41:13:00:4a:65:e9:59:
e6:6b:ed:df:e1:4d:01:37:ed:b5:36:89:a8:2c:e7:1f:40:ec:
91:6b:b6:50:2c:fb:00:d4:e6:19:0e:d4:d3:fa:ec:3e:59:84:
cf:49:f2:44:08:94:d4:6e:f8:54:28:80:87:33:68:63:f2:28:
c1:79:fb:52:55:09:62:a0:67:b8:8b:e8:49:85:4f:7f:93:29:
d9:fc:52:83:e5:76:79:8a:1b:bd:7b:1a:7f:78:bc:60:f2:20:
c4:94:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:32 2025 by rpki-client