Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AzLqv8kZP6kawBn7xrK8t2a9pJo.roa
File: AzLqv8kZP6kawBn7xrK8t2a9pJo.roa (raw, json)
Hash identifier: POi/WmkIFG14jwTpD/oNwG8IVXUQazNdByipYxZqNIk=
Subject key identifier: 03:32:EA:BF:C9:19:3F:A9:1A:C0:19:FB:C6:B2:BC:B7:66:BD:A4:9A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194CB103E10D1D8A4347BAC26BD075A3547
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AzLqv8kZP6kawBn7xrK8t2a9pJo.roa
Signing time: Mon 03 Feb 2025 09:07:06 +0000
ROA not before: Mon 03 Feb 2025 09:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:10:3e:10:d1:d8:a4:34:7b:ac:26:bd:07:5a:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 3 09:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0332eabfc9193fa91ac019fbc6b2bcb766bda49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:fe:d4:12:4c:05:e5:ae:58:e5:d9:f9:63:
9d:17:ec:f8:68:db:0d:0f:57:80:bb:27:6a:3a:31:
b2:9f:ab:dc:34:da:89:30:c4:cd:88:79:87:62:e7:
29:00:70:bd:70:14:8b:c9:18:e7:5f:a0:09:36:2b:
69:62:a1:c7:57:3c:2a:79:04:da:b7:a9:d4:22:bb:
ce:e5:35:fd:db:bc:f5:b4:7c:71:23:20:0f:b8:6b:
10:3a:a1:2f:bb:8c:5b:62:35:8e:c3:f5:53:6b:41:
23:38:23:be:3d:0a:1f:af:df:87:7c:b0:e7:a2:a0:
3d:a2:48:e6:84:cc:b7:f6:98:69:63:c4:12:c4:b3:
93:7e:9d:61:00:a0:6b:d7:bf:63:56:21:ac:e3:3c:
96:d8:41:d1:0d:60:00:e6:a5:9e:e2:e8:25:e3:8f:
2c:2d:8d:7a:80:84:bd:13:4e:cb:a5:91:16:bb:a1:
91:dc:2b:99:d2:29:8e:34:cb:a4:bf:d1:a5:87:c6:
45:2c:9e:21:a2:d6:8e:69:06:21:28:9a:2e:ac:4b:
f9:01:83:06:c3:47:3a:e8:33:1e:0c:bf:e3:9c:f9:
93:da:cc:8a:6b:fa:ce:4a:4e:23:78:bf:7d:fa:67:
50:77:cf:76:84:b5:6c:ea:13:70:01:3d:69:54:4a:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:EA:BF:C9:19:3F:A9:1A:C0:19:FB:C6:B2:BC:B7:66:BD:A4:9A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AzLqv8kZP6kawBn7xrK8t2a9pJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.64.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
Signature Algorithm: sha256WithRSAEncryption
76:46:53:49:5a:ac:17:ef:16:fe:b1:0e:1d:23:3d:3f:9d:3d:
e1:2d:1b:d1:49:d1:95:1e:aa:ef:97:5f:f2:68:ef:86:8b:40:
a6:20:2c:97:6b:46:9b:75:b7:8f:48:1b:97:21:98:62:a5:14:
83:33:5f:e6:d5:75:db:18:f6:b4:f3:05:db:74:c3:4c:03:ce:
94:f8:d6:a6:26:ed:55:8a:9c:70:6c:ec:08:24:c4:8f:d7:c7:
c7:f4:0f:ea:61:8c:2f:a5:84:bf:aa:0e:a6:57:09:b7:62:93:
d4:d8:30:40:1c:96:ee:9d:47:75:13:f6:de:af:68:fc:9c:f3:
71:7c:8d:a4:d5:dc:15:64:0f:ae:14:29:2d:02:d0:37:c0:8e:
f5:d1:9c:db:72:81:66:b0:28:73:4f:70:e2:2a:c8:7e:c2:d7:
99:e3:de:45:4e:53:c7:f5:f9:02:d9:d2:41:43:22:f6:54:12:
e6:75:29:d8:95:bd:2b:41:c8:e2:88:ac:e1:3f:39:ef:42:75:
3f:72:05:d0:31:86:44:0c:43:a5:61:27:82:ef:11:49:c8:88:
2b:12:9e:7b:b0:79:80:39:af:6b:05:7e:98:05:99:29:9c:e6:
6a:5f:53:05:65:fd:bf:06:89:52:84:ed:78:ef:da:d8:44:07:
46:1a:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:52 2025 by rpki-client