Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3gkIB1R1uaUQajaAAlLUmRAkero.roa
File: 3gkIB1R1uaUQajaAAlLUmRAkero.roa (raw, json)
Hash identifier: L4+Xz6rK1Ymj2s1y8mfiBLolpnLAmWXrHwKHBde+ayE=
Subject key identifier: DE:09:08:07:54:75:B9:A5:10:6A:36:80:02:52:D4:99:10:24:7A:BA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194A3653618C46B0EFF1147C2B1B8CF5BB7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3gkIB1R1uaUQajaAAlLUmRAkero.roa
Signing time: Sun 26 Jan 2025 16:15:06 +0000
ROA not before: Sun 26 Jan 2025 16:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213751
IP address blocks: 84.32.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:65:36:18:c4:6b:0e:ff:11:47:c2:b1:b8:cf:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 26 16:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de0908075475b9a5106a36800252d49910247aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:3f:dc:75:98:7b:a3:29:ca:7a:75:8b:fa:
e9:0b:8a:82:da:a0:aa:a4:c7:64:94:f4:87:e0:4d:
ef:02:e8:22:41:5f:87:64:a0:b4:22:da:45:21:bf:
e3:f8:6a:76:82:a8:17:83:d7:93:6c:86:3a:f9:aa:
21:d5:fd:df:ed:15:7b:95:4d:95:05:47:db:f2:90:
78:7b:46:94:24:94:1b:03:ff:17:09:11:f0:e2:69:
ed:fb:1c:4d:34:00:bb:b3:c8:15:24:78:ea:4a:b7:
f0:31:18:5e:63:f9:e2:69:ee:ce:df:de:5a:69:13:
4c:fd:21:64:f1:54:a7:51:8c:82:7f:c0:34:64:4c:
c6:c0:8a:58:23:b6:b5:01:ec:13:d8:42:a9:92:87:
65:76:2c:8b:53:6f:39:4f:85:fa:b8:ad:85:fd:71:
af:42:38:0c:99:6f:fd:0e:86:df:a8:ae:3d:86:9b:
71:72:14:14:71:6d:85:19:c5:44:a7:07:c6:a5:51:
48:6b:65:20:a0:22:90:26:f0:ff:a9:61:e3:a5:35:
87:9b:9c:b8:5c:b8:20:00:74:82:32:4a:01:aa:44:
ae:a3:88:3f:2d:cb:f3:7a:39:ab:ce:10:40:f1:83:
bc:13:4c:7a:36:24:50:d3:ab:ed:55:c1:32:93:ba:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:08:07:54:75:B9:A5:10:6A:36:80:02:52:D4:99:10:24:7A:BA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3gkIB1R1uaUQajaAAlLUmRAkero.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.25.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bf:c9:86:21:c7:78:ea:de:7d:a0:51:11:2d:fd:b2:8d:41:
0d:ed:77:34:65:23:39:fb:4a:32:8e:e9:2f:37:cc:d1:a6:d5:
c8:d5:ab:24:8c:39:0f:d9:d6:1f:38:cb:9b:4d:b1:2b:da:50:
a5:a1:1a:8d:0f:f7:e9:2d:f3:f6:e1:8f:f5:79:e9:7e:9a:aa:
27:d5:84:3b:87:50:a6:78:7a:4c:b8:1b:cf:40:03:5c:d9:02:
ef:6b:72:01:14:f5:f4:11:57:cd:1b:c5:d0:e9:ed:38:32:e2:
9e:d9:c7:ac:01:a0:4e:ce:21:13:a8:be:16:33:5c:c3:16:81:
98:77:10:31:94:27:ba:35:7d:ea:a8:c6:bf:cb:7c:d8:23:18:
e6:60:b0:2e:4c:63:65:99:56:14:25:d8:46:77:9e:ed:47:96:
ae:b2:db:93:64:44:03:8d:63:59:34:b2:aa:d1:e4:8f:dc:53:
b3:59:dc:3f:bf:e3:a0:29:21:6b:b1:2d:a9:fa:92:33:04:dc:
70:9d:d7:f5:37:35:5b:75:55:58:4a:72:93:21:81:f5:22:d2:
85:23:14:6a:d2:30:9a:05:18:c7:6e:e4:57:45:cc:61:33:f7:
a8:c5:df:34:cd:cd:59:1b:41:03:8e:43:a1:f5:16:29:39:a5:
dc:bc:6c:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSjZTYYxGsO/xFHwrG4z1u3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTI2MTYxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTA5MDgwNzU0NzViOWE1MTA2YTM2ODAwMjUyZDQ5OTEwMjQ3YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnw/3HWYe6Mpynp1i/rpC4qC2qCq
pMdklPSH4E3vAugiQV+HZKC0ItpFIb/j+Gp2gqgXg9eTbIY6+aoh1f3f7RV7lU2V
BUfb8pB4e0aUJJQbA/8XCRHw4mnt+xxNNAC7s8gVJHjqSrfwMRheY/niae7O395a
aRNM/SFk8VSnUYyCf8A0ZEzGwIpYI7a1AewT2EKpkodldiyLU285T4X6uK2F/XGv
QjgMmW/9DobfqK49hptxchQUcW2FGcVEpwfGpVFIa2UgoCKQJvD/qWHjpTWHm5y4
XLggAHSCMkoBqkSuo4g/LcvzejmrzhBA8YO8E0x6NiRQ06vtVcEyk7o11wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN4JCAdUdbmlEGo2gAJS1JkQJHq6MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvM2drSUIxUjF1YVVRYWphQUFsTFVtUkFrZXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAZMA0G
CSqGSIb3DQEBCwUAA4IBAQCTv8mGIcd46t59oFERLf2yjUEN7Xc0ZSM5+0oyjukv
N8zRptXI1askjDkP2dYfOMubTbEr2lCloRqND/fpLfP24Y/1eel+mqon1YQ7h1Cm
eHpMuBvPQANc2QLva3IBFPX0EVfNG8XQ6e04MuKe2cesAaBOziETqL4WM1zDFoGY
dxAxlCe6NX3qqMa/y3zYIxjmYLAuTGNlmVYUJdhGd57tR5austuTZEQDjWNZNLKq
0eSP3FOzWdw/v+OgKSFrsS2p+pIzBNxwndf1NzVbdVVYSnKTIYH1ItKFIxRq0jCa
BRjHbuRXRcxhM/eoxd80zc1ZG0EDjkOh9RYpOaXcvGzv
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:34 2025 by rpki-client