Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/kf597SMr22yM2Ia19CbhErsHI40.roa
File: kf597SMr22yM2Ia19CbhErsHI40.roa (raw, json)
Hash identifier: yRMYqtyCbqvFoDQA+WX84jPs3vEtNJuLq2SXFe5QDFM=
Subject key identifier: 91:FE:7D:ED:23:2B:DB:6C:8C:D8:86:B5:F4:26:E1:12:BB:07:23:8D
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01936DD7F6822D6C237BF9574825CE33369E
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/kf597SMr22yM2Ia19CbhErsHI40.roa
Signing time: Wed 27 Nov 2024 13:38:09 +0000
ROA not before: Wed 27 Nov 2024 13:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 88.81.160.0/22 maxlen: 22
88.81.164.0/22 maxlen: 22
88.81.168.0/22 maxlen: 22
88.81.172.0/22 maxlen: 22
88.81.176.0/22 maxlen: 22
88.81.180.0/22 maxlen: 22
88.81.184.0/22 maxlen: 22
88.81.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:d7:f6:82:2d:6c:23:7b:f9:57:48:25:ce:33:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Nov 27 13:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91fe7ded232bdb6c8cd886b5f426e112bb07238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:6b:ca:82:be:2e:5f:86:09:fa:bf:bb:a5:
59:bf:90:b4:02:12:e6:be:e0:2a:28:23:d2:1f:24:
d6:63:ac:61:9b:86:6d:7d:6d:35:3c:94:da:76:a9:
ff:c6:5d:32:11:16:5c:e9:bf:aa:36:a4:31:2b:fc:
64:24:36:7f:ea:c6:70:d2:97:46:54:f9:0c:0f:3f:
ec:bb:5e:7d:96:5e:65:08:7f:21:3e:de:3f:55:04:
d9:cb:46:a5:8f:3e:df:a2:76:c4:6e:9b:e3:5d:16:
50:b0:87:41:bb:c5:26:38:a6:05:97:61:4c:79:ce:
c7:10:e6:b1:a2:39:a6:4d:15:41:db:fe:7d:ea:4f:
49:31:15:1d:65:32:0c:ae:de:9d:d8:77:86:7f:0c:
d6:2b:7f:35:10:21:0f:38:87:b7:07:08:e3:9b:d0:
5b:29:99:a6:9c:af:34:04:a2:a4:16:49:4a:75:6b:
0f:34:78:13:07:8a:6c:e0:12:e5:33:fa:ff:64:4c:
ff:af:f0:a9:6b:9a:7b:d6:5a:f1:f4:19:04:5b:85:
1f:76:fe:6f:ad:a1:46:4a:f3:4f:60:2a:a4:40:79:
e4:04:f3:96:1a:73:86:a1:60:f4:d9:21:40:8c:e0:
bc:58:f3:e3:8f:32:e9:e1:94:61:53:46:0c:59:61:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FE:7D:ED:23:2B:DB:6C:8C:D8:86:B5:F4:26:E1:12:BB:07:23:8D
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/kf597SMr22yM2Ia19CbhErsHI40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.81.160.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:1e:80:ad:76:74:91:68:d1:16:16:65:07:8d:97:fd:41:9c:
33:78:cc:e7:3a:87:f0:14:e0:d3:21:fe:ee:28:13:4d:74:37:
6e:d3:51:52:10:ca:d4:34:9c:46:e5:df:f3:35:8b:48:92:38:
3b:a7:cf:71:0c:8a:3c:e8:00:00:90:3d:4f:3e:61:5d:d5:c4:
59:07:91:f9:69:57:ad:20:d4:8b:e2:c7:be:2b:51:be:b9:43:
75:47:19:a5:46:5d:6f:57:2e:60:0c:27:a1:11:ed:22:3e:b7:
7d:8d:3e:69:05:76:d8:71:71:e0:26:67:f2:c7:8d:0d:86:1a:
c7:a6:d5:d8:9a:94:b8:51:eb:a4:5d:23:de:2a:88:23:82:3c:
80:7a:b3:fc:be:16:2d:80:9d:c4:73:fc:32:fc:28:c8:b7:c6:
f6:c5:5a:97:c1:aa:9d:3b:ce:dd:27:ef:18:9b:45:15:c3:f3:
3c:fe:f1:04:12:9f:9a:de:40:ff:ca:14:05:70:69:c5:34:3b:
70:40:72:43:9a:54:d8:2a:35:7b:63:09:62:d9:c9:f8:f6:ae:
18:41:20:e5:f1:f4:3c:a1:b2:ba:d9:ef:2c:ab:70:22:52:c4:
53:36:ee:72:2d:bb:86:b0:71:a0:f6:c6:55:a2:64:13:af:6f:
85:51:91:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:31 2024 by rpki-client on console.sobornost.net