Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N5biZgmapxgXoHJK4fAjiYxlXuo.roa
File: N5biZgmapxgXoHJK4fAjiYxlXuo.roa (raw, json)
Hash identifier: rwppCG44fnu8gxHx+GIEqz+PUxDH5tvjAF4lbaJIfG0=
Subject key identifier: 37:96:E2:66:09:9A:A7:18:17:A0:72:4A:E1:F0:23:89:8C:65:5E:EA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BBB577D13F81A8CBCA6032D0CED0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N5biZgmapxgXoHJK4fAjiYxlXuo.roa
Signing time: Thu 02 Jan 2025 17:53:34 +0000
ROA not before: Thu 02 Jan 2025 17:53:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138997
IP address blocks: 84.32.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:bb:b5:77:d1:3f:81:a8:cb:ca:60:32:d0:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3796e266099aa71817a0724ae1f023898c655eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:23:0c:66:1b:a9:0a:4f:63:33:20:ff:99:
d2:78:dd:9f:e5:dc:41:80:a8:f4:ec:f7:1f:57:c9:
ea:f5:fc:74:d1:86:88:e6:1c:14:f7:3c:f4:70:be:
6a:68:85:c7:89:97:87:bd:55:9f:9e:fa:03:f8:55:
a9:41:3a:6a:e5:9b:d8:97:68:0f:0c:e6:05:f2:f3:
1a:3b:1a:cc:f8:7e:ef:20:02:9d:58:ab:80:39:8c:
bf:c2:c6:36:65:e6:f7:c4:4a:e8:ea:b1:ec:19:cb:
a4:26:b8:d7:e6:06:21:27:87:89:db:cd:2e:d1:15:
67:bf:00:ac:12:19:5b:01:99:90:b8:65:b6:1e:18:
55:a4:3e:a8:0b:8c:a8:9e:6f:98:9e:09:b5:cf:cb:
06:9d:06:f6:e6:4b:7f:71:31:cf:33:82:ea:71:db:
92:29:55:d8:f6:d7:cd:fa:60:56:42:c6:75:71:54:
dd:43:c2:2e:ee:e4:32:8d:c8:e0:43:96:9d:7e:98:
af:95:63:84:f1:e6:d0:d2:de:62:97:71:21:86:44:
ed:bb:c5:b7:00:ac:24:08:82:f1:c4:56:68:16:1b:
11:0f:10:e9:13:5d:94:03:e4:85:69:82:6d:17:16:
46:e3:8f:df:6b:3c:fb:14:5a:72:66:e5:35:88:48:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:E2:66:09:9A:A7:18:17:A0:72:4A:E1:F0:23:89:8C:65:5E:EA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N5biZgmapxgXoHJK4fAjiYxlXuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6a:60:38:ef:8f:86:a1:e8:7d:1f:bd:db:8b:96:7e:5a:f0:
b0:97:ab:b3:02:55:9f:e5:fb:b2:bf:9d:11:fc:cc:e8:1b:f8:
c4:12:3c:98:8e:b1:0a:20:01:f0:f1:27:7a:cd:bb:82:d1:64:
3c:25:c8:ff:f2:9f:bb:e5:4c:92:12:46:06:fc:d2:ec:0e:68:
60:14:fc:b3:bc:aa:89:aa:f1:fd:f9:41:06:d8:d6:ab:ab:80:
e1:fd:4b:34:96:8f:4e:6d:6c:c8:b2:50:e8:c7:34:5c:c6:31:
94:0f:61:97:5c:56:45:e2:5e:ea:21:a7:8f:77:c8:ed:4f:13:
34:76:40:0b:9c:2b:a4:13:1e:0e:9a:d6:1c:5b:8d:1b:13:30:
62:7c:1a:c0:30:0b:32:7c:e6:16:8e:bd:c4:e9:c3:09:94:eb:
bb:fd:a8:5b:fa:96:66:dd:a3:92:b3:21:02:1f:5a:f4:76:8b:
66:54:8c:c6:4f:44:72:91:2e:0b:2b:1d:f4:d3:44:00:47:7e:
85:20:b7:1c:44:dd:37:36:a2:16:dc:3b:63:74:0e:f3:f1:92:
a5:ca:e6:41:49:ec:88:1b:a0:f6:61:0c:47:80:62:73:13:17:
22:20:20:00:83:e9:f6:cc:1e:9a:90:34:36:47:8e:ea:0e:85:
fb:53:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:09:39 2025 by rpki-client