Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1uXt9VnehvF8b7Ut0gecDKEuI_Y.roa
File: 1uXt9VnehvF8b7Ut0gecDKEuI_Y.roa (raw, json)
Hash identifier: SNWtGrRHERe+vNaIlzRoZqElrsikkCaAHj9ILJTZL4Q=
Subject key identifier: D6:E5:ED:F5:59:DE:86:F1:7C:6F:B5:2D:D2:07:9C:0C:A1:2E:23:F6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194E4C23694AE7211A2A0C7F45B886F7C76
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1uXt9VnehvF8b7Ut0gecDKEuI_Y.roa
Signing time: Sat 08 Feb 2025 08:52:00 +0000
ROA not before: Sat 08 Feb 2025 08:52:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 88.216.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:c2:36:94:ae:72:11:a2:a0:c7:f4:5b:88:6f:7c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 8 08:52:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6e5edf559de86f17c6fb52dd2079c0ca12e23f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:a3:e9:46:f7:98:15:ec:5c:1e:31:ef:45:
98:f0:e3:2e:06:aa:77:a9:57:7d:d6:e3:a1:1a:39:
45:47:5f:a1:e9:6a:3d:91:48:8a:b2:79:12:1a:43:
3c:d5:66:fd:f5:c7:94:28:53:39:3a:88:26:e0:07:
c3:01:31:6b:21:80:cd:fc:f7:44:d1:25:11:50:05:
8c:a2:72:7c:b6:ba:47:5a:2a:a9:d5:40:e4:12:c3:
12:e3:d8:b6:12:6e:60:3a:0e:37:57:cc:7d:08:7e:
76:06:5f:b8:e9:ff:c3:7d:9f:26:b7:2d:a2:9d:e8:
87:f0:d3:9c:1c:58:36:a6:0d:2a:6c:64:db:91:47:
a8:29:64:41:32:94:96:ff:c6:0f:54:a6:97:94:c9:
f0:f5:8a:a0:8f:24:e9:03:ff:bf:12:ab:5d:c7:04:
ae:44:09:6d:5b:b5:1d:0e:2e:b4:de:d8:cf:77:f5:
d4:55:21:ca:4b:ff:6f:36:ee:30:c0:31:5c:4f:91:
a8:92:a4:fc:b5:2f:fd:c9:c8:a1:dd:60:68:a9:ef:
23:f9:d8:05:8e:77:0e:bc:f9:7f:cc:57:55:3d:de:
15:70:a8:60:d6:de:d2:5f:70:0f:02:25:9d:77:3e:
10:9f:4e:d1:00:fd:e3:15:ca:bb:eb:e8:64:f9:2d:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:ED:F5:59:DE:86:F1:7C:6F:B5:2D:D2:07:9C:0C:A1:2E:23:F6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1uXt9VnehvF8b7Ut0gecDKEuI_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9a:84:7a:a0:fc:f2:89:1d:a6:3d:42:11:63:c5:e6:c7:71:
9a:47:47:a0:95:23:17:dc:80:60:63:49:0b:6c:93:d2:2d:ec:
b7:6c:22:f8:ce:1c:2c:4d:6f:dd:42:1d:87:b6:8e:d1:7d:ff:
b7:cd:0d:c0:90:5e:99:27:9e:27:82:8c:50:b0:9f:6f:24:97:
ec:5f:17:f7:b9:37:ab:b2:4e:46:0c:93:42:0f:1e:eb:3a:08:
8a:d5:30:1c:20:28:75:14:c5:12:3e:aa:0a:5c:e3:e2:e8:5e:
0e:71:a4:77:c4:6e:5c:39:69:6d:4e:70:0e:c3:2a:7a:be:1d:
e5:6b:61:99:f4:22:31:c8:14:98:86:78:37:c3:b2:9f:cd:37:
13:06:f5:1b:e0:3f:a3:3e:3f:c3:2b:c1:75:5e:67:29:6e:7b:
fe:41:87:86:30:1a:5a:ce:19:4d:4a:ca:3f:43:6e:50:05:82:
56:04:9d:4f:52:b3:2c:83:d7:45:8d:b1:09:b8:18:90:2e:03:
a7:bc:ba:28:91:f1:10:a6:3a:f5:ef:30:b9:4f:b7:c6:c8:f3:
ac:f4:c2:6c:1a:56:ba:0d:7a:d4:f3:5a:70:4b:38:2f:aa:b2:
dd:4e:99:de:6b:c8:fe:e3:ba:48:89:83:22:c4:a0:29:2f:fe:
91:20:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:34:45 2025 by rpki-client