Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/2AcJSGQxWac0RAylg6jcA6QHhq4.roa
File: 2AcJSGQxWac0RAylg6jcA6QHhq4.roa (raw, json)
Hash identifier: bQ3jiCzAWd4uWYQW300VhZ2ExQMdzci/IYkRW6Je6Cc=
Subject key identifier: D8:07:09:48:64:31:59:A7:34:44:0C:A5:83:A8:DC:03:A4:07:86:AE
Certificate issuer: /CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Certificate serial: 41BB4879
Authority key identifier: 57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/2AcJSGQxWac0RAylg6jcA6QHhq4.roa
Signing time: Sat 01 Jan 2022 06:02:01 +0000
ROA not before: Sat 01 Jan 2022 06:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25144
IP address blocks: 188.124.219.0/24 maxlen: 24
188.124.196.0/22 maxlen: 24
188.124.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102792825 (0x41bb4879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Validity
Not Before: Jan 1 06:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8070948643159a734440ca583a8dc03a40786ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:01:18:e0:3d:5e:0a:0d:8a:b8:ec:d5:29:
a4:2c:06:76:f9:70:df:c3:eb:05:f7:c0:00:9f:77:
7d:cc:af:f2:8c:39:5c:54:93:7f:a3:a0:40:31:a2:
ac:29:40:2f:28:5d:3a:c7:22:95:8e:23:3f:90:c2:
dd:a6:8b:69:9d:55:a2:1f:3c:9e:13:83:f9:b3:20:
74:07:f6:75:77:55:65:3f:a1:d7:5f:ba:68:2f:f8:
d7:60:75:a4:f4:96:3e:76:87:06:74:2f:9b:55:46:
c7:21:f6:07:6a:31:f6:0e:e5:fd:b0:75:42:7c:d0:
07:50:90:71:61:5e:63:a2:a1:05:40:d3:8e:a1:6f:
7f:bc:a3:cc:d3:9c:0e:cf:ec:43:d1:60:ba:f8:28:
c7:10:51:77:21:4a:e6:44:7f:c7:ba:96:9c:80:b3:
56:38:ab:40:9c:fb:4d:89:89:27:6f:63:1e:4f:cd:
43:f6:83:6f:7d:16:6b:09:2d:4c:8e:ac:24:3b:79:
84:c2:b3:6e:db:75:df:0a:da:56:2e:86:2d:01:a4:
7e:be:04:32:cb:ce:4b:1f:ef:4e:cc:3c:0c:a9:71:
9b:73:c9:3c:e6:5c:f1:87:3a:db:a8:66:6f:97:3d:
68:2d:08:59:13:c9:a1:dd:ed:8e:3d:a2:45:e4:7d:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:09:48:64:31:59:A7:34:44:0C:A5:83:A8:DC:03:A4:07:86:AE
X509v3 Authority Key Identifier:
keyid:57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/2AcJSGQxWac0RAylg6jcA6QHhq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.196.0/22
188.124.202.0/24
188.124.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:40:66:18:3b:fc:9f:8e:f4:8d:18:08:d3:87:65:01:bb:67:
18:cf:0d:80:6f:0c:3f:8f:91:97:9f:2f:2d:65:2b:0a:83:45:
1f:47:c7:c0:d5:90:ae:10:92:83:85:79:90:1b:b6:a1:10:05:
a7:67:c4:7c:7e:d1:7e:9d:44:14:f2:5b:e1:86:3c:83:37:06:
3e:33:d6:1e:31:09:e1:e6:ab:0c:53:eb:1f:9f:78:68:8b:1c:
81:db:e2:dc:6d:7f:d3:65:d5:48:20:a3:28:9f:54:ab:9c:d5:
a0:17:7c:2d:94:47:14:8b:39:ed:31:d6:8d:e3:5f:dc:dc:cd:
dd:7c:1a:ca:8d:53:d8:d5:8a:f5:37:6b:e8:a6:e7:93:84:a9:
1b:fe:9f:ad:ba:2a:e6:f9:6b:93:08:4a:d2:b4:19:94:d6:3e:
30:e7:8d:d0:6e:76:8d:6a:20:20:5d:18:23:4b:cf:ea:34:90:
ad:a5:43:2c:84:6c:d1:bb:f7:0c:c0:7a:bf:85:ec:50:8d:3f:
08:45:8a:c7:32:d5:26:ad:a1:2e:43:f5:d5:a1:83:98:38:ac:
71:c6:72:0d:c2:3e:cd:e1:e8:7d:84:f1:cb:65:c3:3c:36:cf:
90:bb:55:c7:7e:ea:ca:2f:e4:f1:ff:bb:1e:8a:4e:d8:2b:8e:
be:bb:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:34 2025 by rpki-client