Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/oyBQtIqH30MOLJ7AtqvX-WyIzs0.roa
File: oyBQtIqH30MOLJ7AtqvX-WyIzs0.roa (raw, json)
Hash identifier: 5NTIUfbLqmXdwXpephdpCVs+h8OxGJmgR1wRs5Cfkz8=
Subject key identifier: A3:20:50:B4:8A:87:DF:43:0E:2C:9E:C0:B6:AB:D7:F9:6C:88:CE:CD
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 01828469CA9935D5CE6764E89AA16EF8E7C0
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/oyBQtIqH30MOLJ7AtqvX-WyIzs0.roa
Signing time: Tue 09 Aug 2022 21:01:41 +0000
ROA not before: Tue 09 Aug 2022 21:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 178.20.28.0/22 maxlen: 24
88.218.47.0/24 maxlen: 24
88.218.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:69:ca:99:35:d5:ce:67:64:e8:9a:a1:6e:f8:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Aug 9 21:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a32050b48a87df430e2c9ec0b6abd7f96c88cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:bf:8a:0e:a3:50:91:88:75:0c:79:5b:4a:
7a:c4:42:20:3a:89:1c:1b:1a:f7:a6:77:c2:8a:ad:
49:2d:6d:3b:d4:47:7c:0c:07:76:b8:64:96:0e:4f:
ef:6b:72:98:55:f6:5e:25:da:73:bb:45:6a:20:b2:
de:a3:fc:91:31:28:94:0c:f6:65:43:94:ca:d5:a4:
0a:10:48:7d:15:0e:54:f7:9a:1a:a6:73:04:84:89:
c1:c1:c5:6c:8c:5a:8b:ce:04:7f:6c:62:da:6a:31:
8f:1b:46:79:05:02:31:61:b4:f9:21:07:83:69:66:
f2:4e:4c:1c:9c:9a:82:04:2a:ae:31:ea:4d:0b:ec:
62:25:66:15:03:bb:3e:dd:01:dc:f5:b8:7c:34:3d:
7e:a2:53:0f:7b:1a:5e:8c:4b:1b:80:1d:0b:80:c8:
00:1d:06:38:44:6e:71:b8:2f:50:0e:47:89:23:3c:
31:b2:52:5d:5c:3d:75:eb:9d:25:a1:61:38:ce:2f:
ac:93:75:94:ec:81:f2:6b:19:1e:c1:34:af:9a:1f:
24:1a:fc:36:58:fc:61:b1:11:ae:64:8e:ed:42:b4:
07:27:5d:45:ac:1d:52:a5:42:15:fe:d8:9e:ae:59:
41:a1:bf:75:b6:d0:3e:d4:93:e6:f9:5a:57:32:98:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:20:50:B4:8A:87:DF:43:0E:2C:9E:C0:B6:AB:D7:F9:6C:88:CE:CD
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/oyBQtIqH30MOLJ7AtqvX-WyIzs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.45.0/24
88.218.47.0/24
178.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:30:b1:a8:6d:91:de:04:76:2b:e6:a4:a0:0b:42:31:38:d0:
bf:20:af:4f:53:12:45:a1:a5:a5:9e:2f:ff:b8:54:d9:02:df:
e1:96:05:f6:b0:85:ff:30:cb:ab:8d:09:3a:0d:00:7e:8f:bd:
b6:d1:3a:00:13:51:85:94:00:dc:68:b0:fc:06:3e:f4:8d:a6:
36:1f:18:20:ea:cc:a5:33:12:22:cd:68:1b:e3:ea:1e:95:9b:
88:a2:e4:0e:60:c5:d0:a2:38:0a:af:12:d2:62:64:ad:ca:7c:
c3:6d:34:b4:28:59:01:43:e4:1f:91:5d:9e:8c:aa:e8:93:c3:
5a:99:78:18:f5:eb:28:41:8a:92:4a:7b:18:f8:c5:f2:bb:e0:
f4:09:c6:3a:62:51:99:91:0d:33:59:e2:c1:44:37:d3:56:d0:
3a:92:36:da:f7:1b:b3:b8:c2:0a:a2:96:25:6b:2a:ed:1f:83:
f3:a0:f0:c7:2b:3b:3e:21:09:3c:9f:38:19:d6:62:7e:0b:80:
d7:30:b2:31:44:77:11:3c:37:b1:fb:0a:09:ce:8a:0e:41:eb:
a5:b1:af:3f:8d:f8:ab:33:36:cd:ee:f6:b6:82:9d:ec:3c:ec:
02:74:39:55:50:7e:22:94:a3:a4:45:fb:9f:1e:59:07:c6:f2:
1c:52:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:43 2025 by rpki-client