Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/m-FVQHcG7Z8QeDB8FTPSw0bERv8.roa
File: m-FVQHcG7Z8QeDB8FTPSw0bERv8.roa (raw, json)
Hash identifier: LeDJPlMuPDFx+y9aQE7hnWyNT5m0YyyqN8a/XMFrytU=
Subject key identifier: 9B:E1:55:40:77:06:ED:9F:10:78:30:7C:15:33:D2:C3:46:C4:46:FF
Certificate issuer: /CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Certificate serial: 01856D9D131780A7E7B4013CB203C4EACA59
Authority key identifier: 57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/m-FVQHcG7Z8QeDB8FTPSw0bERv8.roa
Signing time: Sun 01 Jan 2023 13:54:48 +0000
ROA not before: Sun 01 Jan 2023 13:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25144
IP address blocks: 188.124.219.0/24 maxlen: 24
188.124.196.0/22 maxlen: 24
188.124.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:13:17:80:a7:e7:b4:01:3c:b2:03:c4:ea:ca:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Validity
Not Before: Jan 1 13:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9be155407706ed9f1078307c1533d2c346c446ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:a0:82:e2:62:d5:72:c9:1c:4c:aa:fb:46:
cb:82:ee:c0:72:25:54:b2:0f:c4:6c:a0:fb:14:50:
f4:5f:33:43:cc:6e:bc:1c:4a:3a:ad:d9:b0:ae:35:
dc:60:16:23:77:23:84:3b:39:6e:ed:b9:88:dd:9a:
52:3d:cf:f5:66:79:69:6d:81:1b:b3:04:c2:fc:99:
90:7e:cf:6a:95:8a:e8:e6:24:49:e1:c2:68:64:52:
6a:99:62:b7:db:84:c2:ca:a5:93:e5:40:88:7e:ee:
0c:d1:7f:ce:63:19:1e:d9:a5:04:8e:e4:c3:4d:3b:
99:cd:9f:4d:98:8e:a6:83:1e:54:5c:e9:ad:6e:6f:
f7:ec:73:09:79:75:00:aa:ea:b5:8c:2e:86:10:b6:
25:7a:5e:8d:71:00:ef:14:ba:7e:41:1b:77:a0:f9:
87:20:57:17:f3:92:66:f3:e6:7e:53:3f:c0:88:79:
83:5c:7a:2f:8d:60:54:50:30:cf:d2:46:f5:8b:50:
cd:e8:73:b2:89:0f:69:4d:e6:b4:cf:80:42:95:f1:
40:f0:ac:5d:89:73:f7:81:9c:45:ec:2a:e3:da:11:
18:25:fc:5c:73:69:03:22:b2:d2:10:70:88:23:1e:
e2:d9:d6:fc:f5:ea:07:e9:fa:d4:13:4e:95:65:1c:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:55:40:77:06:ED:9F:10:78:30:7C:15:33:D2:C3:46:C4:46:FF
X509v3 Authority Key Identifier:
keyid:57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/m-FVQHcG7Z8QeDB8FTPSw0bERv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.196.0/22
188.124.202.0/24
188.124.219.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e6:39:d2:33:b4:c5:54:fe:dc:29:89:5d:11:50:aa:6c:1c:
06:1e:48:a9:4c:35:a6:73:80:85:58:3e:be:fe:8b:e0:6c:37:
73:1f:35:e2:85:da:a4:5e:f5:80:e3:c5:d7:3c:05:b8:4a:0c:
ac:57:80:dc:e3:28:0f:11:23:5d:59:fd:0a:dd:a1:55:e1:e7:
50:d2:b6:f2:7d:4c:ea:58:2d:8c:78:a8:39:e5:58:f5:26:46:
0a:52:37:11:35:8c:0a:b0:83:3f:9e:c8:68:2b:b8:0f:52:1d:
fb:e2:37:4f:9c:8c:b6:68:3f:b2:c5:9a:eb:d7:44:17:c3:39:
5e:9a:ee:b6:a0:a9:10:d4:02:58:46:82:36:7d:76:e1:51:d6:
ef:4c:d6:38:40:5a:fe:b8:43:5f:20:47:0a:de:23:90:b9:96:
5f:7e:03:56:5a:95:5c:42:9f:bf:87:6f:bc:0e:7c:c3:f3:1e:
27:5c:56:0b:e4:ab:02:a2:28:cd:de:5c:9c:fe:a9:3a:ca:bc:
62:51:59:be:a3:7b:18:c2:da:5c:13:84:8a:f4:a0:fc:18:12:
73:38:0c:2c:d7:e8:e8:b3:22:63:bf:e1:7a:1b:19:a2:54:1e:
90:37:5b:b1:66:0b:3d:ef:5c:3d:76:25:8b:c6:53:5d:a5:bb:
c7:e5:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:36 2025 by rpki-client