Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/xOFta5JjDbeUQ7ALrdlifd1eVgw.roa
File: xOFta5JjDbeUQ7ALrdlifd1eVgw.roa (raw, json)
Hash identifier: cITw55lSfHF5QwXD8RD07pLUAc8NqlAnf3aeu0oLoqI=
Subject key identifier: C4:E1:6D:6B:92:63:0D:B7:94:43:B0:0B:AD:D9:62:7D:DD:5E:56:0C
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CA6B755C31C1024B307DB2704196A
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/xOFta5JjDbeUQ7ALrdlifd1eVgw.roa
Signing time: Mon 02 Jan 2023 03:35:43 +0000
ROA not before: Mon 02 Jan 2023 03:35:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 88.218.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a6:b7:55:c3:1c:10:24:b3:07:db:27:04:19:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4e16d6b92630db79443b00badd9627ddd5e560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:9c:39:16:19:f5:de:b7:9d:e7:10:72:0a:
e6:31:4f:84:b5:54:a4:d5:08:37:c4:c5:fb:7c:41:
ff:88:de:19:f6:db:63:59:41:8d:80:f7:00:62:96:
28:33:9d:62:be:5e:a4:83:fa:f6:a8:fe:e9:80:0c:
94:db:b0:6e:a2:6d:15:cd:8d:e4:68:bc:fa:c5:cc:
2b:bf:f5:ef:5e:b3:b7:22:fa:e5:26:3c:b8:ec:57:
8f:17:3e:88:f0:09:8a:9b:7c:20:d0:60:4c:e6:c1:
b3:93:b0:a0:bf:12:74:6d:83:1f:28:db:3b:ac:dc:
98:60:d1:8b:c0:63:3a:19:48:03:f9:bc:5f:55:7f:
35:24:67:99:ac:10:6c:ca:95:25:ad:f5:d7:17:30:
b9:c7:65:2e:a1:e0:68:c3:43:51:dc:73:d8:70:53:
ec:ef:98:10:86:1e:eb:80:50:80:29:2e:4c:40:f6:
db:f0:fe:1c:40:de:c4:47:4f:38:c1:06:31:c2:fc:
54:0b:89:50:45:30:5a:b3:82:ec:e1:3b:0e:84:7f:
42:0d:a8:68:95:08:ed:5a:c3:ef:2b:bd:c1:0a:3a:
8c:c9:0f:69:af:9f:ae:d2:60:ed:f0:13:29:5c:18:
bd:75:e2:08:ab:ed:f8:19:b1:4c:19:69:2e:8a:f5:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:6D:6B:92:63:0D:B7:94:43:B0:0B:AD:D9:62:7D:DD:5E:56:0C
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/xOFta5JjDbeUQ7ALrdlifd1eVgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:66:6b:8f:b7:83:21:83:ba:04:36:88:28:62:53:64:1c:41:
14:4a:3a:3a:4a:eb:eb:24:b1:dc:67:bc:36:64:78:aa:e4:ca:
13:b0:dd:30:a2:6a:7a:65:fd:d2:07:60:d5:f9:4a:a4:ba:cb:
ce:0c:77:3f:75:77:14:88:0a:14:97:7e:68:e4:0b:4d:bc:8b:
40:b1:f0:59:d1:8e:4b:eb:64:1e:fd:b3:b3:df:a3:13:10:6b:
2c:19:3d:c6:3a:f0:d5:16:2e:27:bf:d0:7a:fd:47:b4:26:0f:
a7:eb:51:12:de:b7:21:6b:7c:c3:75:e1:e7:b0:6b:03:3c:8b:
67:40:bc:8c:e2:4d:12:bb:88:98:62:cd:55:98:52:7d:13:c4:
62:29:33:04:00:ed:a3:48:71:62:3b:71:48:3c:89:d5:7f:b4:
c0:09:9a:c5:6b:87:8d:40:3d:45:50:32:fa:e5:40:57:cb:1c:
ac:ca:51:b7:3b:b9:80:7e:63:a4:b0:97:0f:4e:ca:b0:f4:f1:
72:39:44:47:77:65:99:0c:03:fd:f1:c0:2e:c4:e6:68:36:37:
a6:b8:93:c1:22:b5:3e:ab:df:ac:7c:5d:4f:0b:f5:53:ec:6b:
76:8e:e1:b9:98:40:4a:1c:e7:32:83:40:05:91:63:b8:78:75:
29:77:cb:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjKa3VcMcECSzB9snBBlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjY5N2M5ZWZkYTk1NWNiYTNlNmY4OTcwZDcyZTk5NmJm
M2MxNjUwHhcNMjMwMTAyMDMzNTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGUxNmQ2YjkyNjMwZGI3OTQ0M2IwMGJhZGQ5NjI3ZGRkNWU1NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvacORYZ9d63necQcgrmMU+EtVSk
1Qg3xMX7fEH/iN4Z9ttjWUGNgPcAYpYoM51ivl6kg/r2qP7pgAyU27Buom0VzY3k
aLz6xcwrv/XvXrO3IvrlJjy47FePFz6I8AmKm3wg0GBM5sGzk7CgvxJ0bYMfKNs7
rNyYYNGLwGM6GUgD+bxfVX81JGeZrBBsypUlrfXXFzC5x2UuoeBow0NR3HPYcFPs
75gQhh7rgFCAKS5MQPbb8P4cQN7ER084wQYxwvxUC4lQRTBas4Ls4TsOhH9CDaho
lQjtWsPvK73BCjqMyQ9pr5+u0mDt8BMpXBi9deIIq+34GbFMGWkuivUUAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMThbWuSYw23lEOwC63ZYn3dXlYMMB8GA1UdIwQY
MBaAFJJml8nv2pVcuj5viXDXLplr88FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQt
MmE0NzEzZWViZmYzLzEveE9GdGE1SmpEYmVVUTdBTHJkbGlmZDFlVmd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQtMmE0NzEzZWViZmYz
LzEva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNouMA0G
CSqGSIb3DQEBCwUAA4IBAQB/ZmuPt4Mhg7oENogoYlNkHEEUSjo6SuvrJLHcZ7w2
ZHiq5MoTsN0womp6Zf3SB2DV+UqkusvODHc/dXcUiAoUl35o5AtNvItAsfBZ0Y5L
62Qe/bOz36MTEGssGT3GOvDVFi4nv9B6/Ue0Jg+n61ES3rcha3zDdeHnsGsDPItn
QLyM4k0Su4iYYs1VmFJ9E8RiKTMEAO2jSHFiO3FIPInVf7TACZrFa4eNQD1FUDL6
5UBXyxysylG3O7mAfmOksJcPTsqw9PFyOURHd2WZDAP98cAuxOZoNjemuJPBIrU+
q9+sfF1PC/VT7Gt2juG5mEBKHOcyg0AFkWO4eHUpd8tc
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:58 2025 by rpki-client