Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0DXBYakW_Er0nPQTiMDrZke_GUk.roa
File: 0DXBYakW_Er0nPQTiMDrZke_GUk.roa (raw, json)
Hash identifier: AIgQgXuWEhdAZbTLf7wnJWquFUdXxIWlIR8m6DlX6jM=
Subject key identifier: D0:35:C1:61:A9:16:FC:4A:F4:9C:F4:13:88:C0:EB:66:47:BF:19:49
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0195140F027F402EE8CBDDB925A785E1C076
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0DXBYakW_Er0nPQTiMDrZke_GUk.roa
Signing time: Mon 17 Feb 2025 13:18:02 +0000
ROA not before: Mon 17 Feb 2025 13:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 88.216.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:0f:02:7f:40:2e:e8:cb:dd:b9:25:a7:85:e1:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 17 13:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d035c161a916fc4af49cf41388c0eb6647bf1949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:10:4a:3f:47:a7:1c:91:98:59:b1:12:af:
50:18:c2:91:80:20:66:c4:f9:83:1a:50:1d:ad:9b:
bc:d5:42:21:6d:e6:4e:cf:21:fc:3a:94:17:1a:69:
62:8b:2b:c3:d5:31:ff:e6:12:80:22:38:6d:f3:e5:
3c:aa:b8:d7:39:f6:34:ac:78:a2:06:10:cf:c8:4c:
d2:80:a6:29:8c:35:d0:6b:4d:aa:44:ac:38:09:26:
d9:b5:44:e6:3d:6b:29:a3:bf:4f:28:8d:20:87:fe:
35:9e:fa:e0:11:8a:9f:e8:4d:66:3e:30:a6:41:43:
de:86:2b:9c:fd:cb:67:bd:31:ef:3d:a9:9b:a4:15:
6c:a6:73:55:31:82:97:a2:5a:f0:5a:58:6c:ee:18:
35:05:a0:01:0c:73:18:6d:c3:3d:65:e5:73:19:ee:
56:16:34:0e:a7:21:0b:e0:5a:e4:ee:5b:a5:89:be:
ca:28:77:7b:1b:70:cc:a6:0b:2f:cf:12:7d:7f:56:
8f:57:23:13:e2:4f:9a:95:58:03:03:03:dd:82:94:
4c:87:67:e7:57:d8:43:b0:88:a2:e3:b0:4d:31:f9:
3c:94:87:4a:75:51:9e:1c:5c:ea:5e:61:4c:9f:24:
40:4a:b0:a6:ab:73:bc:bb:74:33:38:8b:58:fd:e2:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:C1:61:A9:16:FC:4A:F4:9C:F4:13:88:C0:EB:66:47:BF:19:49
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0DXBYakW_Er0nPQTiMDrZke_GUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.90.0/24
Signature Algorithm: sha256WithRSAEncryption
35:56:7e:f5:ce:68:d6:53:63:2e:b9:cd:0b:cd:42:33:d4:37:
df:a2:65:79:89:eb:5d:46:22:1a:a1:90:33:ab:65:7c:e3:5f:
76:f8:4e:f6:61:f5:3d:76:c9:14:4e:7e:14:93:a2:6b:28:07:
4b:3d:c4:77:f5:57:f5:5a:24:55:21:c7:e6:27:5a:35:1f:f1:
20:5c:70:1e:e8:97:95:1c:13:88:a3:29:32:77:37:c5:e4:2c:
cd:60:fc:e4:1d:ab:d0:ed:d1:26:4c:30:7a:00:34:6e:5a:27:
52:65:21:7e:a7:05:53:d2:5b:fc:7d:9b:4d:c5:3e:c7:4e:ad:
ad:56:48:79:e3:2e:bd:63:50:3b:f4:5d:85:8a:04:18:62:d0:
da:11:c7:11:de:8e:b2:09:41:e8:b5:57:63:60:e0:c9:c3:21:
fd:e7:ca:ac:d9:11:66:ed:ab:e5:d7:ad:e5:00:fc:ee:d9:d1:
fe:b3:41:bc:9e:c8:39:a2:81:c2:be:69:2f:be:27:3f:d6:ad:
e6:6f:01:b6:52:1c:17:e8:13:da:d0:e2:c8:3a:a7:bd:a2:92:
4a:f0:c2:ee:68:d5:ab:59:9e:d0:8f:47:0e:26:e9:67:bd:2c:
57:ee:fd:45:95:1c:94:86:cf:d4:ec:4b:bc:c5:2c:ce:f5:5c:
c1:60:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:24:13 2025 by rpki-client