Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FPuT2rTOpWS0nXVn4oQwJj70iBg.roa
File: FPuT2rTOpWS0nXVn4oQwJj70iBg.roa (raw, json)
Hash identifier: +Ul/Yn805mjgkPObwmTpImKBnVzPgbc/Z8ObJlk8cRQ=
Subject key identifier: 14:FB:93:DA:B4:CE:A5:64:B4:9D:75:67:E2:84:30:26:3E:F4:88:18
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0195A06331F86184E1AAD28A27026F1AC3A9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FPuT2rTOpWS0nXVn4oQwJj70iBg.roa
Signing time: Sun 16 Mar 2025 19:16:50 +0000
ROA not before: Sun 16 Mar 2025 19:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 84.32.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:63:31:f8:61:84:e1:aa:d2:8a:27:02:6f:1a:c3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 16 19:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14fb93dab4cea564b49d7567e28430263ef48818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:d8:ef:cb:8b:4b:ea:0d:07:cc:10:16:22:
92:cb:7e:ee:bf:c9:b9:48:2e:21:15:51:59:ee:39:
bc:d9:76:e3:50:c6:46:6b:91:0a:64:87:c9:3e:00:
4f:08:bc:a0:dc:6b:7f:0e:f1:35:f5:ea:0d:20:78:
cd:98:3c:31:ee:42:ef:e1:d3:d5:36:b4:91:35:70:
b7:c1:4c:8c:07:ff:90:66:46:c3:23:c5:07:57:71:
89:e4:c4:64:c5:27:0f:d6:0a:9d:3a:92:97:98:b2:
4f:d8:9d:e9:2f:73:da:dd:04:cf:c7:9a:b3:e5:66:
b8:a9:06:cd:0e:38:8c:e7:02:b6:0a:cc:3d:ac:a2:
f5:b8:c8:11:67:14:1e:ab:1b:78:e5:33:02:b5:c8:
21:e2:e9:6c:74:f2:09:c5:af:bd:69:4a:23:75:b9:
00:7a:f2:16:5a:0f:10:4a:2d:3c:aa:cf:a3:d6:8c:
34:cd:11:8b:bc:44:ec:3f:1a:6c:b2:76:0c:94:7b:
16:8e:fd:5f:38:5c:2c:8e:5d:24:8c:c3:e1:0f:b7:
76:be:ea:83:6f:ee:ca:ef:4f:87:6c:fb:57:cf:89:
9d:90:4a:a2:c2:e3:14:6b:ff:f4:b0:92:1b:bc:a5:
d2:d4:27:ab:63:49:6a:1c:7d:e4:b8:3a:ac:09:ea:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:93:DA:B4:CE:A5:64:B4:9D:75:67:E2:84:30:26:3E:F4:88:18
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FPuT2rTOpWS0nXVn4oQwJj70iBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.63.0/24
Signature Algorithm: sha256WithRSAEncryption
54:75:6d:a0:da:05:1e:11:32:da:b7:ee:fc:1f:e6:7a:de:74:
2d:f8:1b:2c:ce:98:68:ff:40:c7:23:60:aa:1d:88:51:35:68:
a6:1d:5d:2a:4a:d1:1c:8d:70:a2:a6:08:ec:59:68:8b:ac:69:
c9:fc:57:ac:17:0c:f4:96:3a:d0:b9:3e:2d:46:59:14:b9:ac:
18:6f:f7:29:d0:f4:14:3f:a6:43:c0:53:b4:a4:54:12:f7:f8:
79:9a:b4:ba:3f:c1:2b:6f:13:cc:38:e2:a0:a1:6c:96:9b:09:
07:f5:f4:a1:22:8d:6e:b8:0d:f8:e2:60:bf:fd:fa:f7:97:52:
dc:1a:de:16:e2:c0:6e:33:0f:83:41:2e:22:46:d8:0c:83:fe:
d1:d4:68:4c:76:be:51:40:07:05:f4:70:73:71:5f:dc:18:90:
40:e1:87:68:41:55:81:37:18:84:9c:24:48:e7:e2:b7:52:b3:
d6:2c:99:e4:a1:83:8b:e3:83:df:13:ca:de:2a:1f:0a:a0:93:
47:a6:08:29:e5:87:f9:26:19:d7:6d:07:35:69:25:ec:33:82:
6b:2e:67:a7:ab:66:2f:91:d1:c6:39:3d:43:78:b9:4d:7d:7a:
c5:6f:52:b0:f8:3c:c6:35:40:f5:c9:6a:ce:b7:fc:a8:dc:fb:
51:c1:18:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:22 2025 by rpki-client