Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ATCrVyBtbpA4ZNLVR7Tp--RvOZ4.roa
File: ATCrVyBtbpA4ZNLVR7Tp--RvOZ4.roa (raw, json)
Hash identifier: JQmJWD2KU9L1pX0RofCMQ5LOw+G60bvFrhGbx8ydGL4=
Subject key identifier: 01:30:AB:57:20:6D:6E:90:38:64:D2:D5:47:B4:E9:FB:E4:6F:39:9E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01877A447ED93D6FC3D6115BD7F82A06A779
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ATCrVyBtbpA4ZNLVR7Tp--RvOZ4.roa
Signing time: Thu 13 Apr 2023 10:58:41 +0000
ROA not before: Thu 13 Apr 2023 10:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:44:7e:d9:3d:6f:c3:d6:11:5b:d7:f8:2a:06:a7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 13 10:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0130ab57206d6e903864d2d547b4e9fbe46f399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:4a:59:64:22:71:4f:12:ee:5e:4d:6e:48:
c9:4f:b5:04:a8:23:e5:bf:46:ef:0c:1f:ea:18:f0:
c8:7b:33:56:45:57:20:41:a8:35:67:0f:e6:b5:0d:
3a:a5:af:17:65:72:94:16:64:86:f3:d2:7a:9d:d1:
9c:23:18:48:fc:3b:25:b5:5b:4b:14:62:a0:19:b2:
81:bb:bc:79:cc:85:51:84:17:82:e8:40:3d:c8:28:
2a:df:61:c1:1c:bd:2b:18:6e:62:ee:8a:e7:f4:8e:
4e:b4:ed:cd:6c:52:c2:4f:de:e0:df:0e:05:1e:4d:
96:34:32:ac:38:5d:83:c6:1b:d0:67:de:ad:d0:07:
88:ec:4a:a9:7b:18:58:db:39:32:d3:7f:cf:ab:9e:
45:20:d3:df:b0:b3:9f:5c:c6:03:ee:f6:fc:c8:c7:
2d:f4:45:e2:ad:c1:91:e9:8d:f2:ba:97:8b:1e:96:
72:c2:be:9e:30:ed:07:2b:4e:98:21:d5:0a:e6:d9:
72:d6:25:82:8b:91:bf:e1:3d:11:49:60:92:06:48:
b3:89:b3:e1:ee:77:c2:03:89:cf:49:49:e8:cb:45:
c4:c6:20:94:25:b5:fb:30:0a:4c:87:a6:44:6c:32:
61:a1:ec:1e:b7:3b:bb:40:96:9a:e8:58:39:90:b5:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:30:AB:57:20:6D:6E:90:38:64:D2:D5:47:B4:E9:FB:E4:6F:39:9E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ATCrVyBtbpA4ZNLVR7Tp--RvOZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.58.0/24
88.216.60.0/23
88.216.132.0/24
Signature Algorithm: sha256WithRSAEncryption
66:12:b3:97:c9:4c:aa:4a:2d:2c:70:ba:06:30:20:ee:cd:69:
df:01:11:4f:b2:1c:67:b7:ce:f9:39:be:d1:86:5d:93:b2:93:
3e:9e:e6:03:b2:2a:2a:74:cb:8d:2b:dd:df:9d:17:4c:1b:57:
37:36:c1:54:f3:e5:66:f3:a9:75:a1:19:4d:4a:37:cc:ee:4b:
18:ca:19:ff:ab:74:32:b8:17:e2:7e:cc:19:a6:d0:07:d5:8e:
27:d4:96:65:97:25:cf:7f:7c:0c:8f:61:2e:14:5c:c4:2d:00:
c5:9e:78:60:fb:4c:06:79:61:49:ef:c4:20:e0:22:b2:b7:aa:
55:66:e6:2a:26:e4:38:d1:50:c2:50:8d:85:61:ce:59:a2:c9:
15:ee:d8:1e:b0:be:c5:f5:10:4c:8f:bf:46:bd:37:9b:0b:fa:
93:ac:34:33:31:56:7c:a0:67:71:98:60:7b:99:3c:3c:4d:59:
4e:a6:51:65:b6:b6:95:6d:b4:98:bc:a8:56:a8:6e:74:90:bb:
45:35:81:dd:b1:dd:84:bf:f6:3b:b3:e4:2d:f0:1e:26:51:fe:
6c:c6:c8:56:dc:8f:46:dd:10:56:27:71:9d:ff:6e:e6:49:93:
37:41:f2:da:b8:e6:71:74:1c:35:59:8e:92:17:31:ea:ba:e1:
91:87:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:59:19 2025 by rpki-client