Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6_sHCoJu5Ij386hou9r1gzx1Owo.roa
File: 6_sHCoJu5Ij386hou9r1gzx1Owo.roa (raw, json)
Hash identifier: HKAHTyjZN3LxzmEb21Tirjse4cM0zSyqDZmdBv1pIsE=
Subject key identifier: EB:FB:07:0A:82:6E:E4:88:F7:F3:A8:68:BB:DA:F5:83:3C:75:3B:0A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826A739C2682DFFF8E4286C0FD461E3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6_sHCoJu5Ij386hou9r1gzx1Owo.roa
Signing time: Thu 02 Jan 2025 17:53:29 +0000
ROA not before: Thu 02 Jan 2025 17:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 84.32.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a7:39:c2:68:2d:ff:f8:e4:28:6c:0f:d4:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebfb070a826ee488f7f3a868bbdaf5833c753b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:5f:3b:59:06:03:4a:04:ad:b2:5c:d2:a8:
34:c4:95:d1:c3:3a:7f:0e:5b:03:44:3b:a3:4b:89:
83:85:e4:36:b5:2f:b4:ab:11:81:81:4e:c5:66:47:
32:b4:ad:7d:8a:d8:0b:d4:1f:14:aa:ac:fe:a8:cc:
55:e5:81:07:0b:a8:9f:93:b1:1f:e4:d1:6c:91:07:
a9:7d:53:9f:19:8d:fe:83:14:5a:1c:1e:36:7e:70:
d5:50:c7:59:22:96:6d:df:bb:0e:c9:b0:78:ab:e1:
bd:96:f3:60:14:98:55:89:56:7d:e4:87:c2:22:ea:
21:d2:61:63:a5:a0:ae:ce:09:1e:0a:b0:61:97:1e:
8f:8b:49:61:29:8f:ba:4b:d7:a8:52:98:08:5c:09:
7c:66:de:b9:20:53:40:7d:7e:27:72:f2:19:de:1e:
08:4c:29:a8:e8:cf:fb:a7:d7:4a:be:78:4a:9b:13:
eb:c4:33:55:f0:27:34:13:67:ba:42:1c:9e:13:18:
6c:c1:e8:bf:2e:66:bb:c5:90:c0:cf:ce:2d:9e:80:
06:47:b7:60:5b:8d:5f:99:8b:c2:8e:bb:a8:7a:37:
b6:15:a7:78:3c:e5:1a:f3:f0:bd:ee:d1:81:c8:b9:
87:2c:14:e7:fe:1d:26:15:4b:c0:f3:60:4e:30:4c:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:07:0A:82:6E:E4:88:F7:F3:A8:68:BB:DA:F5:83:3C:75:3B:0A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6_sHCoJu5Ij386hou9r1gzx1Owo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.82.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:12:1d:cd:22:59:8e:f6:18:2b:e7:bb:a2:29:a1:ec:f2:58:
a4:c5:6b:22:48:80:df:25:0a:d4:4e:31:ab:f4:01:28:c8:b4:
88:8b:ec:a8:fa:57:20:e2:47:9b:e0:af:21:4e:bf:91:b7:40:
b8:81:3d:4c:0a:e8:3a:c5:83:4a:80:33:c7:d7:ce:36:0d:2e:
4e:db:31:29:12:7e:9e:c3:31:91:97:46:10:41:5e:41:c5:18:
19:ad:dd:c2:3d:be:57:e0:b6:30:16:13:aa:fc:21:c5:a7:22:
c2:4c:c7:92:32:3b:96:e9:72:2c:b3:eb:3c:ef:61:93:5f:09:
bd:ea:db:42:0f:00:4d:8e:89:0c:25:74:da:05:72:c7:5d:67:
b7:62:7e:b8:13:64:c3:79:43:f1:37:ea:50:6e:ce:81:5f:35:
8e:36:ae:17:ea:23:14:06:4e:cf:d1:3e:46:e3:8a:6c:61:95:
2d:b7:8e:73:45:47:b4:6d:e5:58:7b:a8:9a:f6:ab:d2:9b:f9:
c3:1f:4e:46:6f:14:d3:f4:74:a0:2c:aa:e5:58:50:5e:5b:53:
1a:07:97:40:6c:e3:8d:74:05:ef:97:21:03:ae:f5:3e:de:3e:
09:de:46:a2:3b:88:d8:4f:fe:f5:df:0b:4b:bf:4d:6e:aa:95:
61:32:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:11:54 2025 by rpki-client