Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa
File: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (raw, json)
Hash identifier: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=
Subject key identifier: 4F:3E:31:20:A1:CB:4D:9C:4E:24:E9:20:61:E1:D7:E6:9E:24:D2:0F
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266BA0616CEE2592B2A8A1D9DD8A8459
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209281
IP address blocks: 88.148.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a0:61:6c:ee:25:92:b2:a8:a1:d9:dd:8a:84:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f3e3120a1cb4d9c4e24e92061e1d7e69e24d20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:d5:eb:b6:d6:ac:3e:7b:ae:91:ff:aa:85:
28:93:1c:12:3b:97:e6:a6:43:ea:81:e8:d6:d5:6b:
3b:ac:55:ba:f2:62:02:5e:67:99:8c:6f:6e:07:28:
e4:05:79:10:93:a9:b9:79:04:30:0a:24:11:5d:68:
47:ed:77:5e:1f:21:5d:26:04:14:f2:27:43:7d:84:
fb:30:1a:39:77:04:c0:95:2d:a0:f3:5f:11:da:ba:
cc:26:b7:b9:20:f7:02:e3:dd:c9:5b:5b:22:33:14:
24:ce:52:03:cb:a4:76:47:aa:41:ad:fe:0e:60:1a:
a3:10:95:43:59:2b:14:01:f0:80:21:31:5c:7a:b4:
85:d7:9a:45:24:21:a6:aa:25:89:93:45:9b:46:8a:
4f:be:45:56:d3:40:6f:3e:08:21:ca:b6:77:43:69:
a4:05:60:34:7e:19:56:57:d4:69:55:27:d7:51:5c:
dd:71:f1:9a:6e:55:69:d3:88:e8:bc:c3:35:9c:b5:
4f:0b:e8:d1:33:c9:04:2a:49:2e:c2:b4:cd:0d:84:
6f:3a:45:83:7e:69:41:4f:c7:b8:f3:a2:39:cd:12:
3f:1a:7e:19:ac:fb:45:d7:8c:b5:d3:51:f4:5f:81:
ac:e0:d5:ce:78:3f:b0:5b:87:a6:5a:e6:de:37:aa:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:31:20:A1:CB:4D:9C:4E:24:E9:20:61:E1:D7:E6:9E:24:D2:0F
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.148.49.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:62:da:d1:5c:4a:1c:da:9f:d3:2c:4e:0e:c2:fe:23:e6:35:
dc:b0:a9:31:ea:09:8b:9f:f6:1d:8c:f2:fb:cc:19:e1:fa:4a:
58:32:78:a9:2c:ab:39:43:59:a4:56:9e:eb:e7:7e:26:6f:72:
98:4a:2f:4a:ec:29:d2:fc:12:bd:69:81:6f:9c:d1:cc:e4:cb:
68:c4:9a:d4:af:3d:87:0a:30:39:d6:ab:dc:36:4a:f3:49:f1:
53:f2:e4:62:40:b4:58:c0:58:64:ac:b9:d4:72:fb:eb:68:ed:
1b:97:47:e6:ad:4d:55:62:3b:6f:49:50:d1:d4:5d:30:09:4b:
e8:44:5a:13:88:e6:cf:91:e3:a1:3b:20:5b:d6:a4:d6:41:1a:
db:c2:37:90:18:e1:23:3f:98:d4:f6:b5:28:df:18:16:67:e0:
6a:c8:bd:93:c8:be:a8:2a:a6:7c:03:f7:ce:81:a7:9d:ec:79:
17:99:06:2e:e0:67:93:69:a5:a1:b2:f8:c2:0c:02:3a:13:17:
79:aa:4d:5f:6f:4d:db:06:35:c1:76:42:97:ff:b8:c6:1f:e3:
2f:32:69:22:93:9d:76:25:dc:e2:c2:d3:ba:0d:e2:94:05:c3:
c6:5e:d1:93:bc:22:42:89:17:7e:e5:a0:52:4b:98:ca:51:32:
27:b6:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:07 2025 by rpki-client