Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/s8YTzQCjPllmRUuDRE4IISZsF0g.roa
File: s8YTzQCjPllmRUuDRE4IISZsF0g.roa (raw, json)
Hash identifier: J89y02Ib27gaY3fS/eJXUK03X90Fo4Z1uGocN19BCUw=
Subject key identifier: B3:C6:13:CD:00:A3:3E:59:66:45:4B:83:44:4E:08:21:26:6C:17:48
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 019425FD7EEF40EFEB637F4E8BC69AB1D27B
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/s8YTzQCjPllmRUuDRE4IISZsF0g.roa
Signing time: Thu 02 Jan 2025 07:49:17 +0000
ROA not before: Thu 02 Jan 2025 07:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210298
IP address blocks: 88.214.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7e:ef:40:ef:eb:63:7f:4e:8b:c6:9a:b1:d2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jan 2 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c613cd00a33e5966454b83444e0821266c1748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:1d:f2:43:26:09:1d:b4:65:b6:43:f8:87:
0b:25:9c:11:be:46:29:4b:a7:09:7d:65:80:62:eb:
91:b7:94:35:ea:47:bc:e0:0b:4b:14:b5:62:00:e5:
19:f0:ea:d1:c5:bc:52:aa:21:18:36:42:49:e2:ad:
17:89:66:30:b7:ae:0e:40:0e:7e:19:77:31:dc:ef:
7c:8c:b6:36:fb:d2:c4:18:ad:91:07:df:c2:70:cb:
39:e2:ed:2f:e6:02:cc:ef:6e:04:66:fc:6a:5b:60:
bf:0f:69:b2:e5:ab:a3:e8:f8:d6:42:67:7a:6f:57:
3f:e0:86:e1:51:b8:48:97:d1:05:f0:ed:91:19:91:
70:d1:c5:24:8c:82:2e:53:30:f9:1c:5d:03:20:1f:
43:1a:ae:18:8b:be:12:4e:84:85:dd:c6:31:cd:e5:
74:bf:a7:ca:9a:70:04:f6:84:e8:f1:3b:9a:5a:dd:
e9:bf:4c:be:a0:0d:98:0d:38:39:fc:2d:2e:00:db:
46:20:79:15:6e:ce:0c:19:d4:ee:fe:dd:6c:11:a5:
4a:18:05:19:e9:86:f5:c7:0b:3d:66:9a:ed:b1:ec:
8a:2f:57:69:a1:00:bc:bf:42:68:81:d2:e3:09:4d:
f7:97:d5:e5:51:db:f5:0f:5f:d4:19:85:ef:9d:2a:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:13:CD:00:A3:3E:59:66:45:4B:83:44:4E:08:21:26:6C:17:48
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/s8YTzQCjPllmRUuDRE4IISZsF0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:e4:0a:d3:c1:f3:4d:6b:5c:4a:5f:26:5e:84:b0:c7:33:5f:
e8:ee:37:04:20:19:05:e2:fc:bd:2b:e3:bf:85:0b:ad:e3:49:
74:52:b1:a7:fa:31:a2:84:6d:5f:0d:e5:5b:70:1e:82:a5:8f:
53:de:75:ae:30:2b:cc:43:8f:26:0a:64:de:b3:cf:3c:48:6e:
28:3c:04:c8:dc:f1:84:7e:b0:1b:b6:3b:2d:72:98:a7:92:8a:
eb:ce:37:41:74:58:f7:3a:84:e9:bb:0f:e7:dc:1a:a7:4f:d6:
db:22:39:f0:f6:7e:38:8c:d4:8b:1b:85:48:d1:da:27:99:a2:
60:33:db:d4:a5:04:10:33:20:e4:71:0d:1c:15:dc:d7:23:7e:
d8:18:d1:64:2e:26:8e:49:dc:b5:8f:94:f7:be:bf:89:27:46:
ac:9b:7a:f0:04:f8:72:29:63:e5:a0:24:29:1f:f0:96:53:ef:
4c:87:61:2a:75:15:b8:3f:fd:e1:31:98:e9:21:63:5c:5e:3b:
d5:aa:2e:a6:25:ec:2a:55:c5:5d:ab:0d:52:00:a5:22:80:98:
b9:92:78:ca:04:25:fe:70:13:59:20:e8:46:20:89:5a:56:59:
99:d1:e8:8a:ab:0a:b1:66:7d:cc:0d:c2:2d:19:db:5b:2e:3f:
72:70:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:52:51 2025 by rpki-client on console.sobornost.net