Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VIvGNrXrk9m4HNqIhPqSc7BuIGQ.roa
File: VIvGNrXrk9m4HNqIhPqSc7BuIGQ.roa (raw, json)
Hash identifier: JJ3UE0XKCfQ0sOxwCqk+/AIYuiVYLjeK1HOB0c7zY34=
Subject key identifier: 54:8B:C6:36:B5:EB:93:D9:B8:1C:DA:88:84:FA:92:73:B0:6E:20:64
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826AC64AC45838FB97AD523DA42C70C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VIvGNrXrk9m4HNqIhPqSc7BuIGQ.roa
Signing time: Thu 02 Jan 2025 17:53:30 +0000
ROA not before: Thu 02 Jan 2025 17:53:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 84.32.178.0/23 maxlen: 23
84.32.214.0/24 maxlen: 24
84.32.215.0/24 maxlen: 24
84.32.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:ac:64:ac:45:83:8f:b9:7a:d5:23:da:42:c7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548bc636b5eb93d9b81cda8884fa9273b06e2064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:e7:4c:aa:1b:7f:6b:da:1f:63:3a:20:17:
dd:83:4d:c2:1a:9f:63:2c:c4:aa:7a:b0:ea:7e:da:
69:0c:f0:12:cd:73:c0:4d:7b:13:e3:61:81:01:1d:
e5:ad:cb:04:b9:ea:e8:cd:1a:50:19:47:d8:ff:b5:
a4:7c:d1:a3:9f:36:58:0b:4d:c9:e6:ad:c7:cb:cf:
f1:c8:7e:18:12:35:da:9e:58:ef:26:64:9f:0c:2c:
3a:80:5a:e9:91:63:04:d1:75:a0:4f:5d:07:45:df:
e3:39:9d:93:34:eb:a0:1c:de:08:c8:1d:09:47:b2:
00:aa:25:6e:bd:30:0a:a4:68:de:52:36:30:3f:4a:
00:99:00:cf:cd:89:8d:ea:2f:26:60:c1:c7:10:95:
28:ff:97:77:db:d0:d0:35:31:43:31:19:06:66:b4:
b5:b3:30:d7:f6:07:42:be:c1:b9:89:67:6f:01:58:
f8:ac:c6:7c:9f:98:ba:17:c4:4e:2e:bd:50:3f:16:
01:54:c3:5a:4e:9e:db:e6:52:5f:ef:aa:c8:74:29:
2b:31:b7:f4:17:6e:8e:f6:00:86:da:28:a7:82:bd:
2b:c3:90:4c:ac:de:16:af:5c:50:84:e1:35:e1:6c:
64:89:cc:a9:b0:14:14:51:37:c1:73:42:00:9e:00:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:C6:36:B5:EB:93:D9:B8:1C:DA:88:84:FA:92:73:B0:6E:20:64
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VIvGNrXrk9m4HNqIhPqSc7BuIGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.178.0/23
84.32.214.0/23
84.32.248.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0e:36:19:3f:30:46:2b:c3:48:de:ba:9f:30:8a:bc:9e:fd:
dd:ad:a9:24:76:0e:90:2f:3e:5e:b9:05:34:26:bf:2c:b1:d5:
36:81:41:32:25:07:2a:7d:b1:55:f4:ab:3c:3a:21:31:6d:df:
60:33:ae:16:d0:c0:b0:bb:07:0f:b7:44:ce:aa:7a:4d:29:aa:
73:fa:0b:bf:bb:8e:b2:54:24:72:4c:2b:44:cf:ac:a9:fc:f0:
37:78:a0:64:a7:d8:d3:54:ea:e6:3e:2a:2f:5a:29:1d:0d:7b:
ad:31:81:3a:29:0d:87:fc:c8:76:ae:4b:65:44:84:3b:e6:b2:
7f:78:e3:48:96:ab:07:a3:16:ec:0f:2b:af:57:e5:7d:bf:2f:
08:18:04:c6:00:f8:84:47:8c:8c:02:ec:54:0e:6e:30:ac:78:
cb:5f:54:89:2e:e2:d6:93:5d:9b:f3:50:a7:c4:e1:51:db:cd:
d0:b0:9d:8b:67:9d:01:4f:2a:2d:6e:49:7b:14:1b:de:f4:9a:
15:39:bd:7b:79:ed:8c:b4:9c:9b:1c:41:76:09:cc:0c:99:ea:
97:53:2a:62:52:4d:1c:bd:d9:3d:47:7d:ca:3b:79:0c:17:51:
c0:71:c3:b7:16:16:95:28:bf:cc:62:d5:14:3f:0c:a3:43:21:
d0:fa:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:32:30 2025 by rpki-client