Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Qb0XfpMO-8_4zZbuo4cadVgrlZE.roa
File: Qb0XfpMO-8_4zZbuo4cadVgrlZE.roa (raw, json)
Hash identifier: 7fHi/H8TCd3vf39HbwZEu6ig3mbC+TTmHaXqLhcZidU=
Subject key identifier: 41:BD:17:7E:93:0E:FB:CF:F8:CD:96:EE:A3:87:1A:75:58:2B:95:91
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194C4084FD6C7D6E1990D88EACCA881F1EF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Qb0XfpMO-8_4zZbuo4cadVgrlZE.roa
Signing time: Sun 02 Feb 2025 00:21:06 +0000
ROA not before: Sun 02 Feb 2025 00:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 88.216.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:08:4f:d6:c7:d6:e1:99:0d:88:ea:cc:a8:81:f1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 2 00:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41bd177e930efbcff8cd96eea3871a75582b9591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d9:a5:6e:03:3e:bb:bc:97:73:39:20:c5:8e:
b0:c8:16:41:eb:13:24:57:00:b5:6e:fd:fe:cb:c6:
91:26:d1:54:dc:ee:5d:2f:6f:61:c6:2e:7a:85:f3:
16:ba:ca:1c:8e:ca:6c:b4:e3:bf:33:ad:43:9e:63:
35:d0:6f:c3:5d:57:6b:31:3a:6b:7a:f2:20:dc:e6:
7c:9d:b7:5c:10:9a:02:00:41:96:eb:04:e6:82:c1:
ef:3e:e1:7b:ed:77:46:d5:cb:f9:59:98:f9:e9:d1:
8a:b3:18:8f:62:f1:be:a0:4e:c2:ec:10:19:c3:de:
b8:f9:ad:70:9f:52:4f:d2:39:72:d4:9f:8a:ed:fd:
58:ab:22:bb:bc:45:5e:3f:c9:ee:1f:86:8c:40:b0:
a1:e3:87:98:d9:09:7b:a3:e6:6b:7b:01:5b:f8:bf:
6a:5d:f2:05:dd:5c:45:ea:09:22:74:77:fd:09:42:
30:cf:5b:39:2b:74:a1:e9:98:1c:fb:84:9e:76:e7:
a3:71:5c:4f:67:86:62:09:83:5d:a5:ab:cf:c8:b2:
d9:75:0d:f4:48:e9:06:51:d6:0f:f1:79:0d:f9:67:
16:bc:a7:71:0b:73:61:27:c9:9c:8a:14:53:85:c5:
fd:dc:d6:95:a9:d3:79:05:e2:5b:46:d6:3c:31:e0:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BD:17:7E:93:0E:FB:CF:F8:CD:96:EE:A3:87:1A:75:58:2B:95:91
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Qb0XfpMO-8_4zZbuo4cadVgrlZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.68.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b3:ec:08:29:70:47:09:9e:6d:b8:20:9a:82:75:9d:5c:71:
2a:9b:dc:2b:a4:89:bb:3f:27:ff:c0:75:f7:46:58:be:66:b9:
1c:7f:7c:b8:09:38:68:06:32:25:11:c9:23:05:8a:48:b2:68:
4f:b0:0f:c7:5a:a8:af:e5:9d:0f:3a:35:c2:fa:b9:e4:a7:27:
66:3d:c9:16:3b:3b:36:11:87:dc:4a:61:85:de:68:eb:dd:6a:
7f:9e:66:a6:e6:48:8a:93:5b:02:f9:b8:22:6b:a7:60:6f:99:
15:50:19:6d:27:de:f3:bd:67:cd:a9:03:bb:12:51:eb:ad:8f:
2b:71:a1:9c:a5:c7:be:d7:bc:5b:95:15:b9:79:f5:7a:f4:34:
f2:49:ee:5b:f5:1a:0a:6f:37:ab:3e:fe:3d:a1:79:dd:1d:50:
43:8a:66:3f:da:ff:fd:9f:d2:e8:9c:36:92:3a:88:08:eb:1f:
dc:c4:e2:71:16:98:26:bd:46:b6:77:be:16:4b:2b:36:f2:78:
97:91:90:f1:c7:f0:fc:8f:15:0b:b6:ee:d3:2d:58:df:51:bf:
a6:4a:a7:a8:24:84:24:71:bd:ea:c9:78:32:77:4e:13:09:5a:
2f:fc:2f:39:12:d8:95:25:34:7b:b9:88:72:1d:c4:18:e3:f3:
86:1e:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:13 2025 by rpki-client