Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o6ZuBXAyALz15uAE-ODWqoozWqM.roa
File: o6ZuBXAyALz15uAE-ODWqoozWqM.roa (raw, json)
Hash identifier: AV6TzPbKhLtu6cwZFpcdlYds1Vp5J9/aAOXMBr+RX5Y=
Subject key identifier: A3:A6:6E:05:70:32:00:BC:F5:E6:E0:04:F8:E0:D6:AA:8A:33:5A:A3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B170F96060B5DCD637F8D077A5A6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o6ZuBXAyALz15uAE-ODWqoozWqM.roa
Signing time: Thu 02 Jan 2025 17:53:31 +0000
ROA not before: Thu 02 Jan 2025 17:53:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 84.32.10.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b1:70:f9:60:60:b5:dc:d6:37:f8:d0:77:a5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3a66e05703200bcf5e6e004f8e0d6aa8a335aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:f2:4d:c6:0f:d0:78:32:e0:80:7e:66:52:
b2:10:89:be:2e:b1:41:8a:df:18:09:32:d6:7d:7f:
7a:91:13:06:27:e0:d8:d8:db:75:57:2b:b8:c5:f7:
82:9d:ab:ee:c7:bc:0c:17:4b:60:ca:08:b8:96:c6:
d6:51:57:f9:cc:e0:40:4b:06:73:63:fa:c3:ba:63:
c4:29:e5:ee:95:d6:36:61:d6:d3:f2:a9:6e:5a:b4:
ac:6e:cf:cd:2d:60:ea:d5:c8:df:de:86:43:d5:1c:
6e:ab:1a:e4:d7:48:1a:a9:03:98:38:9c:96:f5:58:
56:8a:34:5a:1f:7b:e7:ea:d5:b7:0a:5d:cb:20:96:
18:02:9f:35:5b:6f:4d:2e:6a:8e:00:86:29:d3:0e:
a2:e7:de:27:f6:8b:3c:51:49:65:80:b0:18:38:66:
1d:7f:3f:08:1a:37:27:22:24:90:c2:e9:04:6c:a6:
ce:46:b3:de:67:20:37:3e:21:fd:cb:54:1f:33:8b:
01:cf:f4:08:43:97:67:fb:47:7e:f7:90:c3:12:e9:
54:fb:1f:02:55:af:34:29:6e:fa:e8:28:7b:e6:c6:
ec:68:44:c5:fb:03:18:d6:2b:47:3b:cf:c1:a8:9f:
21:64:7e:6a:2a:0c:f5:2f:42:8a:9a:5b:54:fd:31:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:6E:05:70:32:00:BC:F5:E6:E0:04:F8:E0:D6:AA:8A:33:5A:A3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o6ZuBXAyALz15uAE-ODWqoozWqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.10.0/24
84.32.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:22:fe:c0:6a:1a:fd:22:be:e7:50:11:b3:9f:9d:dd:57:0d:
61:f2:4c:a4:8f:ac:3f:db:d3:e8:49:0c:e9:b5:df:79:7a:cf:
38:aa:d4:84:1a:bb:9c:39:94:f7:7b:17:f9:79:f1:fc:76:e6:
13:dd:c6:9d:3b:9d:8d:16:41:05:52:29:76:ae:ad:86:ff:a7:
f9:a6:30:9a:53:cd:94:88:61:a7:d5:7d:fb:f7:32:96:9d:51:
4c:25:f8:47:f2:a7:81:36:13:40:31:57:44:7f:97:c8:3e:98:
91:5f:5b:72:a3:e9:f6:8d:94:77:6c:53:cc:1f:37:c3:52:57:
01:cd:12:a8:ab:d0:f3:aa:24:4f:31:93:51:9a:37:03:09:4a:
61:62:bf:34:0b:2d:b0:1e:12:19:9e:6c:9d:1d:19:28:40:0c:
d6:2b:e1:50:14:b2:88:d2:48:76:46:7d:60:d2:8b:34:8e:5a:
0c:3c:55:51:6f:40:ec:35:e8:e3:0f:f2:9c:4f:f0:21:0f:80:
9e:8e:cf:94:a3:06:63:17:68:73:ef:6a:d4:37:9a:4e:b7:c1:
44:29:ac:07:7a:66:07:14:f4:f5:72:64:9f:a8:cc:65:ea:eb:
1b:13:e6:00:d3:fb:c7:a2:e9:30:bf:88:7a:66:cd:6b:c8:09:
63:48:2c:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJrFw+WBgtdzWN/jQd6WmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTAyMTc1MzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2E2NmUwNTcwMzIwMGJjZjVlNmUwMDRmOGUwZDZhYThhMzM1YWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE3yTcYP0Hgy4IB+ZlKyEIm+LrFB
it8YCTLWfX96kRMGJ+DY2Nt1Vyu4xfeCnavux7wMF0tgygi4lsbWUVf5zOBASwZz
Y/rDumPEKeXuldY2YdbT8qluWrSsbs/NLWDq1cjf3oZD1Rxuqxrk10gaqQOYOJyW
9VhWijRaH3vn6tW3Cl3LIJYYAp81W29NLmqOAIYp0w6i594n9os8UUllgLAYOGYd
fz8IGjcnIiSQwukEbKbORrPeZyA3PiH9y1QfM4sBz/QIQ5dn+0d+95DDEulU+x8C
Va80KW766Ch75sbsaETF+wMY1itHO8/BqJ8hZH5qKgz1L0KKmltU/TG7owIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKOmbgVwMgC89ebgBPjg1qqKM1qjMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbzZadUJYQXlBTHoxNXVBRS1PRFdxb296V3FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAKAwQA
VCBTMA0GCSqGSIb3DQEBCwUAA4IBAQB8Iv7Aahr9Ir7nUBGzn53dVw1h8kykj6w/
29PoSQzptd95es84qtSEGrucOZT3exf5efH8duYT3cadO52NFkEFUil2rq2G/6f5
pjCaU82UiGGn1X379zKWnVFMJfhH8qeBNhNAMVdEf5fIPpiRX1tyo+n2jZR3bFPM
HzfDUlcBzRKoq9DzqiRPMZNRmjcDCUphYr80Cy2wHhIZnmydHRkoQAzWK+FQFLKI
0kh2Rn1g0os0jloMPFVRb0DsNejjD/KcT/AhD4Cejs+UowZjF2hz72rUN5pOt8FE
KawHemYHFPT1cmSfqMxl6usbE+YA0/vHoukwv4h6Zs1ryAljSCxY
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:16:58 2025 by rpki-client