Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0WYdW_-X7ffsBvQx4w12UkRlaJ8.roa
File: 0WYdW_-X7ffsBvQx4w12UkRlaJ8.roa (raw, json)
Hash identifier: FIc+Y+Nz9mtrMqrVfJGc2Df1gwRxXbp1OyDZU1xOEFI=
Subject key identifier: D1:66:1D:5B:FF:97:ED:F7:EC:06:F4:31:E3:0D:76:52:44:65:68:9F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019371B2E82DAA0D42D5B9CB7A1C64F141DF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0WYdW_-X7ffsBvQx4w12UkRlaJ8.roa
Signing time: Thu 28 Nov 2024 07:36:10 +0000
ROA not before: Thu 28 Nov 2024 07:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.220.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:b2:e8:2d:aa:0d:42:d5:b9:cb:7a:1c:64:f1:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 28 07:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1661d5bff97edf7ec06f431e30d76524465689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:41:f6:04:db:fd:c9:4e:fd:7e:6a:ec:2c:
e7:6c:49:f2:47:6a:c1:d9:a1:94:ab:1d:15:eb:91:
ba:1c:2a:6f:58:ab:15:1d:47:e3:d6:6b:23:c8:33:
b0:07:6d:9a:4e:7b:79:68:14:d1:16:2d:13:93:6b:
58:24:98:00:a6:2f:b6:b9:76:79:d8:05:4c:55:87:
3a:f0:71:6e:0f:c7:1d:74:75:c2:1d:0a:44:11:5c:
76:26:49:05:15:69:6c:78:90:53:ef:f3:38:8e:75:
e1:9d:74:1a:0c:d2:1e:e6:6c:cb:d3:49:81:38:d8:
85:64:85:42:86:1a:7c:8c:97:e8:29:8a:52:2d:6b:
82:ee:cc:48:34:e7:fb:e1:da:c2:72:3d:54:04:97:
73:7b:eb:44:5f:01:9c:d8:4e:41:56:f9:d4:63:33:
fe:3e:5b:d2:5f:9a:ac:a5:9d:b3:e8:22:5e:4b:7b:
7f:aa:ac:45:8e:fa:50:a6:41:82:ed:a8:0f:d4:c0:
62:c6:a3:30:5d:bb:f0:7e:42:a2:be:c1:ba:a1:2f:
4d:74:c3:cf:72:25:eb:15:9e:7c:da:20:0e:00:d1:
5d:3e:b0:2c:b5:93:74:9e:37:e9:9a:6d:01:93:fa:
d7:34:55:a5:55:92:fb:65:8a:d7:4b:cb:cf:ff:a5:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:66:1D:5B:FF:97:ED:F7:EC:06:F4:31:E3:0D:76:52:44:65:68:9F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0WYdW_-X7ffsBvQx4w12UkRlaJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.70.0/23
84.32.128.0/22
84.32.220.0/24
88.216.39.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
96:70:bc:bb:33:50:8f:b1:43:ac:75:41:24:ad:8d:bd:4a:51:
19:ba:88:1e:a9:ce:87:82:48:62:87:d7:ef:a7:3f:c7:38:7f:
ac:a7:cd:76:84:8c:ed:61:0c:89:7f:e2:03:e9:ce:a3:ee:5b:
4e:5e:db:58:e6:ca:ad:e3:a6:25:49:bd:c8:af:04:88:57:a7:
2d:6b:d3:42:64:7e:67:d6:00:b4:56:7e:a1:9a:77:5c:48:79:
62:3c:46:fc:96:a7:a3:ef:1c:d3:92:e0:3f:17:14:b0:dd:a1:
1f:dc:5d:7d:17:24:fd:ac:82:76:ba:77:c7:6b:b1:7a:07:1e:
d2:16:67:33:3a:8e:72:63:b6:3b:32:0d:90:5f:c2:68:d4:a6:
aa:bf:64:af:6a:c4:65:6d:11:4d:e5:28:71:3e:18:5d:2b:73:
d5:b3:3f:eb:88:54:fb:2f:c7:5a:c7:9e:8a:fb:33:85:a2:46:
52:be:37:e8:ce:05:df:c5:54:85:2c:e2:58:44:ae:70:f9:72:
36:91:36:af:61:1d:f6:ce:a9:44:36:35:58:16:e0:39:25:d2:
51:a4:55:d1:bd:3a:ed:bc:7d:9e:25:f0:2b:74:98:d2:8b:17:
15:64:e7:e6:18:d2:dc:d3:de:92:09:77:bf:79:30:9f:48:9d:
10:0b:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:20:32 2025 by rpki-client