Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I_16Nu-OTz8IIzSi-IUNN_qmRlk.roa
File: I_16Nu-OTz8IIzSi-IUNN_qmRlk.roa (raw, json)
Hash identifier: W8+8V3LKXg88vot/ifnzaJUbF4lUBoR4nrPcIqM5LKI=
Subject key identifier: 23:FD:7A:36:EF:8E:4F:3F:08:23:34:A2:F8:85:0D:37:FA:A6:46:59
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194D5E7360B0CD97DCF838631B644C1060F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I_16Nu-OTz8IIzSi-IUNN_qmRlk.roa
Signing time: Wed 05 Feb 2025 11:38:07 +0000
ROA not before: Wed 05 Feb 2025 11:38:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 88.216.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:e7:36:0b:0c:d9:7d:cf:83:86:31:b6:44:c1:06:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 5 11:38:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23fd7a36ef8e4f3f082334a2f8850d37faa64659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:e9:f2:95:ee:e3:09:84:1e:3f:8d:8a:b3:
57:e0:e7:ba:52:8c:60:26:16:5f:62:ca:9e:c0:c9:
fd:b9:a8:25:63:9a:1d:b2:7a:f5:62:ee:4a:7d:e1:
87:40:6d:cb:ee:6f:5e:47:8e:cc:5c:78:b6:3c:8a:
d1:d1:2d:9f:01:bb:d8:f5:96:05:6a:5f:1e:90:75:
2c:11:ef:2d:d0:7d:c2:34:c3:db:c0:ec:95:8c:a7:
f3:d0:35:fa:d8:8e:63:75:f7:87:d9:16:9a:66:60:
1f:c3:70:41:46:68:27:75:b1:d8:8a:00:7a:bf:84:
71:4c:9a:87:eb:6a:28:c1:44:bd:59:a5:78:ba:44:
19:88:a2:9d:f1:73:c9:09:42:2a:c2:4c:b1:3c:a4:
4a:10:b7:e6:75:a5:05:e8:e3:e3:5d:30:d7:ad:9e:
49:34:0b:f1:e7:13:24:0e:b2:fe:f5:60:9c:f7:d7:
fc:3a:5d:f1:db:6c:82:1f:a3:fc:16:dd:2c:02:d4:
2a:36:0e:3c:82:6e:fd:70:16:44:1e:09:ae:20:82:
da:d5:9e:5e:67:71:7f:fb:88:af:0d:45:aa:95:da:
19:7c:d7:62:83:d7:4b:5e:5b:4e:30:24:0d:56:d3:
0e:4c:94:45:81:7c:4c:5e:3b:65:9a:80:31:1b:cc:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:7A:36:EF:8E:4F:3F:08:23:34:A2:F8:85:0D:37:FA:A6:46:59
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I_16Nu-OTz8IIzSi-IUNN_qmRlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:6d:71:7d:b9:ae:99:ea:ee:9e:c5:42:0c:56:1a:be:36:
c5:b8:26:12:04:84:34:2c:ce:0f:dc:06:5b:0b:d3:55:4a:fa:
e6:48:75:51:18:cf:74:e5:2c:7b:73:35:9d:83:f0:73:6b:3d:
da:67:03:a7:72:ff:c9:60:e1:1a:d9:da:a3:86:a0:3b:e0:37:
64:af:54:be:29:f6:18:2f:f0:8a:e1:dd:35:d1:4f:c3:86:24:
0d:5e:3b:d8:4b:1d:00:ed:e1:08:a5:be:f0:73:2d:38:94:55:
0c:a3:bb:b0:82:75:46:4f:bc:f5:df:95:40:f1:ee:12:41:11:
3a:18:a0:58:f0:f9:29:3e:69:e7:6a:8b:a9:7e:43:85:31:9e:
35:94:dd:1d:28:30:04:bc:3c:0f:52:cc:81:a9:8e:55:46:67:
35:d5:ff:d3:c4:94:84:cc:be:20:38:e6:49:e7:4b:cc:7e:d2:
de:3a:c2:42:17:c1:57:08:91:1b:7d:78:f8:69:b7:9b:8a:e3:
f6:e4:1b:05:ec:fc:e1:c9:8d:8a:09:9f:01:82:16:0a:43:0f:
69:ef:9d:1e:54:66:8e:c0:0c:6c:08:07:12:75:15:1f:e8:19:
33:58:d9:73:f6:2a:63:45:fc:e8:1a:3b:c7:0f:3b:5c:ab:4e:
2a:bd:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:27:49 2025 by rpki-client