Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RFwsT8l9-36RNh6zH2-C8MAUsBQ.roa
File: RFwsT8l9-36RNh6zH2-C8MAUsBQ.roa (raw, json)
Hash identifier: HwIMODaXDiAi7b+kvUGdnz73XwVQcmLTIaBR7+AH2Vo=
Subject key identifier: 44:5C:2C:4F:C9:7D:FB:7E:91:36:1E:B3:1F:6F:82:F0:C0:14:B0:14
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194E76A727EF48BEA42876E28585629E14D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RFwsT8l9-36RNh6zH2-C8MAUsBQ.roa
Signing time: Sat 08 Feb 2025 21:15:00 +0000
ROA not before: Sat 08 Feb 2025 21:15:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 88.216.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e7:6a:72:7e:f4:8b:ea:42:87:6e:28:58:56:29:e1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 8 21:15:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=445c2c4fc97dfb7e91361eb31f6f82f0c014b014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:e6:16:3a:74:c6:15:8f:04:8c:30:6f:18:
e0:b2:0e:b6:39:ec:c0:6e:17:ed:da:42:f3:e2:de:
8a:c6:66:16:78:04:fb:90:57:b6:ac:4c:40:6d:e0:
f8:be:09:e6:65:bf:24:79:5d:d0:2a:fd:13:16:2d:
0d:78:fc:63:17:42:20:37:9a:e5:0d:3e:d4:76:7e:
99:24:ca:e4:e9:13:c1:78:8e:bb:e3:7f:c7:c9:c3:
4e:bb:f5:63:f3:6e:3a:80:cb:d0:47:92:32:73:85:
9a:c9:59:fa:4b:7f:1a:1e:f8:31:e9:a1:fd:e9:02:
1b:aa:60:48:66:5b:d9:17:1a:4e:23:73:27:ed:66:
21:70:a6:af:fd:aa:f3:04:73:44:29:63:af:ac:52:
7a:d4:8e:46:9e:a0:8b:33:b7:02:27:e6:f4:cc:18:
58:9a:9f:5e:23:fb:9b:c7:29:1d:21:bc:e6:18:23:
52:20:77:98:84:08:f5:d3:1c:c7:43:b6:22:d2:e8:
a1:07:64:6d:1a:e9:3d:45:3e:e9:25:5c:a4:b8:6a:
8a:0c:c0:8a:95:a8:00:19:84:8d:87:bf:41:4e:9f:
8e:2b:00:1a:8c:88:f4:d2:c3:bb:76:61:a1:8e:b3:
53:ee:c1:a0:7c:a0:33:cd:0a:08:cc:83:73:08:f0:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:2C:4F:C9:7D:FB:7E:91:36:1E:B3:1F:6F:82:F0:C0:14:B0:14
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RFwsT8l9-36RNh6zH2-C8MAUsBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:d3:93:2f:22:ec:e4:41:22:d9:59:21:71:b3:5d:0c:16:fe:
51:52:a0:db:7e:9a:36:cc:f8:12:d8:cf:fc:cc:7e:b6:cb:c1:
d8:f8:d8:54:b6:e8:34:ee:77:c4:e3:66:e8:29:b0:82:0d:1c:
d2:58:19:15:11:75:ac:c6:7b:fa:48:18:24:ac:8d:92:6d:ec:
3d:44:07:f8:f2:cf:ff:4e:49:1c:7f:dd:e3:cf:e5:22:0b:53:
49:73:6a:11:7a:31:a3:83:22:11:b3:f5:f8:57:9c:a4:40:5a:
4c:b3:28:5c:3b:1d:e2:37:5e:b2:85:ad:f4:0d:88:ec:ce:79:
7a:3d:98:9e:81:97:07:b7:2b:d9:9d:a9:28:bc:35:d7:d7:fe:
e0:2f:df:31:ce:3b:d0:e6:77:b4:1e:59:b3:53:89:e6:e7:7c:
62:7c:f1:2e:d0:be:f4:20:1c:38:00:64:ce:db:15:c8:f9:ed:
0e:84:53:fd:4b:87:22:35:c6:68:a8:66:92:4d:ba:77:df:7b:
fe:9e:a0:40:53:d7:9a:49:45:72:82:8a:29:58:bc:cb:b2:19:
e2:ec:02:25:5e:6a:e2:0b:d5:a0:2d:20:ed:69:35:b3:55:61:
1f:49:8b:a1:da:77:c3:f1:f4:f8:26:11:42:6c:1f:35:6f:98:
13:e0:5c:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTnanJ+9IvqQoduKFhWKeFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMjA4MjExNTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDVjMmM0ZmM5N2RmYjdlOTEzNjFlYjMxZjZmODJmMGMwMTRiMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsInmFjp0xhWPBIwwbxjgsg62OezA
bhft2kLz4t6KxmYWeAT7kFe2rExAbeD4vgnmZb8keV3QKv0TFi0NePxjF0IgN5rl
DT7Udn6ZJMrk6RPBeI6743/HycNOu/Vj8246gMvQR5Iyc4WayVn6S38aHvgx6aH9
6QIbqmBIZlvZFxpOI3Mn7WYhcKav/arzBHNEKWOvrFJ61I5GnqCLM7cCJ+b0zBhY
mp9eI/ubxykdIbzmGCNSIHeYhAj10xzHQ7Yi0uihB2RtGuk9RT7pJVykuGqKDMCK
lagAGYSNh79BTp+OKwAajIj00sO7dmGhjrNT7sGgfKAzzQoIzINzCPD6TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERcLE/Jfft+kTYesx9vgvDAFLAUMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvUkZ3c1Q4bDktMzZSTmg2ekgyLUM4TUFVc0JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWNhCMA0G
CSqGSIb3DQEBCwUAA4IBAQAc05MvIuzkQSLZWSFxs10MFv5RUqDbfpo2zPgS2M/8
zH62y8HY+NhUtug07nfE42boKbCCDRzSWBkVEXWsxnv6SBgkrI2Sbew9RAf48s//
Tkkcf93jz+UiC1NJc2oRejGjgyIRs/X4V5ykQFpMsyhcOx3iN16yha30DYjsznl6
PZiegZcHtyvZnakovDXX1/7gL98xzjvQ5ne0HlmzU4nm53xifPEu0L70IBw4AGTO
2xXI+e0OhFP9S4ciNcZoqGaSTbp333v+nqBAU9eaSUVygoopWLzLshni7AIlXmri
C9WgLSDtaTWzVWEfSYuh2nfD8fT4JhFCbB81b5gT4FwB
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:47:47 2025 by rpki-client