Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7cYCqLarcfjYaW9gT-F75fXU3e0.roa
File: 7cYCqLarcfjYaW9gT-F75fXU3e0.roa (raw, json)
Hash identifier: Oh3jlHMJdj11kYhRfkrA5K9+HhBmVbWXlhHIa5LDdYk=
Subject key identifier: ED:C6:02:A8:B6:AB:71:F8:D8:69:6F:60:4F:E1:7B:E5:F5:D4:DD:ED
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01891811F8D4D2A3A2922F622DBD7C38AC63
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7cYCqLarcfjYaW9gT-F75fXU3e0.roa
Signing time: Sun 02 Jul 2023 19:26:18 +0000
ROA not before: Sun 02 Jul 2023 19:26:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:18:11:f8:d4:d2:a3:a2:92:2f:62:2d:bd:7c:38:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 2 19:26:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edc602a8b6ab71f8d8696f604fe17be5f5d4dded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:68:bc:0a:c3:80:c8:c8:3f:06:07:fd:5b:
53:62:3c:e4:aa:9a:05:76:57:53:f4:6b:8f:14:12:
4e:f3:08:16:33:8f:a4:48:e1:c9:45:c7:26:5a:43:
a0:b2:8b:74:ec:0a:20:bf:a0:59:3a:3e:5c:8e:a4:
17:a6:21:5a:e6:a1:32:c7:aa:f6:ee:26:2e:55:fb:
b8:fc:43:8d:8d:1f:1d:e9:50:7d:9a:e1:24:fa:38:
20:0c:8f:18:f3:9a:5a:ff:bd:e3:1e:cc:68:ea:df:
5f:47:7c:43:20:0e:16:d3:c1:54:86:db:9e:7b:17:
a7:98:6f:a5:0a:f9:d7:2f:33:01:08:f8:2a:be:dc:
10:a2:11:02:ed:2d:57:5d:8f:6b:eb:06:86:ab:00:
97:3c:fd:c3:67:a0:39:50:a5:34:2d:c9:b5:a2:58:
19:54:e2:34:d6:b0:15:bc:d0:1f:73:71:89:63:12:
10:e1:d0:e7:a8:a8:f3:e5:c3:55:a8:5e:fd:d8:07:
cc:36:71:d0:5f:87:a9:99:35:5f:a6:2a:c7:a7:d9:
b2:f6:bc:b4:31:b9:2b:83:85:31:f7:dc:7c:10:45:
4c:08:2a:3c:8f:af:c9:98:a1:34:10:b3:ac:75:5c:
81:3f:51:b5:4b:7c:1f:3f:93:39:d8:3a:c2:ce:8c:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C6:02:A8:B6:AB:71:F8:D8:69:6F:60:4F:E1:7B:E5:F5:D4:DD:ED
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7cYCqLarcfjYaW9gT-F75fXU3e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:97:cc:cc:5e:06:29:14:17:b0:c5:ea:c8:38:02:49:1f:72:
12:a7:4d:23:31:d5:30:83:8f:7d:03:b5:7d:a4:2f:50:0b:0f:
5d:71:97:57:30:16:36:30:24:70:e6:36:a5:c0:98:ba:3b:92:
f2:46:28:3d:d8:da:e3:09:d2:98:cd:14:a8:51:09:06:df:93:
af:fc:b9:5e:2e:90:2c:3a:53:aa:c5:7c:17:4b:49:3a:57:e8:
27:ec:63:b5:39:ce:1c:04:49:87:66:30:a6:5d:81:a8:b2:34:
87:f4:45:5f:91:14:b0:82:ee:7f:cf:a8:fa:6a:97:b5:54:98:
23:f6:55:23:20:d1:25:fa:80:3e:13:ab:25:bc:29:7f:e9:79:
7e:1f:e9:0e:b7:5c:54:7b:b1:8a:7f:42:a3:81:ec:ad:43:0f:
d6:f0:d8:05:e2:23:95:12:4b:80:c5:ef:db:2c:cd:4b:c7:78:
c1:36:3f:a5:16:50:d0:b3:88:9c:19:eb:69:c4:f5:f6:60:73:
15:dd:12:2f:f7:ac:62:4e:63:bb:50:6d:69:69:e0:18:0b:85:
14:87:12:32:96:f7:e1:1f:de:4a:3e:85:47:8a:57:ab:23:33:
90:88:ef:81:6e:65:8b:36:58:0a:d6:3f:ca:87:d8:9c:98:92:
53:52:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:40 2025 by rpki-client