Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1i0HeP8dm_W4zLdpKDLztZF8YwE.roa
File: 1i0HeP8dm_W4zLdpKDLztZF8YwE.roa (raw, json)
Hash identifier: 7cIAotN38BYX2XdLxCQYar8H2qbQRLnyToKqX1i4TV4=
Subject key identifier: D6:2D:07:78:FF:1D:9B:F5:B8:CC:B7:69:28:32:F3:B5:91:7C:63:01
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B7DBCED302BEA26855414F9C9CD5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1i0HeP8dm_W4zLdpKDLztZF8YwE.roa
Signing time: Thu 02 Jan 2025 17:53:33 +0000
ROA not before: Thu 02 Jan 2025 17:53:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 88.216.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b7:db:ce:d3:02:be:a2:68:55:41:4f:9c:9c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d62d0778ff1d9bf5b8ccb7692832f3b5917c6301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:df:bc:bf:35:39:9e:fc:af:e4:27:23:b6:
85:ff:e5:95:18:c9:d3:11:77:44:35:ae:dd:50:69:
e1:59:fe:99:c8:ba:78:77:8b:4b:ee:af:03:01:8a:
d5:41:6f:69:40:a7:79:f4:1b:ad:21:07:4d:d3:34:
8d:8d:80:e8:12:ca:d7:72:20:a0:0a:24:4b:7c:d9:
b5:93:ef:51:30:3a:d5:4f:ec:86:58:72:c5:c2:84:
90:cf:5b:1d:c7:68:01:7d:6a:f2:60:a0:2a:df:95:
ed:aa:cd:aa:09:ef:a4:c9:84:c5:c3:6d:25:46:d8:
a8:80:d1:2b:55:9f:62:11:75:17:c1:bf:14:d8:28:
90:bf:46:c1:0f:f0:7c:38:2d:87:d6:4e:7a:f9:5e:
33:76:9a:25:d8:80:e6:14:a0:f5:a6:42:7d:18:25:
9f:0b:5e:20:b0:2c:63:d8:97:83:70:10:ed:d9:3c:
2b:bb:b8:ce:28:d1:60:ea:89:5f:3d:a4:f4:31:bd:
65:95:b5:f9:47:ae:1b:af:6d:5b:1d:04:b9:7c:db:
85:5a:8f:83:a1:0b:85:ca:3c:4d:56:cc:ea:68:6a:
43:a1:d2:a1:5f:77:49:c0:f5:55:6a:98:9d:a7:85:
9f:ec:74:19:30:a2:6c:af:43:1d:5b:93:eb:68:27:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2D:07:78:FF:1D:9B:F5:B8:CC:B7:69:28:32:F3:B5:91:7C:63:01
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1i0HeP8dm_W4zLdpKDLztZF8YwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1b:46:a4:e3:ca:ff:be:95:af:ac:11:bf:f4:85:e0:01:2e:
23:c8:42:34:7d:d1:cf:9b:0f:46:58:05:5a:7f:fb:2e:6a:33:
64:9e:f3:da:2c:3f:6d:00:9f:6b:a2:86:f2:1c:e3:c1:bf:83:
1e:7a:e3:fa:2a:2c:dd:9f:b0:30:e9:f8:a7:88:0d:7e:1c:ff:
65:a8:9d:86:25:f6:4b:2e:f0:9c:37:2e:af:b9:83:d7:a5:12:
59:a5:8f:54:83:18:e4:29:66:3f:85:b4:c6:b6:54:a6:e7:bb:
70:b9:2f:18:06:40:e5:b8:72:ea:c7:ff:95:a8:48:0e:a8:82:
05:42:e5:c7:71:09:ed:09:55:82:6d:8c:7a:63:08:95:79:0d:
1f:6b:2c:1a:d5:d4:e1:6c:54:7a:72:20:e9:c2:a0:13:04:ca:
42:bc:a1:e4:36:ac:51:bd:66:44:a0:b4:6d:03:62:9d:c4:f8:
eb:b8:49:7c:4a:f1:23:a4:a3:c3:df:c8:18:4d:37:e1:22:eb:
04:9e:0e:4a:36:a3:7d:a2:a2:0b:7a:9c:c8:1e:be:1c:57:80:
31:64:7a:fe:19:19:ef:d2:1b:df:95:ab:7d:d2:4f:b3:bb:c7:
ae:01:31:d0:a9:97:24:81:4b:bd:8e:43:10:f7:b7:c9:ee:33:
f8:ca:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:16 2025 by rpki-client