Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Irpd0Ugn-ExrmbSdstDW-5s2GHk.roa
File: Irpd0Ugn-ExrmbSdstDW-5s2GHk.roa (raw, json)
Hash identifier: k5SoRqukY1Bl21IxbCMVfFCeH2/sr0oXrys/E/jhtA8=
Subject key identifier: 22:BA:5D:D1:48:27:F8:4C:6B:99:B4:9D:B2:D0:D6:FB:9B:36:18:79
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C098935B121ACB4EBCC24D659CA2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Irpd0Ugn-ExrmbSdstDW-5s2GHk.roa
Signing time: Thu 02 Jan 2025 17:53:35 +0000
ROA not before: Thu 02 Jan 2025 17:53:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201579
IP address blocks: 84.32.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c0:98:93:5b:12:1a:cb:4e:bc:c2:4d:65:9c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22ba5dd14827f84c6b99b49db2d0d6fb9b361879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:df:16:a6:e5:e8:79:41:f4:57:b5:be:6f:
59:11:6c:54:bf:1c:ac:5e:fc:f3:3e:33:8f:ab:58:
c3:f6:99:13:64:d4:a9:7f:e0:1c:9a:29:d5:20:c8:
6c:d2:9d:c0:37:42:7c:34:61:fe:b8:a5:b4:02:15:
72:76:18:91:f7:ea:fe:8f:d5:2c:55:73:86:f4:92:
e8:de:c8:90:96:9c:de:4f:18:9b:33:26:a8:20:96:
6f:9e:23:f5:9d:da:b5:73:30:b3:63:2b:da:b9:95:
5d:f9:71:ce:19:69:8f:03:f1:3e:ea:c4:bc:60:c4:
28:0b:b1:cf:79:25:df:df:1e:34:d6:29:24:ce:af:
b3:09:ba:d8:96:7e:91:be:b3:72:d5:15:1b:55:49:
5b:c3:36:d6:e0:26:1a:33:db:89:e8:25:db:51:74:
9d:be:a2:06:c0:2a:6e:65:1a:23:d4:24:4a:8e:5c:
38:ea:e4:ad:04:a1:86:fd:69:dc:07:af:dc:1b:92:
b0:c7:96:0b:49:81:d0:1f:15:25:e7:fc:b7:05:a5:
3e:14:f9:db:05:25:49:50:c0:7e:36:12:3c:b5:0f:
94:44:e6:9a:a9:62:8d:fb:3a:8f:a1:94:80:26:4a:
e0:ba:4b:7e:58:39:65:35:ad:0e:35:38:56:18:db:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:5D:D1:48:27:F8:4C:6B:99:B4:9D:B2:D0:D6:FB:9B:36:18:79
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Irpd0Ugn-ExrmbSdstDW-5s2GHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.41.0/24
Signature Algorithm: sha256WithRSAEncryption
15:04:a7:b9:46:7e:9c:7c:1d:f1:5a:9f:68:ed:21:e8:29:99:
2e:87:c1:30:a1:19:cb:96:dd:7f:fd:d3:52:8f:f0:5b:73:c3:
3b:6d:7e:ea:dc:1c:f5:91:c1:88:db:07:7b:bb:81:5e:bc:d0:
cf:44:d7:4c:0e:f9:03:90:26:4d:ce:37:d8:93:68:cc:d9:01:
7e:f2:1b:92:9b:b4:33:f7:94:da:83:54:42:c5:9e:bb:0c:0b:
80:ed:d8:54:3d:fb:18:e2:22:58:12:14:2b:0e:a1:6b:fe:e8:
06:f4:41:49:50:3e:05:3f:83:9a:0f:bc:34:4c:96:7b:05:ec:
40:0b:7d:c9:94:2f:f6:09:c5:09:c2:83:f1:48:0e:39:20:7e:
3d:84:69:97:f1:76:36:ec:8b:73:db:04:fe:8c:17:3e:6b:6c:
ff:e7:19:08:06:d7:6a:21:86:0c:04:c0:15:0d:b5:1b:e2:14:
fe:9b:f5:66:bb:64:2b:1d:04:12:11:7c:e6:19:80:7a:a8:9a:
1f:72:6f:09:80:8e:cb:fb:bd:a1:f6:26:6c:8d:85:5d:61:2f:
fb:94:9c:01:7c:1a:d0:55:9c:55:62:a3:04:c5:65:cd:82:2a:
3f:f0:14:e3:cf:6f:6c:36:b8:c7:4d:1e:95:41:79:76:42:fa:
57:5b:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:56:00 2025 by rpki-client