Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/T6C7jI6g7H_vFEBzsE74xcoSUdU.roa
File: T6C7jI6g7H_vFEBzsE74xcoSUdU.roa (raw, json)
Hash identifier: gzCLPmiINggoyhYqcBdQYwCWFpnNgeV/cbE08OXVCbU=
Subject key identifier: 4F:A0:BB:8C:8E:A0:EC:7F:EF:14:40:73:B0:4E:F8:C5:CA:12:51:D5
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CA9E4C3715DD619F3C5F8BBA8924C
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/T6C7jI6g7H_vFEBzsE74xcoSUdU.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 178.20.28.0/22 maxlen: 24
88.218.45.0/24 maxlen: 24
88.218.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a9:e4:c3:71:5d:d6:19:f3:c5:f8:bb:a8:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa0bb8c8ea0ec7fef144073b04ef8c5ca1251d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:9f:77:7b:3e:4f:d1:95:1f:47:27:28:3c:
48:17:f3:2a:1b:f8:4d:f7:e4:5e:9c:76:55:f5:4f:
7b:d1:04:69:68:83:81:cd:9a:85:5a:70:f9:71:1d:
bd:43:3e:79:b7:9e:4d:33:82:2c:84:2a:66:a3:e6:
fe:0a:0d:c8:42:ba:25:6a:9e:b3:d9:3d:58:4e:d4:
0f:08:d0:80:79:50:b7:7e:8c:3d:d4:00:5b:7e:66:
57:ee:a1:43:ea:30:17:91:7e:9a:fa:8c:c0:bf:4e:
dd:dc:bc:3d:8e:1b:f8:0b:dd:bc:ff:ce:6b:1f:83:
98:96:39:07:96:fb:a2:1d:49:ca:2b:a6:c4:37:f0:
9a:16:92:59:0c:a2:d7:0d:c9:0b:ee:da:14:0d:31:
b3:c5:95:10:ed:b0:32:ff:55:13:5e:5f:9a:01:46:
b8:b3:6a:4c:bb:e8:cc:24:53:60:49:a0:ee:99:3a:
87:65:37:4e:fe:24:03:92:89:58:e3:f1:ed:5f:0f:
04:99:7b:7e:33:69:51:b0:9c:2b:02:e2:ab:66:f2:
ac:f2:d5:de:e6:3b:18:3e:fe:46:1e:95:5f:56:b8:
fb:3c:93:d4:7d:eb:c3:89:9b:3f:a7:62:4f:f0:73:
00:89:8e:96:e2:6b:ad:9e:33:0c:95:fb:4a:01:76:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:BB:8C:8E:A0:EC:7F:EF:14:40:73:B0:4E:F8:C5:CA:12:51:D5
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/T6C7jI6g7H_vFEBzsE74xcoSUdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.45.0/24
88.218.47.0/24
178.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:0b:9e:0f:90:9f:8a:b9:c4:99:6a:75:9f:d3:32:ba:f0:1c:
e1:2c:ad:50:04:87:1b:d0:4d:0b:a3:92:bc:8b:60:fb:8d:dd:
fc:bc:f8:4e:3e:1c:3b:9e:d4:d7:bb:d9:bb:cc:ff:c3:23:c9:
2e:ed:b7:45:b5:56:d3:e9:53:9a:52:c3:c4:df:87:07:47:28:
b9:41:dc:f7:e0:7c:ab:42:9b:39:54:df:76:44:e9:82:ba:fe:
83:0c:4b:0d:c6:d0:56:9c:74:c7:d8:c0:60:b7:de:02:41:1a:
35:b5:33:6e:f2:7a:02:3a:c6:ab:c2:b6:3f:ad:91:71:ab:0b:
39:6d:4c:7e:ea:d5:5b:9f:f1:70:f9:87:88:0a:43:af:de:4b:
4f:7c:72:25:d1:4d:e3:8f:3d:fd:4f:cc:02:d3:38:22:a1:f5:
24:b6:b8:5f:67:08:e2:5f:da:1f:2a:66:5b:d1:68:cb:3e:cf:
3a:93:ac:25:82:08:45:c1:05:ac:ba:65:ea:dd:82:e5:fb:28:
fd:5b:15:cf:65:20:94:02:09:2b:7a:2e:1e:94:26:ca:27:a6:
30:26:4e:40:c3:5d:4f:0f:0f:d5:31:9b:a7:69:2f:93:52:36:
03:74:d2:47:c3:b9:6d:41:5b:10:5c:93:93:79:c0:b3:84:59:
97:f7:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:07 2025 by rpki-client