Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LyCnGd_Qya606F6fvYC516Z6-F8.roa
File: LyCnGd_Qya606F6fvYC516Z6-F8.roa (raw, json)
Hash identifier: EJ6dSQA6IcTCpvFL/wYm9fPpUNECnTTLdk/xqriVfNk=
Subject key identifier: 2F:20:A7:19:DF:D0:C9:AE:B4:E8:5E:9F:BD:80:B9:D7:A6:7A:F8:5F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826A70124C6E482682BD63266276FD7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LyCnGd_Qya606F6fvYC516Z6-F8.roa
Signing time: Thu 02 Jan 2025 17:53:29 +0000
ROA not before: Thu 02 Jan 2025 17:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a7:01:24:c6:e4:82:68:2b:d6:32:66:27:6f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f20a719dfd0c9aeb4e85e9fbd80b9d7a67af85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:70:86:0c:8f:b8:b3:10:ae:9f:ca:ce:4f:
68:f1:e2:bd:f9:60:b5:c0:f7:a6:db:e7:ea:d4:7d:
d1:7d:23:1a:68:89:ed:a2:81:b2:b4:7b:dc:0d:5d:
45:4c:93:22:7a:b1:23:e4:ae:c9:fc:74:79:b2:e0:
60:56:59:8a:f0:4f:b8:45:bb:be:ec:a5:bf:9f:f2:
50:59:d5:ce:e2:1a:cf:db:96:b7:36:04:e2:29:70:
21:d4:e4:15:17:fd:e6:fa:f4:e8:ac:ec:7d:1b:c5:
d9:dc:ac:3d:16:f3:49:76:f6:47:c6:24:dd:77:d7:
e0:0f:f9:d3:88:db:c8:6d:fa:c1:86:6b:a7:d0:22:
16:46:c6:24:37:5d:3d:dc:8c:ee:d0:83:ea:50:9c:
cd:f1:bb:32:9c:f2:1e:b9:1e:a5:df:ef:99:5a:7d:
5c:8a:6d:1d:a1:a6:5a:24:8b:45:49:f6:e3:fc:8f:
5b:d1:f9:98:0a:f9:6f:60:4b:46:59:dd:74:4c:95:
3c:01:5a:66:74:6c:34:55:1d:9f:8a:7a:fc:24:55:
13:0a:ca:81:26:11:86:f9:52:76:88:8c:69:5c:51:
0c:3d:4f:15:6b:7f:7e:39:f4:36:c5:94:10:b9:0d:
97:45:25:e6:c5:05:1c:d1:a8:67:55:1c:02:20:6b:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:20:A7:19:DF:D0:C9:AE:B4:E8:5E:9F:BD:80:B9:D7:A6:7A:F8:5F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LyCnGd_Qya606F6fvYC516Z6-F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
48:47:4b:d3:1a:7c:c6:b4:2f:21:92:3f:25:e5:e0:54:7a:29:
57:0f:9e:a7:ae:cd:af:51:ac:7b:e9:c8:15:d1:b3:4b:a3:dd:
b0:a8:b3:f6:d9:cd:01:b4:0f:ad:12:9b:2a:35:e5:82:af:4c:
36:84:43:f3:b8:ff:31:31:8a:67:7f:e2:08:43:6d:23:9f:19:
b0:4f:ae:7b:75:b4:35:68:98:ba:0f:f2:3a:62:17:30:23:31:
7b:ed:d7:98:5f:42:88:17:0a:c0:21:22:18:07:b1:43:be:3b:
f1:ba:20:6e:f0:21:66:99:f9:65:25:8a:0a:cb:a3:c4:e5:e1:
12:ed:c4:4d:e3:06:bc:02:48:10:c9:9b:e6:a5:b6:78:1e:5a:
a5:a0:da:7a:45:68:43:4c:cf:1d:f9:f3:a7:a9:b9:0c:77:89:
e6:1b:40:eb:ab:4d:52:3f:89:89:fd:16:fd:b6:1c:15:72:05:
5d:8b:c5:78:cc:37:62:4b:23:b4:f2:2b:73:73:85:15:93:f1:
67:6d:90:05:f5:f2:d7:e1:b4:e2:cb:10:69:97:d0:0e:26:e1:
a6:06:f4:08:31:fd:1b:c5:1e:d4:4f:13:59:54:0e:a3:8a:58:
eb:4f:49:86:a0:30:ce:24:a3:cc:b0:bd:e7:26:72:6c:d9:aa:
a3:89:8c:c7
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZQoJqcBJMbkgmgr1jJmJ2/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTAyMTc1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjIwYTcxOWRmZDBjOWFlYjRlODVlOWZiZDgwYjlkN2E2N2FmODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVxwhgyPuLMQrp/Kzk9o8eK9+WC1
wPem2+fq1H3RfSMaaIntooGytHvcDV1FTJMierEj5K7J/HR5suBgVlmK8E+4Rbu+
7KW/n/JQWdXO4hrP25a3NgTiKXAh1OQVF/3m+vTorOx9G8XZ3Kw9FvNJdvZHxiTd
d9fgD/nTiNvIbfrBhmun0CIWRsYkN1093Izu0IPqUJzN8bsynPIeuR6l3++ZWn1c
im0doaZaJItFSfbj/I9b0fmYCvlvYEtGWd10TJU8AVpmdGw0VR2finr8JFUTCsqB
JhGG+VJ2iIxpXFEMPU8Va39+OfQ2xZQQuQ2XRSXmxQUc0ahnVRwCIGucvQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFC8gpxnf0MmutOhen72AudemevhfMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTHlDbkdkX1F5YTYwNkY2ZnZZQzUxNlo2LUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcMAwDBABUIAcD
BABUIAgDBAJUIBQDBAFUIC4DBABUIF8DBAJUIJQDBAFUIK4DBAFUINYDBAJUIPQD
BAFY2BYDBAFY2CwDBABY2F0DBAFY2IIDBAFY2IYDBABY2MUwDQYJKoZIhvcNAQEL
BQADggEBAEhHS9MafMa0LyGSPyXl4FR6KVcPnqeuza9RrHvpyBXRs0uj3bCos/bZ
zQG0D60Smyo15YKvTDaEQ/O4/zEximd/4ghDbSOfGbBPrnt1tDVomLoP8jpiFzAj
MXvt15hfQogXCsAhIhgHsUO+O/G6IG7wIWaZ+WUligrLo8Tl4RLtxE3jBrwCSBDJ
m+altngeWqWg2npFaENMzx3586epuQx3ieYbQOurTVI/iYn9Fv22HBVyBV2LxXjM
N2JLI7TyK3NzhRWT8WdtkAX18tfhtOLLEGmX0A4m4aYG9Agx/RvFHtRPE1lUDqOK
WOtPSYagMM4ko8ywvecmcmzZqqOJjMc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:16 2025 by rpki-client