Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DONIE9atf1mZCMLwuUFx06LS7Wc.roa
File: DONIE9atf1mZCMLwuUFx06LS7Wc.roa (raw, json)
Hash identifier: WJWvbhYbXLpobSMARx23sVjBZRfk+klifqKloEG0KN4=
Subject key identifier: 0C:E3:48:13:D6:AD:7F:59:99:08:C2:F0:B9:41:71:D3:A2:D2:ED:67
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 038CE4AC
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DONIE9atf1mZCMLwuUFx06LS7Wc.roa
Signing time: Tue 10 May 2022 11:30:02 +0000
ROA not before: Tue 10 May 2022 11:30:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 46.23.109.0/24 maxlen: 24
88.151.198.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59565228 (0x38ce4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 10 11:30:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ce34813d6ad7f599908c2f0b94171d3a2d2ed67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:43:b9:11:15:d8:72:b6:1b:79:99:8d:ae:
9c:a9:4a:c2:96:85:0a:04:eb:ce:83:95:a7:ef:df:
f6:62:34:22:ee:c7:d1:25:98:2c:cd:f9:9b:eb:03:
ec:d3:3b:de:a3:68:06:87:b1:f0:5e:a3:48:16:bf:
12:08:64:27:e3:1e:65:9a:17:f8:a4:6a:04:3f:b3:
c8:aa:2f:27:a9:34:5a:4f:99:20:c9:fa:08:94:b5:
5e:d3:f9:18:84:fe:58:c4:11:ec:bd:9d:9a:b9:33:
6c:e3:bd:be:94:59:8c:bc:19:c4:6f:63:70:1d:27:
25:29:b8:b1:51:63:31:22:4b:ca:7d:73:67:9e:25:
e1:8a:bd:c6:71:2c:64:b7:99:d6:41:d9:f3:15:42:
1b:53:d2:c8:8e:1c:c5:7d:8d:01:04:a0:fd:76:2a:
91:62:a5:46:b4:fc:53:8a:37:28:74:9d:a2:31:bb:
8e:ba:2b:41:1f:44:5c:91:18:d1:09:24:1a:e5:b1:
de:51:69:b0:aa:8a:d2:6e:48:51:af:29:e7:47:8a:
ee:7e:f6:11:9f:16:15:7c:39:bf:85:ff:52:ad:7b:
c9:d3:df:71:c7:8d:77:99:5d:97:7f:7f:b1:16:12:
ea:37:f8:ac:5f:b0:a3:3a:2e:ce:b5:01:74:7e:9d:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:48:13:D6:AD:7F:59:99:08:C2:F0:B9:41:71:D3:A2:D2:ED:67
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DONIE9atf1mZCMLwuUFx06LS7Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.109.0/24
88.151.195.0/24
88.151.198.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:29:01:62:1f:15:f2:9e:f5:f7:82:e4:37:50:02:19:b2:80:
5b:40:5e:4e:2f:ae:87:90:9d:5d:5c:df:9a:47:a8:37:5a:c5:
30:aa:c0:d7:d0:d8:2a:44:eb:bf:38:22:21:db:f5:a7:70:b0:
3d:4e:0d:68:c1:da:1b:f3:86:81:28:85:7c:7b:de:1b:56:8c:
f9:3c:e5:6e:6e:ee:3e:5e:7d:88:74:5c:93:21:5e:ad:08:d3:
6b:cd:be:e7:36:ac:55:76:0f:8c:54:37:98:fc:34:d4:91:32:
07:e8:60:45:c8:e9:bf:03:23:48:bd:d0:27:a0:7c:8d:a4:4d:
9d:c2:36:57:89:12:2d:d2:d1:ea:7f:ce:5c:f8:ad:0a:0d:92:
86:95:a6:47:25:77:ca:c6:9e:12:c1:4f:10:88:d1:b7:ae:9b:
86:b2:3f:a4:37:ef:48:d7:74:e2:79:6e:c5:1d:6f:49:ed:f2:
52:37:ac:8f:27:2a:d8:c1:23:75:e7:22:73:92:eb:dd:45:21:
aa:92:b1:37:29:af:2b:10:13:55:6c:78:5e:db:ed:97:6e:dc:
0b:91:70:25:83:c9:33:d2:69:11:c5:31:c1:0a:5a:3a:04:8e:
0d:a6:cf:e4:ee:58:af:a6:5e:b7:2b:08:e6:f2:64:ba:c8:f0:
75:ea:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:17 2025 by rpki-client