Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/p48pxdt5EswsvUKUKrTC-l2dGsU.roa
File: p48pxdt5EswsvUKUKrTC-l2dGsU.roa (raw, json)
Hash identifier: 5e6607xmsCj6BjWhCTZl8cU58872iudq/UPVt7QVupU=
Subject key identifier: A7:8F:29:C5:DB:79:12:CC:2C:BD:42:94:2A:B4:C2:FA:5D:9D:1A:C5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C76B32223E92F66542E70926E2B7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/p48pxdt5EswsvUKUKrTC-l2dGsU.roa
Signing time: Thu 02 Jan 2025 17:53:37 +0000
ROA not before: Thu 02 Jan 2025 17:53:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 88.216.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c7:6b:32:22:3e:92:f6:65:42:e7:09:26:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a78f29c5db7912cc2cbd42942ab4c2fa5d9d1ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:54:b4:83:47:e4:a3:44:05:35:f2:81:8a:
ef:40:5b:ad:3d:60:cc:c9:78:f7:53:cd:98:7d:a5:
40:a6:5a:7d:c5:d9:b8:86:c4:34:ad:08:18:b8:32:
50:1f:c2:f2:d1:2d:a4:1a:83:de:f9:ca:74:df:03:
45:64:42:58:bf:06:bb:1c:6c:3a:0b:b3:89:b0:0b:
1b:a9:d5:b5:78:9f:72:f9:a4:4c:fb:91:db:aa:8e:
b4:27:2d:9b:c5:a7:c1:e6:5d:4f:3d:5a:1e:84:64:
8b:50:ea:95:f1:71:9d:e8:91:9d:6d:8a:9f:7a:be:
53:2e:0e:99:2a:6c:89:5d:b0:30:49:a3:82:69:0f:
6e:86:60:4e:5a:63:11:f5:0c:cd:1d:88:4f:2f:4e:
d2:86:5c:5a:bb:ef:78:a6:06:11:71:43:b9:69:bd:
75:a1:bb:9d:fa:10:3d:ad:c6:5b:7d:08:37:78:c9:
14:f7:c9:99:3c:f9:ad:55:72:fe:ad:de:65:d5:2b:
e7:aa:75:17:5e:e8:1b:cf:92:7e:78:3b:f9:54:f1:
70:9b:a3:58:85:d1:ba:38:e9:c8:b9:b3:fe:40:d6:
66:d8:25:f1:6b:f1:f8:67:ca:9b:d5:74:8d:4f:9e:
41:57:c3:55:52:3e:29:85:9b:c8:a7:8b:c0:46:a7:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8F:29:C5:DB:79:12:CC:2C:BD:42:94:2A:B4:C2:FA:5D:9D:1A:C5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/p48pxdt5EswsvUKUKrTC-l2dGsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:94:77:9e:a7:ab:fd:3f:22:6f:45:30:95:ef:da:20:ff:7c:
4b:4d:9e:52:d6:b2:49:8b:b9:67:3e:f6:78:3e:f4:c9:74:70:
38:c9:49:25:8d:14:bf:9b:73:7d:79:7e:f3:49:fa:f5:f8:07:
43:9f:53:92:4a:25:6f:9b:0c:60:e8:a4:0f:c5:e7:3c:e8:df:
0c:10:44:e6:16:61:87:ba:6d:2e:3e:bf:1d:15:05:79:2c:8c:
13:7f:b9:45:41:6d:f8:81:19:3f:ad:ee:28:47:f2:9e:2b:1b:
13:e1:63:a6:11:fe:29:ab:6d:9c:6f:43:f8:e4:aa:80:15:a9:
98:08:d8:67:da:77:ac:66:e1:f9:7b:8d:f4:be:57:c9:49:8f:
dc:e6:c7:4c:0a:7c:30:0f:60:3e:4d:52:d6:95:3d:8c:bd:c6:
01:f1:34:27:f1:37:8d:22:54:e5:4e:ad:ed:3c:8e:db:6c:91:
8e:26:2e:4a:6c:d2:11:21:43:7c:3e:a2:5c:b1:ca:b2:71:9d:
fa:88:83:f7:d7:08:9e:14:62:12:6a:41:3f:0f:db:1e:6a:48:
1c:8e:fb:ac:35:0c:24:17:42:db:98:1a:62:94:10:fd:d6:44:
80:18:4a:73:de:b2:12:74:fe:d1:f6:2f:75:2a:6c:00:bc:a3:
32:07:1f:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJsdrMiI+kvZlQucJJuK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTAyMTc1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzhmMjljNWRiNzkxMmNjMmNiZDQyOTQyYWI0YzJmYTVkOWQxYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/dUtINH5KNEBTXygYrvQFutPWDM
yXj3U82YfaVAplp9xdm4hsQ0rQgYuDJQH8Ly0S2kGoPe+cp03wNFZEJYvwa7HGw6
C7OJsAsbqdW1eJ9y+aRM+5Hbqo60Jy2bxafB5l1PPVoehGSLUOqV8XGd6JGdbYqf
er5TLg6ZKmyJXbAwSaOCaQ9uhmBOWmMR9QzNHYhPL07Shlxau+94pgYRcUO5ab11
obud+hA9rcZbfQg3eMkU98mZPPmtVXL+rd5l1SvnqnUXXugbz5J+eDv5VPFwm6NY
hdG6OOnIubP+QNZm2CXxa/H4Z8qb1XSNT55BV8NVUj4phZvIp4vARqel+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKePKcXbeRLMLL1ClCq0wvpdnRrFMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcDQ4cHhkdDVFc3dzdlVLVUtyVEMtbDJkR3NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNi0MA0G
CSqGSIb3DQEBCwUAA4IBAQAalHeep6v9PyJvRTCV79og/3xLTZ5S1rJJi7lnPvZ4
PvTJdHA4yUkljRS/m3N9eX7zSfr1+AdDn1OSSiVvmwxg6KQPxec86N8MEETmFmGH
um0uPr8dFQV5LIwTf7lFQW34gRk/re4oR/KeKxsT4WOmEf4pq22cb0P45KqAFamY
CNhn2nesZuH5e430vlfJSY/c5sdMCnwwD2A+TVLWlT2MvcYB8TQn8TeNIlTlTq3t
PI7bbJGOJi5KbNIRIUN8PqJcscqycZ36iIP31wieFGISakE/D9seakgcjvusNQwk
F0LbmBpilBD91kSAGEpz3rISdP7R9i91KmwAvKMyBx/P
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:59 2025 by rpki-client