Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mG_5PKcEfJhxDqfnZSYdlVE50Zw.roa
File: mG_5PKcEfJhxDqfnZSYdlVE50Zw.roa (raw, json)
Hash identifier: SIjssheSi2a1/Bdl+2CRuGsyfFKjLbBRtOvBHAk5A+k=
Subject key identifier: 98:6F:F9:3C:A7:04:7C:98:71:0E:A7:E7:65:26:1D:95:51:39:D1:9C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019310F21AB6EB7C75F652EC8E3D44F7290F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mG_5PKcEfJhxDqfnZSYdlVE50Zw.roa
Signing time: Sat 09 Nov 2024 12:42:02 +0000
ROA not before: Sat 09 Nov 2024 12:42:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 88.216.57.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:f2:1a:b6:eb:7c:75:f6:52:ec:8e:3d:44:f7:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 9 12:42:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=986ff93ca7047c98710ea7e765261d955139d19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:b9:61:21:6d:a5:fc:d2:ae:b5:3a:3f:fc:
0d:97:5d:45:0e:9f:73:79:1b:af:2e:c0:00:5c:84:
b7:8e:2a:21:70:42:c6:91:28:79:66:b9:ff:0b:f1:
67:44:e0:76:96:3a:b4:39:4d:9b:63:b4:a0:78:65:
b3:b9:e6:84:b9:2c:41:f6:81:30:b2:6a:c6:ee:4e:
73:e0:fa:8e:e5:a8:c6:0f:1c:cf:f6:05:8b:7a:31:
f7:71:4d:f0:64:77:f7:1a:a9:13:5e:0e:ae:68:d5:
21:fa:52:62:91:b8:29:49:93:05:6a:1d:89:57:5f:
85:2f:12:ee:bc:76:fe:0b:ad:7e:57:5f:5a:35:ec:
a1:2e:6c:e6:fa:a6:9c:40:15:b5:bc:0e:b4:97:25:
f5:3b:23:b4:96:0c:56:f9:ae:b6:37:59:b0:ad:e5:
d7:63:ef:36:fd:31:dd:90:0c:4d:e7:44:fd:fd:c4:
e8:f5:4e:9d:4c:bc:f5:08:74:c1:33:e0:51:12:1a:
75:5e:f2:c6:54:58:40:10:d6:9e:30:8b:28:a1:bc:
38:ae:c2:3f:bd:7a:5d:af:76:e6:c0:ff:70:d2:2b:
33:2c:f1:6a:2b:b4:a5:d8:44:ac:67:95:c0:9e:2e:
84:8c:e1:f5:79:1e:28:41:e9:96:b7:90:20:82:4c:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:F9:3C:A7:04:7C:98:71:0E:A7:E7:65:26:1D:95:51:39:D1:9C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mG_5PKcEfJhxDqfnZSYdlVE50Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.57.0/24
88.216.181.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
72:02:fe:0a:83:1c:2a:e8:90:8a:fb:70:92:36:e9:5d:55:e4:
bf:17:d2:b8:4a:44:2f:e3:05:9c:ac:8e:95:01:0b:28:78:e6:
20:99:2f:62:f9:09:08:2a:6a:2f:15:ba:ef:ae:ab:99:f0:c3:
02:fd:72:2f:1b:15:a2:a0:99:9f:bd:c5:d2:d7:ad:04:5a:ef:
5a:0f:3d:ea:6f:98:ef:5b:49:9d:96:5d:96:33:4c:dc:60:88:
20:d6:4d:44:93:25:fa:f0:f7:cc:f4:46:d2:8d:9d:d9:a3:ca:
ce:45:66:ed:90:6e:b3:2e:a3:64:8b:6c:78:75:4b:07:23:53:
0d:ac:70:45:d7:0a:47:85:e0:79:a9:18:a0:bc:d4:3c:aa:1f:
ed:c3:57:7d:b5:bb:53:63:18:0f:77:4f:df:16:f8:85:c2:53:
ef:f5:de:68:9f:6b:d5:54:a5:4c:59:83:63:a1:2f:31:11:1f:
8a:f2:f5:0b:58:8e:c0:23:b8:3f:2f:e9:29:b1:03:f6:cf:67:
a2:ed:10:b2:25:06:89:90:b5:ac:13:12:4a:ba:9f:2a:5a:d1:
57:3c:34:6e:a1:86:66:f7:f3:7a:95:e2:27:30:da:fa:c2:70:
49:1b:6f:5d:5b:c1:47:5e:35:14:f5:97:38:45:b1:9f:46:54:
a0:96:d1:e3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZMQ8hq263x19lLsjj1E9ykPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQxMTA5MTI0MjAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODZmZjkzY2E3MDQ3Yzk4NzEwZWE3ZTc2NTI2MWQ5NTUxMzlkMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUO5YSFtpfzSrrU6P/wNl11FDp9z
eRuvLsAAXIS3jiohcELGkSh5Zrn/C/FnROB2ljq0OU2bY7SgeGWzueaEuSxB9oEw
smrG7k5z4PqO5ajGDxzP9gWLejH3cU3wZHf3GqkTXg6uaNUh+lJikbgpSZMFah2J
V1+FLxLuvHb+C61+V19aNeyhLmzm+qacQBW1vA60lyX1OyO0lgxW+a62N1mwreXX
Y+82/THdkAxN50T9/cTo9U6dTLz1CHTBM+BREhp1XvLGVFhAENaeMIsoobw4rsI/
vXpdr3bmwP9w0iszLPFqK7Sl2ESsZ5XAni6EjOH1eR4oQemWt5AggkwixQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJhv+TynBHyYcQ6n52UmHZVROdGcMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbUdfNVBLY0VmSmh4RHFmblpTWWRsVkU1MFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWNg5AwQA
WNi1AwQCWNjkAwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQByAv4Kgxwq6JCK+3CS
NuldVeS/F9K4SkQv4wWcrI6VAQsoeOYgmS9i+QkIKmovFbrvrquZ8MMC/XIvGxWi
oJmfvcXS160EWu9aDz3qb5jvW0mdll2WM0zcYIgg1k1EkyX68PfM9EbSjZ3Zo8rO
RWbtkG6zLqNki2x4dUsHI1MNrHBF1wpHheB5qRigvNQ8qh/tw1d9tbtTYxgPd0/f
FviFwlPv9d5on2vVVKVMWYNjoS8xER+K8vULWI7AI7g/L+kpsQP2z2ei7RCyJQaJ
kLWsExJKup8qWtFXPDRuoYZm9/N6leInMNr6wnBJG29dW8FHXjUU9Zc4RbGfRlSg
ltHj
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:58:33 2025 by rpki-client