Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RBYsXbExcyvUBAsl3A8N8_JEJLc.roa
File: RBYsXbExcyvUBAsl3A8N8_JEJLc.roa (raw, json)
Hash identifier: JJlIcvG5opb4E5jUUgmgkuPDfZ6dYsJQIyoRouaYjmw=
Subject key identifier: 44:16:2C:5D:B1:31:73:2B:D4:04:0B:25:DC:0F:0D:F3:F2:44:24:B7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BFFDB398EE65B7D497B3C8D72884
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RBYsXbExcyvUBAsl3A8N8_JEJLc.roa
Signing time: Thu 02 Jan 2025 17:53:35 +0000
ROA not before: Thu 02 Jan 2025 17:53:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 84.32.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:bf:fd:b3:98:ee:65:b7:d4:97:b3:c8:d7:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44162c5db131732bd4040b25dc0f0df3f24424b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:3f:01:19:30:ee:b9:ec:a5:df:fc:f5:0f:
17:b9:d7:e6:6c:7a:c9:ef:72:d8:ca:04:db:61:61:
fc:93:de:f1:15:40:1d:62:42:44:20:78:35:5e:ca:
12:82:bb:a3:9e:77:bb:62:a3:de:e5:1a:dc:c4:7b:
b7:f9:0c:7c:ac:81:d7:26:eb:f7:54:43:0b:f6:ba:
9b:72:87:e9:8a:e6:08:eb:98:7d:88:c2:e7:1e:d5:
ee:c5:5d:67:89:79:ad:70:db:59:49:e4:15:3c:8c:
93:de:40:1f:8b:fd:b8:e5:13:f1:04:5b:25:34:d5:
2f:39:ca:2f:5a:92:db:d9:fa:1c:f9:67:f0:95:de:
3c:74:5a:51:37:72:77:4f:1d:20:49:8c:1d:5b:b8:
59:5f:b9:d3:07:a4:07:56:fb:a1:1d:f7:da:d4:df:
ec:ce:ba:1f:1b:ea:e7:a2:1e:58:94:ea:aa:9c:e5:
78:13:07:8c:fa:c4:04:48:b9:6d:1d:26:98:0e:73:
d4:e4:7d:f5:8a:71:dd:b8:7b:a0:aa:1e:7a:56:7e:
27:43:85:62:49:f8:43:23:db:b9:d6:f6:8e:77:75:
1d:8d:1c:b8:b0:11:bc:07:9a:97:f3:f0:9c:18:d8:
9a:8c:9b:98:ea:25:24:b9:2b:d4:c7:cc:59:9a:07:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:2C:5D:B1:31:73:2B:D4:04:0B:25:DC:0F:0D:F3:F2:44:24:B7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RBYsXbExcyvUBAsl3A8N8_JEJLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.231.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cf:47:19:00:01:01:a9:51:94:0b:ac:53:72:66:a2:b0:29:
65:b6:8b:af:75:96:56:62:7e:dd:62:48:39:89:c4:78:12:2c:
7a:fb:aa:db:7e:c8:8f:a3:06:8e:b7:8e:a6:bf:7b:31:85:3e:
9f:1a:b0:87:8e:43:66:f4:4b:3e:68:72:bb:14:21:67:e9:e9:
7c:75:24:b9:e8:7b:1a:de:24:bf:3d:76:2f:79:55:d0:91:87:
60:bf:d9:98:5c:7d:a7:57:2d:81:04:45:9b:45:56:c0:a7:0c:
9f:0d:a6:7b:76:91:3d:a0:a7:14:af:97:af:c9:73:94:67:42:
7f:f3:41:ba:87:84:d8:02:94:bc:82:91:91:88:20:61:07:78:
d2:8a:de:c0:30:4e:8e:9e:6d:3e:2f:f1:85:2f:ad:e6:56:c2:
8c:44:2c:d5:c0:e8:e4:aa:29:8a:10:77:4f:74:b1:cd:35:b1:
81:8d:58:4b:5a:39:52:d2:24:8c:a3:d7:fa:5d:6b:e6:3f:95:
e3:01:b4:c8:31:79:15:02:02:39:78:93:0c:9d:3f:6a:d3:34:
d8:9a:97:42:81:eb:7d:75:d1:d9:44:46:47:5b:d8:35:f0:3a:
7c:56:e9:01:50:50:d7:45:8d:cc:32:ed:38:7b:93:cb:13:b2:
4c:fb:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:29 2025 by rpki-client