Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tRHETPKoRkXFiXGOgDcGPn-L0xI.roa
File: tRHETPKoRkXFiXGOgDcGPn-L0xI.roa (raw, json)
Hash identifier: bOMr8/Y4g1kZIrK5JRJm1dH9b78NGgNyHg1FwVgnh4s=
Subject key identifier: B5:11:C4:4C:F2:A8:46:45:C5:89:71:8E:80:37:06:3E:7F:8B:D3:12
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BF1EA4BEB0C5D072B3FC6E260B61
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tRHETPKoRkXFiXGOgDcGPn-L0xI.roa
Signing time: Thu 02 Jan 2025 17:53:35 +0000
ROA not before: Thu 02 Jan 2025 17:53:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200088
IP address blocks: 88.216.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:bf:1e:a4:be:b0:c5:d0:72:b3:fc:6e:26:0b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b511c44cf2a84645c589718e8037063e7f8bd312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:95:ae:aa:85:70:2f:e9:ab:3e:ad:49:ca:
35:f8:d2:ca:33:17:4a:b6:af:bc:b0:a6:f3:66:95:
d1:8b:f1:bf:38:93:6d:8d:78:0c:9c:0c:52:67:ff:
2b:cf:d7:61:03:7c:5e:23:1d:a7:35:a5:a6:91:3d:
89:8f:8d:87:d8:a8:91:aa:a7:b6:95:47:2e:5c:27:
c0:cc:dc:95:89:72:35:32:d8:35:fd:27:56:87:2a:
cb:a4:d8:90:20:fe:b2:21:cf:57:d4:6f:ea:c9:6a:
13:35:a8:b9:02:ea:c5:55:1f:32:82:00:9e:bd:de:
63:af:74:b1:36:5f:26:5a:77:3a:3a:7f:22:72:03:
44:ea:e2:b0:ce:32:ec:57:12:8c:59:e4:78:b1:91:
66:69:01:f3:be:f6:7a:a1:3b:fe:2e:8e:00:15:19:
22:1a:a8:36:93:5e:a9:12:95:b5:cc:3a:32:01:7f:
0a:0c:68:7c:46:92:07:83:9e:1e:6f:aa:34:98:58:
66:1b:a8:25:83:68:7e:86:3e:6d:1a:5b:3f:bc:53:
63:ad:18:80:91:b1:aa:35:d4:37:88:10:48:0e:ee:
4f:2d:46:40:a2:99:89:5e:c3:37:09:0d:a1:2a:53:
45:db:5a:44:c4:cd:72:b4:8c:ee:0a:8a:bb:74:bf:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:C4:4C:F2:A8:46:45:C5:89:71:8E:80:37:06:3E:7F:8B:D3:12
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tRHETPKoRkXFiXGOgDcGPn-L0xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.19.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a1:d8:cb:29:a6:05:4a:08:e7:55:47:d9:f7:31:da:ef:ad:
da:ce:11:4e:4c:91:da:27:87:c3:b9:d7:59:11:a5:83:31:e3:
92:3e:2c:4f:ed:3a:66:b6:4d:60:95:3a:70:b7:06:82:3f:1a:
86:cf:ee:35:a0:8e:29:dc:37:7e:ac:c7:f2:4d:d7:0f:a8:62:
59:77:b4:d7:b9:4a:52:97:ea:8e:3f:71:49:3a:e0:75:e7:48:
b0:0d:5c:cd:c2:38:83:24:63:57:84:4c:a6:98:d8:b4:ba:03:
e5:4c:ce:5e:11:f2:27:e2:95:0e:1b:45:3e:1f:5f:04:bc:99:
91:db:f1:2b:51:97:fd:f5:46:16:27:2c:d8:76:58:16:6d:42:
a6:1f:20:97:b6:06:b4:47:c1:28:e0:a9:81:22:62:d1:ca:91:
a2:36:ac:bb:36:28:8c:80:f2:7e:38:55:c5:ec:83:c0:7e:19:
8c:fe:95:66:d2:87:99:89:c5:c2:57:aa:0b:90:93:f9:d9:41:
cd:31:04:a9:3e:cb:ba:80:d5:89:e9:bb:ef:ea:9c:6a:9e:3d:
bf:3a:c8:84:45:0b:f5:8c:52:a7:a6:94:bc:bf:46:2d:ee:3f:
de:5b:da:da:ea:15:c5:c2:46:09:29:96:1e:47:ac:a3:77:2c:
ca:38:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:32 2025 by rpki-client