Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MBa5eyGfXhHzO20f7dkd2i3sqCs.roa
File: MBa5eyGfXhHzO20f7dkd2i3sqCs.roa (raw, json)
Hash identifier: wJ/654rZzmxcAuqh5PY2NrdUDKqHrm8lR4xSb/x056I=
Subject key identifier: 30:16:B9:7B:21:9F:5E:11:F3:3B:6D:1F:ED:D9:1D:DA:2D:EC:A8:2B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0195943B5092665FD8AF61030872D646FE28
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MBa5eyGfXhHzO20f7dkd2i3sqCs.roa
Signing time: Fri 14 Mar 2025 10:37:49 +0000
ROA not before: Fri 14 Mar 2025 10:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.101.0/24 maxlen: 24
84.32.102.0/24 maxlen: 24
84.32.103.0/24 maxlen: 24
84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
88.216.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:3b:50:92:66:5f:d8:af:61:03:08:72:d6:46:fe:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 14 10:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3016b97b219f5e11f33b6d1fedd91dda2deca82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:fb:21:c5:21:ca:53:00:45:f8:41:50:25:
97:ec:a9:7e:ff:66:a1:c1:28:45:4f:14:b7:ea:4d:
4c:d9:6b:c6:4b:f1:37:ae:73:13:21:c1:d6:05:4d:
69:a8:04:af:de:31:59:7c:bf:cb:cc:cf:18:29:75:
f4:8e:81:36:b3:ce:aa:25:ce:0c:a2:f5:ac:d7:ab:
0d:e3:48:6c:cb:26:cd:9e:a6:bf:a2:da:36:c8:97:
19:40:03:01:09:3f:10:fb:41:2b:fe:77:19:79:12:
47:87:a1:63:f8:ab:bb:c1:95:68:a8:41:53:8b:b4:
f8:69:77:93:1a:7b:08:b9:02:e1:ae:a1:7c:67:d2:
ac:f3:18:85:0b:b1:e3:d1:42:1c:ec:80:10:85:f7:
20:56:53:72:ee:12:27:89:52:e4:9a:ae:b6:9c:fd:
0f:d4:d9:e7:2c:af:d1:d7:5a:73:78:51:66:7d:92:
50:54:fe:65:2a:c0:ac:8f:a1:5d:53:27:15:3f:73:
8a:ca:7a:2a:bf:f3:c4:40:0a:a3:a4:07:27:19:42:
e4:30:b4:19:98:99:8c:70:6e:4a:f5:c7:0f:88:12:
68:22:1c:2d:7d:0c:f6:26:c6:29:86:3f:25:53:06:
4a:f8:39:c9:31:59:6b:a0:a2:20:5a:e2:5d:51:75:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:B9:7B:21:9F:5E:11:F3:3B:6D:1F:ED:D9:1D:DA:2D:EC:A8:2B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MBa5eyGfXhHzO20f7dkd2i3sqCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.101.0-84.32.103.255
84.32.184.0/21
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ab:fe:88:72:aa:c5:7c:0c:55:c0:ce:22:b8:44:82:92:78:
c6:e6:42:3b:d8:09:7d:4e:66:fc:ef:64:05:77:ee:e1:e2:df:
8c:97:65:22:fd:e8:e8:7a:ad:5b:92:10:01:79:9e:c7:bf:b0:
5c:19:3b:0e:bc:9c:77:5a:81:0e:6e:c7:8d:98:f9:c3:6d:6e:
b9:be:23:50:c1:4b:f0:1d:23:f7:8d:b8:d7:19:e0:1e:32:f0:
0f:19:e3:29:7c:f8:79:4e:21:1a:9d:23:33:64:e1:a2:c2:19:
7a:8a:97:15:a4:f5:37:a0:24:16:1c:d2:d3:39:26:1b:c9:06:
02:af:11:4c:f6:cf:a9:8b:49:f7:49:9d:21:c8:ac:a0:f3:3e:
d1:8e:1b:38:05:f4:cc:77:99:26:a5:4b:1f:94:29:df:ef:05:
ab:d4:f1:de:4c:fc:1b:fe:54:b7:a6:bf:5c:10:97:16:53:91:
f5:db:c3:de:ff:69:f9:30:8e:73:53:eb:6e:05:f5:ec:dd:96:
f8:a2:8f:f5:e3:44:f3:22:82:10:c2:5a:5f:6d:67:35:ae:4a:
48:81:84:30:15:f1:7b:cf:b6:66:ba:91:12:ae:70:cd:cb:db:
22:1f:7f:50:95:56:dc:c7:6e:db:3e:6b:f2:97:fe:9c:e8:df:
b2:11:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:11:33 2025 by rpki-client