Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-A1WtSn-KwSOIi5XTiNA0lKWJ9g.roa
File: 1-A1WtSn-KwSOIi5XTiNA0lKWJ9g.roa (raw, json)
Hash identifier: 0Eh8VpEjoUrW1dIsHh3kX01xC2hA6RERmtkbT7+P0mw=
Subject key identifier: F8:0D:56:B5:29:FE:2B:04:8E:22:2E:57:4E:23:40:D2:52:96:27:D8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B85780656AB8CF921651D44D5EB9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-A1WtSn-KwSOIi5XTiNA0lKWJ9g.roa
Signing time: Thu 02 Jan 2025 17:53:33 +0000
ROA not before: Thu 02 Jan 2025 17:53:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62068
IP address blocks: 84.32.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b8:57:80:65:6a:b8:cf:92:16:51:d4:4d:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f80d56b529fe2b048e222e574e2340d2529627d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:05:42:cb:a9:31:48:32:9c:37:b3:fc:11:
f0:94:54:63:41:c7:1e:ca:cc:bc:8e:37:1c:cc:54:
28:91:8c:0e:39:b2:31:50:a7:5e:60:33:d6:ce:17:
ca:5f:3d:b3:50:73:ba:4a:c5:38:b5:44:eb:b6:3c:
54:b2:37:5e:f5:61:74:a9:4f:eb:74:16:ac:60:a6:
bc:35:25:01:af:4e:8d:47:4b:51:45:77:e8:32:57:
cb:60:c8:da:fa:8d:10:a0:16:e5:e3:6a:a3:bb:d4:
9d:29:46:94:dd:53:8d:60:d5:86:1f:32:c9:09:9b:
10:3e:d7:08:48:9e:4e:0f:5c:c3:a5:95:f7:2a:e6:
ba:bc:7c:ce:f9:99:1f:7a:c3:9e:58:cc:0c:d9:5e:
89:ef:8b:7a:68:87:ae:64:c2:b7:49:b8:f0:a9:91:
11:1f:41:7a:43:05:c5:75:43:fd:31:d1:c8:38:28:
ed:44:e7:a8:9a:72:f1:e1:65:1d:e7:d9:46:0f:33:
94:f6:be:4c:91:76:a1:e6:d1:e2:97:16:32:08:61:
0a:c0:90:d1:ca:52:52:77:d5:68:3a:2e:8c:46:6f:
66:53:60:75:9b:02:bd:4c:af:0e:53:39:d8:05:26:
46:f9:84:86:4b:e2:d3:8d:ba:de:89:19:b5:e3:cf:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0D:56:B5:29:FE:2B:04:8E:22:2E:57:4E:23:40:D2:52:96:27:D8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-A1WtSn-KwSOIi5XTiNA0lKWJ9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6c:68:cd:b4:f1:4a:29:51:55:73:af:98:b4:02:df:4a:53:
2f:2e:b6:fa:35:99:91:92:8e:c9:42:38:97:81:1b:a6:40:3b:
cb:75:cd:31:ab:0f:18:81:dc:da:04:b6:cb:b1:bc:79:74:2b:
d1:2a:de:b6:ca:8a:e4:69:06:ab:20:51:ce:55:74:f9:88:68:
e3:44:4c:bc:5e:b2:5b:2a:bc:42:1c:f3:90:c3:e5:43:05:5e:
02:5e:02:ea:5b:37:32:1b:e1:38:9e:4f:d4:d9:fe:31:fd:83:
4f:bc:6d:7e:cc:4b:cc:c0:65:34:01:95:14:6a:a3:20:66:bb:
c4:63:4b:79:58:02:e3:b6:01:7b:ba:be:1e:0d:03:c3:80:7c:
35:10:5c:9c:aa:6d:9d:c4:e5:73:51:d3:70:ad:24:df:57:66:
f1:58:30:44:98:ef:9f:6b:e3:6a:2d:da:1b:25:db:9b:28:d2:
eb:42:5a:fe:a9:fc:99:6f:a2:54:48:5a:28:95:f8:ed:f1:9d:
e5:4c:03:e4:de:5e:4a:a3:66:6f:28:7d:14:94:b6:c6:e0:74:
35:eb:67:c1:22:46:fa:8f:a0:08:ef:90:b1:1a:d4:59:54:98:
13:4c:de:12:e9:5d:24:7c:ca:93:e3:21:1d:93:e2:16:51:47:
43:8f:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:52 2025 by rpki-client