Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZT9C9SL30BkTfP3eodxc15iyNIM.roa
File: ZT9C9SL30BkTfP3eodxc15iyNIM.roa (raw, json)
Hash identifier: oTb0WDd14gg8ZvMSsReAIGyKVRluivxvmqnSVITd6+I=
Subject key identifier: 65:3F:42:F5:22:F7:D0:19:13:7C:FD:DE:A1:DC:5C:D7:98:B2:34:83
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01947350DC5139655A13B76CA194177927EA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZT9C9SL30BkTfP3eodxc15iyNIM.roa
Signing time: Fri 17 Jan 2025 08:11:06 +0000
ROA not before: Fri 17 Jan 2025 08:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 88.216.220.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:50:dc:51:39:65:5a:13:b7:6c:a1:94:17:79:27:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 17 08:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=653f42f522f7d019137cfddea1dc5cd798b23483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:82:87:fc:07:32:43:3a:df:0c:5d:4f:3a:
f9:ea:82:3d:df:aa:e1:a2:48:e9:98:c3:47:55:96:
0d:f5:f7:cb:26:23:45:b5:ac:78:cd:09:3f:55:0e:
7d:7e:c4:f9:9a:81:56:09:85:63:c3:b9:ee:2b:e1:
42:49:7e:35:22:06:d0:48:fa:b9:34:84:15:bf:bd:
11:5b:d6:a2:71:ed:95:1e:27:72:31:58:1c:00:b8:
88:76:da:3a:91:f3:89:b9:ae:2c:fb:f4:0b:19:4d:
16:78:c7:ee:f0:ae:1c:92:4a:dc:e9:e7:99:9a:a3:
00:6a:16:e3:da:e6:a9:d1:8c:a3:11:92:4e:64:de:
b4:7c:b0:ee:5e:0f:95:67:bf:24:3a:a1:c5:70:39:
0a:80:10:fd:bc:0a:a6:dc:97:72:c5:01:f2:f5:10:
c6:b4:26:1b:aa:57:62:b6:cb:6b:72:ba:75:8b:d6:
3f:e0:ce:3f:eb:53:08:15:e8:f5:b8:3d:02:21:27:
48:41:c0:9d:92:67:d7:3c:10:95:57:9f:aa:f4:7b:
8d:5e:c5:83:1a:2a:26:86:e6:42:ef:1b:0d:b9:2c:
c3:e7:08:5e:0d:14:c7:99:95:a9:3c:34:c1:2f:14:
50:55:11:b0:c7:8e:e1:2b:97:55:8c:0c:80:ec:58:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:42:F5:22:F7:D0:19:13:7C:FD:DE:A1:DC:5C:D7:98:B2:34:83
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZT9C9SL30BkTfP3eodxc15iyNIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.220.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:e3:86:22:51:f4:ee:7b:03:ab:88:e9:46:6c:3b:e5:8b:
f3:3d:ab:39:ea:76:18:b9:02:d2:40:8c:d2:82:65:b0:b6:f8:
df:1c:c9:43:a2:1c:36:59:f4:f2:71:03:ac:d4:aa:b2:78:2a:
de:ce:06:f7:5f:cd:45:6f:d2:7d:76:8f:f0:d1:de:32:f9:94:
21:cd:9d:ec:20:be:69:bb:ec:25:32:f5:a5:b8:86:b2:34:2f:
00:d3:00:b4:ab:8b:f1:a4:11:bc:be:7a:0e:7f:82:13:83:b5:
2a:cc:10:0e:f2:5b:55:60:79:4a:fb:7e:ec:86:87:92:45:18:
10:1d:46:fa:9b:00:dc:8c:ad:ae:62:1a:1f:5c:4e:47:cc:5b:
1a:bc:7e:b0:d4:d1:5f:e7:ca:9a:2d:be:02:f5:7a:2e:d0:4a:
b3:86:0e:b0:82:ad:67:7e:a5:93:df:98:bd:fc:29:15:ba:65:
70:be:63:6e:53:46:fc:7d:8d:fa:97:d3:78:e6:87:69:25:cd:
4b:81:03:ab:72:60:d0:d1:e3:87:e8:f3:0d:69:0b:bf:a5:a7:
cb:1d:bf:36:9f:6f:41:57:87:37:57:69:a0:60:1a:0c:99:b8:
24:77:2f:10:97:15:ae:92:e5:2d:8f:43:ed:ff:02:0d:d7:c0:
36:24:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:43:43 2025 by rpki-client