Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/45kQKPRNPEt29UxipZ6J_1bT8rg.roa
File: 45kQKPRNPEt29UxipZ6J_1bT8rg.roa (raw, json)
Hash identifier: 4j3Zu20MD2csKuHI7LK8IwyDchJUI3DC9cl4P9M7L1M=
Subject key identifier: E3:99:10:28:F4:4D:3C:4B:76:F5:4C:62:A5:9E:89:FF:56:D3:F2:B8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BE21C14814258694BB4E3724D780
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/45kQKPRNPEt29UxipZ6J_1bT8rg.roa
Signing time: Thu 02 Jan 2025 17:53:35 +0000
ROA not before: Thu 02 Jan 2025 17:53:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198510
IP address blocks: 84.32.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:be:21:c1:48:14:25:86:94:bb:4e:37:24:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3991028f44d3c4b76f54c62a59e89ff56d3f2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:bd:a9:1d:53:ba:0b:4b:19:7d:92:7f:46:
60:f8:b0:6c:1c:10:55:04:45:3a:26:5c:e1:28:92:
2f:18:a6:ca:31:d5:d3:6b:ae:ba:a6:2d:29:cf:5f:
3c:b1:de:be:d9:b4:11:67:64:15:76:69:a4:48:25:
99:0b:1e:7a:dc:5b:f6:e0:a3:b3:92:71:21:4a:64:
fd:33:ef:80:32:55:11:19:15:b6:c1:c7:31:cf:c3:
9e:41:f6:53:a0:07:35:86:19:51:b8:c9:a6:ee:20:
f5:40:0f:5a:ce:12:e1:43:35:0f:2d:ee:27:ef:10:
6a:b8:fd:ec:fb:57:e8:bc:e9:81:cf:f4:30:76:91:
f2:9d:da:7c:cd:5b:3b:e1:8e:fa:9b:24:60:d7:0f:
c4:e5:3b:f9:6c:59:16:60:4e:f6:db:55:27:18:5a:
ad:0a:56:ff:68:4c:87:a8:e0:30:dc:b8:bf:e0:98:
93:42:b1:48:26:6c:45:22:28:4c:62:60:91:ca:18:
22:ee:33:a3:ae:0e:e4:24:38:23:2c:5c:66:59:db:
23:1f:0e:05:1e:a1:15:75:6a:95:a0:71:80:a6:20:
1c:8e:90:ca:06:59:ed:54:1e:f6:eb:2f:4a:b4:3f:
70:3e:8f:1a:24:08:f0:03:5f:4a:40:98:07:61:99:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:10:28:F4:4D:3C:4B:76:F5:4C:62:A5:9E:89:FF:56:D3:F2:B8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/45kQKPRNPEt29UxipZ6J_1bT8rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.104.0/24
Signature Algorithm: sha256WithRSAEncryption
55:da:65:81:b9:d6:7e:f5:97:6d:32:23:00:65:d9:d2:40:f3:
d8:c9:35:39:c1:f1:a3:09:7a:18:ba:70:6b:01:b8:6b:7d:c2:
90:9f:01:9d:97:d8:11:99:55:a2:ab:ea:ce:7e:32:3b:b1:f8:
7c:95:c0:32:76:27:9e:9c:c7:fb:98:fa:66:ca:79:06:4d:f2:
d1:d1:6d:cd:25:5f:d2:d1:3a:b0:da:ff:dd:58:61:04:60:43:
c2:63:b0:a6:b6:59:f4:c1:c6:09:c3:0e:a7:34:a6:9c:58:9b:
b4:10:74:f6:6e:a2:22:4b:0b:3c:79:31:2a:c6:a3:09:bd:ae:
c8:2e:e0:17:e7:2d:ec:32:ae:66:0f:30:59:d8:82:0a:40:9e:
46:4d:96:fc:60:54:83:bb:04:21:de:46:c8:af:cb:a5:93:42:
55:ea:9b:e4:9e:43:84:8a:a4:3b:8b:5b:1a:f2:5a:62:a9:5f:
70:15:bf:ed:37:2c:37:08:f3:66:6b:ad:8b:61:44:83:e6:b3:
07:4b:d0:7e:8d:e4:4a:d3:aa:35:15:2f:60:ff:d8:ce:60:30:
22:17:35:27:38:46:cb:f5:67:c9:45:b8:bc:1e:3c:dc:e0:07:
87:22:5b:c9:07:4a:86:cc:23:38:22:5a:6b:49:ea:f9:af:3c:
43:ed:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:59 2025 by rpki-client