Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/3O4_9YyMgfYK4_OJSUeVao_Hn0U.roa
File: 3O4_9YyMgfYK4_OJSUeVao_Hn0U.roa (raw, json)
Hash identifier: KpMSSUf66G6VvJGhzpk7IQxonk0C6ocXeU+VU/yixs4=
Subject key identifier: DC:EE:3F:F5:8C:8C:81:F6:0A:E3:F3:89:49:47:95:6A:8F:C7:9F:45
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 01835F57C29DC97DFBF051A5E55D0E44AE1E
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/3O4_9YyMgfYK4_OJSUeVao_Hn0U.roa
Signing time: Wed 21 Sep 2022 09:18:50 +0000
ROA not before: Wed 21 Sep 2022 09:18:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 178.20.28.0/22 maxlen: 24
88.218.45.0/24 maxlen: 24
88.218.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:57:c2:9d:c9:7d:fb:f0:51:a5:e5:5d:0e:44:ae:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Sep 21 09:18:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcee3ff58c8c81f60ae3f3894947956a8fc79f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:45:e4:c5:1d:75:c7:ce:6a:76:43:27:5b:
1a:d5:b5:65:3b:dc:f4:f0:44:46:15:b5:7a:06:6b:
f9:17:a4:68:22:68:83:93:7b:22:f9:66:53:a4:de:
de:0e:86:eb:1f:76:b0:ef:89:87:b1:59:a6:be:50:
72:fd:32:2e:7d:50:6e:5d:49:2d:b2:6c:ff:24:70:
54:75:9e:df:79:1b:4e:bd:23:6f:53:11:18:71:d2:
54:16:4b:6b:5f:54:53:ba:73:c1:81:43:67:f5:94:
b4:5a:59:c1:1f:1b:7f:9d:61:fa:ca:b9:7c:cd:7d:
c7:4f:28:2e:72:3e:49:2b:3c:56:b3:f5:14:eb:2d:
d1:cf:5a:ea:24:ea:25:9f:37:f8:9c:8d:46:77:29:
fb:f8:91:f8:3b:31:03:a0:34:39:1f:8f:b9:0d:66:
90:b5:d6:b6:45:fa:23:53:9b:23:a2:7c:3c:d4:c9:
0c:14:7d:32:ba:93:1b:c7:9e:f8:5d:1b:f9:4a:18:
48:3b:14:a3:dc:6b:f3:9b:9d:ef:d7:0b:b9:fb:45:
d7:86:ec:a3:7f:cd:d7:b6:77:b0:b1:75:6b:9a:da:
4c:c9:93:31:4e:bd:67:92:71:3d:ca:ee:bc:74:59:
9b:fb:4e:52:93:86:4c:be:3e:c8:03:f1:4e:34:79:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:3F:F5:8C:8C:81:F6:0A:E3:F3:89:49:47:95:6A:8F:C7:9F:45
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/3O4_9YyMgfYK4_OJSUeVao_Hn0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.45.0/24
88.218.47.0/24
178.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
16:58:a5:61:c4:66:6a:e5:62:8a:2d:39:82:db:c6:4d:7e:8a:
29:fb:4f:74:44:23:19:82:df:e6:57:2c:7f:8f:02:ac:a0:54:
57:04:c8:72:13:83:a5:bb:d1:4a:64:48:e7:0c:cf:71:48:54:
df:f9:87:69:6f:f5:e0:25:83:39:d3:87:21:22:71:ef:9a:45:
04:e4:83:52:13:20:97:da:54:7a:f2:6f:a4:b5:b0:37:49:2f:
c5:9d:18:f4:24:8a:a5:5e:06:e7:c5:dc:1c:5d:45:2b:07:50:
42:b8:be:45:4d:b4:38:78:cb:33:53:ff:64:9c:40:b9:55:a6:
9c:a8:5b:53:1f:5c:a2:fe:ab:17:55:12:e8:e9:48:aa:23:e0:
7f:57:0a:60:97:e7:72:f5:34:d4:57:93:b9:9d:89:3a:e8:20:
a1:62:71:e9:27:77:80:84:24:1d:d0:77:2a:3d:6c:2c:a5:b3:
1d:9d:72:d0:f8:40:97:3e:f8:da:f1:e6:1a:33:6d:e6:3e:2b:
9b:e7:fd:c7:fe:38:82:bb:70:5b:aa:3a:4a:39:47:b2:dd:db:
e9:02:3a:0f:57:40:4a:1f:df:23:f0:b3:76:6f:e3:fc:2b:af:
61:4a:2b:41:a4:ce:23:94:ce:c8:b0:44:94:14:c3:9e:2a:c1:
01:4c:f5:2b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYNfV8KdyX378FGl5V0ORK4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjY5N2M5ZWZkYTk1NWNiYTNlNmY4OTcwZDcyZTk5NmJm
M2MxNjUwHhcNMjIwOTIxMDkxODUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2VlM2ZmNThjOGM4MWY2MGFlM2YzODk0OTQ3OTU2YThmYzc5ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxdF5MUddcfOanZDJ1sa1bVlO9z0
8ERGFbV6Bmv5F6RoImiDk3si+WZTpN7eDobrH3aw74mHsVmmvlBy/TIufVBuXUkt
smz/JHBUdZ7feRtOvSNvUxEYcdJUFktrX1RTunPBgUNn9ZS0WlnBHxt/nWH6yrl8
zX3HTygucj5JKzxWs/UU6y3Rz1rqJOolnzf4nI1Gdyn7+JH4OzEDoDQ5H4+5DWaQ
tda2RfojU5sjonw81MkMFH0yupMbx574XRv5ShhIOxSj3Gvzm53v1wu5+0XXhuyj
f83XtnewsXVrmtpMyZMxTr1nknE9yu68dFmb+05Sk4ZMvj7IA/FONHk/5QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNzuP/WMjIH2CuPziUlHlWqPx59FMB8GA1UdIwQY
MBaAFJJml8nv2pVcuj5viXDXLplr88FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQt
MmE0NzEzZWViZmYzLzEvM080XzlZeU1nZllLNF9PSlNVZVZhb19IbjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQtMmE0NzEzZWViZmYz
LzEva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNotAwQA
WNovAwQCshQcMA0GCSqGSIb3DQEBCwUAA4IBAQAWWKVhxGZq5WKKLTmC28ZNfoop
+090RCMZgt/mVyx/jwKsoFRXBMhyE4Olu9FKZEjnDM9xSFTf+Ydpb/XgJYM504ch
InHvmkUE5INSEyCX2lR68m+ktbA3SS/FnRj0JIqlXgbnxdwcXUUrB1BCuL5FTbQ4
eMszU/9knEC5VaacqFtTH1yi/qsXVRLo6UiqI+B/Vwpgl+dy9TTUV5O5nYk66CCh
YnHpJ3eAhCQd0HcqPWwspbMdnXLQ+ECXPvja8eYaM23mPiub5/3H/jiCu3BbqjpK
OUey3dvpAjoPV0BKH98j8LN2b+P8K69hSitBpM4jlM7IsESUFMOeKsEBTPUr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org