Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yKfmCaCok9fdrFMvjYsyAqpk7t8.roa
File: yKfmCaCok9fdrFMvjYsyAqpk7t8.roa (raw, json)
Hash identifier: 9mL2R+k0/nGvj6TVHCrgr0rr7jH8RY0tI7krNIo89nQ=
Subject key identifier: C8:A7:E6:09:A0:A8:93:D7:DD:AC:53:2F:8D:8B:32:02:AA:64:EE:DF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C11CA779020F49620D153CD1C406
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yKfmCaCok9fdrFMvjYsyAqpk7t8.roa
Signing time: Thu 02 Jan 2025 17:53:35 +0000
ROA not before: Thu 02 Jan 2025 17:53:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 88.216.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c1:1c:a7:79:02:0f:49:62:0d:15:3c:d1:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8a7e609a0a893d7ddac532f8d8b3202aa64eedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:90:85:10:b1:a7:55:a5:c8:06:d2:2d:83:
c2:98:5f:65:41:00:7c:5e:52:8a:82:ad:60:00:3f:
35:1a:24:7c:6d:6a:40:3f:b4:01:57:22:75:72:a7:
a9:db:07:62:52:9d:d0:25:bd:8f:58:26:dc:fa:29:
51:ce:ff:56:b4:63:1f:6b:c3:9f:fe:ac:af:04:1d:
28:ff:d6:9e:83:1f:f9:3f:f8:4d:6c:3e:82:bc:c8:
f5:97:b8:68:d6:ad:28:0a:b4:ac:10:7d:b9:fa:9c:
07:59:ed:84:cf:23:6e:a0:24:b9:5f:4e:3e:e7:bc:
ff:89:92:ee:b2:53:13:f0:2c:c1:2b:de:33:18:aa:
9d:38:6b:23:21:2c:a3:47:80:08:9a:0e:35:fb:53:
89:90:5c:50:84:b1:c2:dd:c9:36:0a:dd:ea:f3:95:
56:c7:78:bf:9a:04:c9:cd:71:8c:d0:27:e8:66:69:
69:9a:50:ef:cf:6a:29:f4:05:c8:48:17:ce:e7:b8:
ca:5c:72:20:55:e1:8b:9b:f8:ad:5e:7a:f3:34:9d:
a7:3d:ed:57:e1:75:c9:87:3f:2f:3e:0b:a3:8e:a8:
97:9d:21:62:f4:51:14:bb:22:b2:0b:41:83:27:04:
eb:05:32:74:29:cd:35:47:9e:3f:24:20:3d:a5:aa:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:E6:09:A0:A8:93:D7:DD:AC:53:2F:8D:8B:32:02:AA:64:EE:DF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yKfmCaCok9fdrFMvjYsyAqpk7t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.96.0/24
Signature Algorithm: sha256WithRSAEncryption
76:43:8f:cf:4e:d9:fa:fb:33:93:38:56:51:f7:ea:4d:2f:10:
fc:5c:ad:d1:ad:eb:54:4f:87:f5:7f:49:f9:9c:70:77:aa:65:
39:9f:57:9f:2f:2b:f9:56:86:14:7e:03:d9:81:da:3a:ee:06:
0c:f8:07:8a:5a:65:9b:e0:95:04:c8:b8:ba:b2:b9:a3:89:75:
04:9a:b4:b0:8d:96:3d:8c:96:fa:c7:cc:e7:4b:0f:95:7e:2b:
46:e5:cf:49:3c:81:5a:f9:83:47:59:5f:01:84:c6:87:07:15:
32:d0:d5:e5:a2:5d:e4:83:67:23:b3:89:b9:c5:ae:ca:71:ee:
9b:c1:45:cd:42:1d:b8:19:70:04:dd:bf:2f:a5:bc:d3:c1:1a:
45:bd:2f:ff:06:45:4e:94:14:5e:65:be:1c:58:8e:32:67:c2:
f5:23:10:fd:ea:4c:8f:eb:c9:ef:4f:d7:14:e8:46:69:1d:5e:
37:07:01:c5:b7:26:b4:9b:79:38:63:9a:aa:d9:ab:89:dd:36:
67:ff:58:b6:4d:82:d8:0e:54:13:b5:60:ce:f6:a4:3f:b0:37:
a9:95:f1:4f:db:a1:e4:a9:08:d6:89:19:c0:6e:64:cb:6c:64:
79:38:4f:ff:5e:1d:71:78:e8:d2:7c:ce:bb:75:e9:68:79:70:
0a:25:08:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJsEcp3kCD0liDRU80cQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTAyMTc1MzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGE3ZTYwOWEwYTg5M2Q3ZGRhYzUzMmY4ZDhiMzIwMmFhNjRlZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ciQhRCxp1WlyAbSLYPCmF9lQQB8
XlKKgq1gAD81GiR8bWpAP7QBVyJ1cqep2wdiUp3QJb2PWCbc+ilRzv9WtGMfa8Of
/qyvBB0o/9aegx/5P/hNbD6CvMj1l7ho1q0oCrSsEH25+pwHWe2EzyNuoCS5X04+
57z/iZLuslMT8CzBK94zGKqdOGsjISyjR4AImg41+1OJkFxQhLHC3ck2Ct3q85VW
x3i/mgTJzXGM0CfoZmlpmlDvz2op9AXISBfO57jKXHIgVeGLm/itXnrzNJ2nPe1X
4XXJhz8vPgujjqiXnSFi9FEUuyKyC0GDJwTrBTJ0Kc01R54/JCA9paop1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMin5gmgqJPX3axTL42LMgKqZO7fMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEveUtmbUNhQ29rOWZkckZNdmpZc3lBcXBrN3Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNhgMA0G
CSqGSIb3DQEBCwUAA4IBAQB2Q4/PTtn6+zOTOFZR9+pNLxD8XK3RretUT4f1f0n5
nHB3qmU5n1efLyv5VoYUfgPZgdo67gYM+AeKWmWb4JUEyLi6srmjiXUEmrSwjZY9
jJb6x8znSw+VfitG5c9JPIFa+YNHWV8BhMaHBxUy0NXlol3kg2cjs4m5xa7Kce6b
wUXNQh24GXAE3b8vpbzTwRpFvS//BkVOlBReZb4cWI4yZ8L1IxD96kyP68nvT9cU
6EZpHV43BwHFtya0m3k4Y5qq2auJ3TZn/1i2TYLYDlQTtWDO9qQ/sDeplfFP26Hk
qQjWiRnAbmTLbGR5OE//Xh1xeOjSfM67deloeXAKJQhB
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:19:04 2025 by rpki-client