Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GIbz96_S2Fs51-h_6a-Rmb6NoBQ.roa
File: GIbz96_S2Fs51-h_6a-Rmb6NoBQ.roa (raw, json)
Hash identifier: 7jBqcfBXgv5BKf6TZnyDIydM7PAety4akNVVCeN+N6s=
Subject key identifier: 18:86:F3:F7:AF:D2:D8:5B:39:D7:E8:7F:E9:AF:91:99:BE:8D:A0:14
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BDD5D5B18AACEEBD0B762C6E2749
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GIbz96_S2Fs51-h_6a-Rmb6NoBQ.roa
Signing time: Thu 02 Jan 2025 17:53:35 +0000
ROA not before: Thu 02 Jan 2025 17:53:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198345
IP address blocks: 84.32.161.0/24 maxlen: 24
84.32.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:bd:d5:d5:b1:8a:ac:ee:bd:0b:76:2c:6e:27:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1886f3f7afd2d85b39d7e87fe9af9199be8da014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:7d:71:dc:fd:f6:2f:99:4e:5f:4f:85:88:
d5:9c:ca:55:ef:e7:af:ea:5f:58:55:5b:8d:16:b9:
ad:4f:c9:9b:d8:66:9b:2d:ad:77:f6:b2:1f:f2:13:
42:67:9b:f1:ac:4b:3d:9a:05:65:b5:f7:0d:65:33:
44:3d:de:54:7a:f6:84:6d:75:fa:11:13:8f:a5:14:
db:d8:0e:d0:16:ab:56:b0:68:8c:eb:fc:29:0b:88:
e4:1d:7c:84:f5:d8:be:75:45:0b:c3:32:ae:ea:c7:
fd:2e:ef:87:fc:ba:2d:de:31:7c:fd:d1:76:e9:f3:
58:ea:ff:b2:d1:25:83:0b:4a:56:6a:56:81:94:12:
5e:18:51:84:7e:56:a3:16:65:7f:b3:05:f6:05:b4:
d2:53:5f:d8:01:39:6d:7c:0b:6d:a0:5f:72:e2:85:
4e:fd:81:1f:8f:10:60:50:d3:40:5a:c3:f0:b0:e5:
a9:b3:4e:0b:24:a8:16:1f:a1:b7:87:a6:d5:fc:49:
ff:76:5f:85:c3:c1:73:bd:75:82:52:ed:15:54:7f:
f2:87:48:ac:16:2a:f7:ad:e4:6a:f0:7c:e3:ba:36:
3a:f4:e5:15:80:f3:fa:d9:4c:8d:a0:7e:76:04:24:
a2:2a:17:ea:38:51:58:f7:fc:1f:0c:27:24:41:c7:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:F3:F7:AF:D2:D8:5B:39:D7:E8:7F:E9:AF:91:99:BE:8D:A0:14
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GIbz96_S2Fs51-h_6a-Rmb6NoBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.161.0-84.32.163.255
Signature Algorithm: sha256WithRSAEncryption
99:20:ed:3f:e2:8b:d1:11:2c:62:d5:a0:67:33:f9:22:48:3a:
aa:d5:d0:a5:62:7a:ad:57:c5:6a:f1:8c:3d:23:03:b7:ae:ef:
eb:8b:44:9a:b1:fb:99:60:35:7d:d8:b5:4e:37:18:c8:66:8c:
e7:4d:fb:cc:ac:73:4b:67:14:a2:1f:ff:19:b3:85:ba:04:b8:
ea:fa:8d:68:cf:5d:ff:20:35:cd:36:f9:e2:37:43:51:ab:c5:
e1:8c:8a:3e:8d:6b:29:56:02:55:1b:92:24:63:00:85:fb:61:
40:cb:ab:a3:5a:20:85:55:3d:9f:99:7f:80:bd:ce:89:1e:0f:
1b:51:56:b1:94:b7:5b:42:42:f0:72:4d:2b:69:81:8d:95:aa:
de:3d:88:5b:49:60:49:d3:be:eb:0e:7e:60:c5:96:48:d6:eb:
1c:8f:f6:c0:ef:19:9b:26:d0:f1:05:18:8c:29:f0:87:ac:7d:
c0:f3:75:7a:36:28:69:9e:c3:08:55:6a:6c:fa:b0:cf:3f:a0:
8d:02:b5:21:d1:dc:0b:35:45:12:7d:3e:b8:93:60:61:30:85:
f4:94:d0:6e:78:08:49:d6:17:ff:4e:77:42:76:b6:49:ed:c0:
40:87:03:bc:44:f0:7d:93:2e:2e:62:5c:5b:c9:47:d1:bc:ea:
31:8b:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:19 2025 by rpki-client