Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/kAyD-iamG8PuwFNIujY2KowQdcE.roa
File: kAyD-iamG8PuwFNIujY2KowQdcE.roa (raw, json)
Hash identifier: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=
Subject key identifier: 90:0C:83:FA:26:A6:1B:C3:EE:C0:53:48:BA:36:36:2A:8C:10:75:C1
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019425222B6A696DBDEA99157F5DE9C26788
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/kAyD-iamG8PuwFNIujY2KowQdcE.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 88.222.208.0/20 maxlen: 24
88.222.223.0/24 maxlen: 24
88.222.240.0/21 maxlen: 24
88.223.80.0/20 maxlen: 24
88.223.80.0/21 maxlen: 24
88.223.88.0/22 maxlen: 24
88.223.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2b:6a:69:6d:bd:ea:99:15:7f:5d:e9:c2:67:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=900c83fa26a61bc3eec05348ba36362a8c1075c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:c9:ee:6f:45:81:a5:78:55:b0:09:fe:08:
5f:e8:21:28:16:b1:1e:be:c8:de:03:a3:52:a0:72:
5e:5d:c5:7b:4c:66:a5:5f:12:c4:25:24:71:63:f7:
ee:67:57:9c:73:6c:7f:72:85:e0:c1:4a:3c:4d:8d:
3a:00:ae:2c:d0:db:2b:14:35:1c:04:2d:3f:ab:00:
6b:0f:cc:6e:55:88:4f:d9:32:2c:ff:b9:af:07:ff:
54:84:56:5f:79:2a:05:df:8e:fb:55:68:99:1b:e5:
25:e0:ad:c1:30:34:25:d5:86:ea:6e:37:7f:58:91:
72:a9:b6:c3:aa:75:4c:14:db:5e:7e:89:b5:2d:86:
04:58:66:bc:a9:25:62:ea:0e:e5:5d:13:f1:e5:05:
5b:37:a9:18:a7:aa:79:86:3f:92:04:2c:fc:76:1d:
78:04:8b:40:c0:f2:f2:07:ca:92:af:62:d0:b9:63:
29:e2:2a:9e:66:0b:99:86:a6:b9:5d:54:94:75:0d:
cf:c2:46:b7:27:4c:f4:e0:a5:22:26:d5:32:ed:e6:
1c:35:b0:38:00:73:fa:34:f1:a9:59:51:92:13:a5:
16:9b:b2:aa:6b:6f:9b:56:61:16:ac:cc:7e:11:44:
79:71:34:c5:0c:84:63:e4:fe:29:a2:33:90:28:42:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:83:FA:26:A6:1B:C3:EE:C0:53:48:BA:36:36:2A:8C:10:75:C1
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/kAyD-iamG8PuwFNIujY2KowQdcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.222.208.0/20
88.222.240.0/21
88.223.80.0/20
Signature Algorithm: sha256WithRSAEncryption
56:62:f8:12:06:86:40:8a:59:f5:36:7f:87:bc:24:0e:f4:62:
a9:4b:e5:55:9e:e1:28:10:52:98:f8:cb:72:ef:ca:d4:2a:99:
40:2b:98:44:ed:9e:dd:09:b3:0f:52:a3:49:bf:8f:ef:64:42:
6d:36:35:48:3c:20:10:c6:e3:23:9b:0b:9d:0a:7a:1f:4c:3a:
91:d1:07:06:21:b5:b5:00:ed:06:70:ed:d2:eb:83:18:fc:8b:
66:b0:50:37:98:5d:a1:bf:19:37:ed:d6:a1:d0:fb:ea:88:2e:
ea:c1:6d:15:fc:8a:0c:7d:f3:8f:8e:be:00:4a:8b:7f:fe:18:
3b:15:ff:97:38:65:6f:83:c3:72:70:b0:ca:29:ab:88:69:b8:
ea:0d:f8:e7:10:41:4b:5a:41:90:bc:14:60:2c:5f:38:cb:e1:
e7:ea:bd:1a:d2:5e:a6:65:bb:52:fd:23:b1:bd:56:16:d5:4d:
f7:1f:1f:0d:33:09:8a:a3:20:3c:76:82:91:37:c7:3a:28:de:
6d:6c:c6:1c:6e:c0:ed:ee:70:4e:19:d2:9d:45:50:36:6c:71:
ac:90:67:f2:29:b1:8f:b9:cd:03:83:25:cf:d3:a2:7f:79:f8:
69:3a:e0:5b:99:47:de:85:5b:49:a9:5b:c5:21:b9:3d:d0:d8:
c2:71:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:13:56 2025 by rpki-client