Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4dGk5okWs2IFbydyb9tzcycBoyE.roa
File: 4dGk5okWs2IFbydyb9tzcycBoyE.roa (raw, json)
Hash identifier: qE1oxr5zTK886MeVrYuXAogNvB3jU4fSWZFJcDF/pQ8=
Subject key identifier: E1:D1:A4:E6:89:16:B3:62:05:6F:27:72:6F:DB:73:73:27:01:A3:21
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194639931C15204B17C27B4ADB6F13EC1E9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4dGk5okWs2IFbydyb9tzcycBoyE.roa
Signing time: Tue 14 Jan 2025 06:56:11 +0000
ROA not before: Tue 14 Jan 2025 06:56:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 88.216.70.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:99:31:c1:52:04:b1:7c:27:b4:ad:b6:f1:3e:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 14 06:56:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1d1a4e68916b362056f27726fdb73732701a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:6c:ca:59:3e:b7:67:9d:ca:68:3e:1d:e6:
a9:b3:5b:25:82:04:08:d3:d0:be:0f:b9:2c:1f:d3:
5a:45:44:18:ce:fe:b1:5b:17:33:6c:46:90:23:47:
fa:ff:83:b3:05:f7:75:df:6e:2f:89:65:0c:ac:7e:
a9:8e:dd:1b:16:99:7a:8d:b7:b5:6a:6a:6e:d9:8f:
66:bb:63:98:b4:0b:23:56:1e:f1:d9:37:68:db:51:
99:5b:ba:20:c8:4e:82:78:20:49:c4:83:89:87:02:
9c:88:bb:c8:9d:c2:cf:a5:c8:f4:b9:11:e8:07:2c:
3a:0c:08:57:3c:97:0a:d5:cd:50:f8:7f:80:c1:09:
d5:c8:9f:01:df:73:5d:d6:f2:04:06:9c:08:2b:17:
08:18:d9:8e:00:1f:87:85:c5:55:de:7c:56:15:ee:
7c:fd:e6:28:0b:ef:bc:e1:70:ea:6b:66:85:6d:89:
5b:09:d9:a7:a9:99:77:94:63:96:57:f2:c2:7f:94:
02:10:2b:3c:4d:7f:3f:2d:e3:f6:f7:27:e3:14:39:
c6:9b:a9:90:a1:b7:b5:e6:08:51:85:24:e8:14:42:
d6:98:a2:5c:75:0e:09:ff:b9:37:e3:f1:76:0d:04:
33:ff:31:ab:b0:b2:18:6f:9d:a6:db:6c:c9:c5:10:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:A4:E6:89:16:B3:62:05:6F:27:72:6F:DB:73:73:27:01:A3:21
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4dGk5okWs2IFbydyb9tzcycBoyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.70.0/24
88.216.127.0/24
Signature Algorithm: sha256WithRSAEncryption
61:af:cd:90:8a:05:71:b1:80:b2:c5:6b:13:d0:57:36:ac:ff:
29:a6:92:72:39:16:10:1e:d8:72:8f:f6:55:14:bf:70:e0:10:
68:d9:11:1e:89:98:75:a3:3a:dc:e4:8b:82:45:42:3b:bf:fd:
d8:5c:03:ad:da:63:83:31:7b:09:82:ef:93:f0:1f:45:68:82:
a2:67:0a:c7:55:dc:23:80:5b:bb:a8:41:52:6a:4b:e2:ac:9e:
79:79:e9:f8:9e:f3:84:5f:0f:6c:0d:6c:1a:e7:70:14:c4:73:
79:2b:3b:57:8d:c5:b0:48:ba:6e:3d:57:d8:83:a8:e9:ac:30:
66:ad:56:7c:0c:80:bb:57:14:52:cf:45:26:62:90:ac:cc:b4:
83:2f:c0:e5:f7:64:88:03:5f:ee:65:45:c3:96:e1:d1:6a:37:
be:70:f1:62:06:81:12:15:95:0c:db:c4:59:3f:76:1b:56:62:
43:8e:d7:89:11:e5:28:29:90:6a:e4:46:43:37:75:d6:ab:8f:
8a:0a:a6:ef:78:63:7b:68:31:98:6d:37:f3:9d:d1:90:1d:92:
dd:0e:f9:b4:87:cc:9f:e4:b3:4a:67:a2:22:97:50:1c:8c:31:
87:2d:72:49:20:0b:44:1b:5c:38:16:46:a0:fc:ae:e8:ca:ab:
68:7d:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:39 2025 by rpki-client