Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/8NDO5JGoxVVbQS1HypG5KhwKfQk.roa
File: 8NDO5JGoxVVbQS1HypG5KhwKfQk.roa (raw, json)
Hash identifier: 0xdKkOzvIHv037unCktJweJsucAR4l3K83PuWAsW+rU=
Subject key identifier: F0:D0:CE:E4:91:A8:C5:55:5B:41:2D:47:CA:91:B9:2A:1C:0A:7D:09
Certificate issuer: /CN=45b7f44253c57ffd3ced58ee835d1c219f227d6c
Certificate serial: 9EA4
Authority key identifier: 45:B7:F4:42:53:C5:7F:FD:3C:ED:58:EE:83:5D:1C:21:9F:22:7D:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rbf0QlPFf_087Vjug10cIZ8ifWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/8NDO5JGoxVVbQS1HypG5KhwKfQk.roa
Signing time: Thu 09 Jun 2022 00:37:02 +0000
ROA not before: Thu 09 Jun 2022 00:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212170
IP address blocks: 88.218.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40612 (0x9ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b7f44253c57ffd3ced58ee835d1c219f227d6c
Validity
Not Before: Jun 9 00:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d0cee491a8c5555b412d47ca91b92a1c0a7d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:73:cb:55:75:43:7e:60:d1:5e:34:38:93:
e4:7d:32:d3:1a:ba:d4:af:d6:53:fb:22:ef:4a:25:
5b:bd:ba:68:52:8b:87:a7:6c:cc:15:fd:f4:67:bd:
fb:b8:16:cd:b2:ce:27:9f:3f:fd:3f:63:41:2c:2e:
60:5e:53:4b:74:d7:a1:ad:99:54:d5:6e:68:39:61:
ee:46:18:be:63:16:a5:5f:59:a9:7f:0f:c0:29:ce:
a5:d6:cf:8c:0e:75:b3:97:a3:08:ac:24:48:53:30:
fa:96:c0:dc:e3:58:55:12:b6:7c:58:93:cc:cb:c0:
68:ba:ac:dd:c4:01:25:c3:db:48:89:2e:21:e5:e8:
68:c4:d0:3b:67:a7:5e:39:43:25:bc:33:2c:d3:1e:
32:c7:5f:32:19:5e:3a:f9:86:96:9b:f2:2c:dc:4b:
01:19:e2:03:0e:d1:72:0e:33:1a:53:94:ce:51:59:
f8:e4:74:b8:19:46:53:76:7e:77:49:e8:6b:cb:16:
69:4a:2f:51:3c:b2:4a:37:3c:49:eb:81:94:8a:a7:
bc:9c:56:24:7a:45:d7:e8:a5:7d:97:31:79:4b:0d:
c2:d0:0e:47:74:9c:f4:ed:3c:e0:ff:f5:9b:9f:92:
c1:f0:0b:32:bd:bd:92:0b:d1:6f:cd:aa:c7:4d:0a:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D0:CE:E4:91:A8:C5:55:5B:41:2D:47:CA:91:B9:2A:1C:0A:7D:09
X509v3 Authority Key Identifier:
keyid:45:B7:F4:42:53:C5:7F:FD:3C:ED:58:EE:83:5D:1C:21:9F:22:7D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbf0QlPFf_087Vjug10cIZ8ifWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/8NDO5JGoxVVbQS1HypG5KhwKfQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/Rbf0QlPFf_087Vjug10cIZ8ifWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:18:1a:f4:74:10:cb:8a:25:e1:cf:61:b5:10:ec:e8:01:cd:
45:d7:6a:9d:22:ea:f6:4c:d0:9a:f0:56:3e:21:6d:6f:50:23:
53:0b:4b:b8:88:30:45:36:4d:00:bf:ed:ac:c7:a9:30:3a:34:
bd:e0:da:f1:bb:d4:3a:0d:8b:81:bf:74:c4:1d:82:a6:61:6d:
1a:0c:05:7d:a6:fa:e9:44:6d:81:2a:8f:53:77:67:e0:0d:7a:
ba:51:ae:32:d3:d6:f8:41:21:8e:55:cf:3c:12:6b:0d:da:79:
5f:1f:fe:43:bb:6b:3d:c2:8d:a7:f5:03:d4:26:5b:be:00:89:
55:ae:6b:a1:63:96:c2:a3:81:a4:8b:cb:c8:23:f6:20:08:6a:
30:ea:e2:7d:b3:01:50:e1:53:b2:b0:fb:aa:0d:05:4e:00:d9:
34:b6:86:c2:b2:c6:41:3d:98:f6:43:8f:09:52:0a:b9:93:f1:
35:ad:06:e6:7b:53:49:ea:28:76:d3:21:9e:ab:92:e2:19:31:
0a:cf:e9:c7:a7:f9:54:d0:d2:f5:bb:2e:2d:7b:a3:e8:be:73:
2f:12:00:cc:e7:dc:6f:bc:36:49:cc:65:97:f9:41:ad:72:4f:
72:b6:f0:af:cf:b5:18:e7:a5:a2:88:09:cf:49:04:ac:90:f4:
9c:c0:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:00 2024 by rpki-client on console-ams.rpki-client.org