Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VpqRw5K3bqUWo9Ian_jra1iOC30.roa
File: VpqRw5K3bqUWo9Ian_jra1iOC30.roa (raw, json)
Hash identifier: 5aW61X8cl11mu5WACPeJpzoogB8+KZIMsu3hBYdKCcY=
Subject key identifier: 56:9A:91:C3:92:B7:6E:A5:16:A3:D2:1A:9F:F8:EB:6B:58:8E:0B:7D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01953E565FD3F4206F5D7B9EA3B0E93F0608
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VpqRw5K3bqUWo9Ian_jra1iOC30.roa
Signing time: Tue 25 Feb 2025 18:20:02 +0000
ROA not before: Tue 25 Feb 2025 18:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.101.0/24 maxlen: 24
84.32.102.0/24 maxlen: 24
84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:56:5f:d3:f4:20:6f:5d:7b:9e:a3:b0:e9:3f:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 25 18:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=569a91c392b76ea516a3d21a9ff8eb6b588e0b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:c2:2c:5c:ba:4c:bd:e6:a4:2a:af:89:78:
7c:4c:b1:79:04:ca:e1:9b:23:d6:91:ba:98:28:52:
f6:6c:fe:3f:fb:87:b4:24:cd:24:9a:5b:5f:9c:99:
bc:01:85:60:5c:a8:dc:0c:12:5f:38:19:e4:87:9c:
8c:c3:42:7a:e8:d7:f5:ca:68:d1:7a:0b:f3:e3:4b:
75:42:0f:bc:26:0b:91:cc:00:82:ea:bb:24:71:30:
42:55:4c:25:e1:17:6c:30:b6:36:b3:89:0b:98:02:
7d:93:bc:88:8f:da:4f:06:b9:e4:09:89:ad:32:57:
17:78:39:b6:21:f8:61:c1:2f:92:02:73:97:16:85:
6a:ac:1d:3e:f9:41:4d:6b:63:85:44:46:65:48:0f:
88:e9:10:c9:ed:d6:48:69:33:c7:81:f9:12:7b:8e:
39:e5:3c:a6:9d:cb:19:cc:70:28:8c:b6:2f:b1:64:
ad:82:ef:61:05:ac:32:33:0c:22:4f:08:64:bf:ad:
1f:87:31:7f:c5:57:a3:18:aa:80:43:e4:3b:08:5b:
7a:41:ad:0f:11:35:fd:ae:de:de:28:c1:90:6d:76:
86:08:4f:66:e4:66:b6:95:6c:2a:60:4b:3a:b1:e0:
36:7b:37:76:b1:0d:dd:56:a0:4d:6d:c4:1c:42:84:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:91:C3:92:B7:6E:A5:16:A3:D2:1A:9F:F8:EB:6B:58:8E:0B:7D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VpqRw5K3bqUWo9Ian_jra1iOC30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.101.0-84.32.102.255
84.32.184.0/21
Signature Algorithm: sha256WithRSAEncryption
17:27:33:65:3c:2e:e5:4a:df:a7:5d:e7:22:71:a6:01:68:c0:
c2:6c:87:b0:07:b7:02:41:9a:1d:e3:66:ba:d7:e9:4c:4a:c9:
af:3c:9a:c7:3f:ca:8b:36:8d:cd:13:b9:57:76:50:31:81:20:
a7:ae:88:73:75:50:a8:ee:29:c1:bf:2d:f4:04:fd:7f:d6:ed:
d7:af:65:a4:11:f5:54:1a:0c:ef:87:bd:e4:e0:52:12:48:67:
a0:e9:86:65:d6:39:22:ce:6b:89:08:9a:5b:b1:06:55:51:b5:
88:fa:45:f9:9a:11:ce:ec:3c:14:52:9f:91:32:3e:fc:f6:d8:
72:51:11:c1:99:b4:dc:03:0d:4c:00:d7:fd:e4:2f:00:5c:1e:
91:7f:80:ef:88:1e:f0:0c:51:08:c1:60:e6:d6:65:0b:44:93:
fa:c3:a4:f8:8e:55:dc:86:f9:cd:b9:16:1f:41:71:1a:f2:15:
6a:15:20:3a:b1:95:b4:6e:f5:4d:ed:8a:ab:86:21:e3:34:d1:
ab:b0:f7:47:8e:93:40:c7:bc:4f:ee:7c:e8:f0:48:0c:3d:41:
18:c0:b7:e0:04:76:3f:93:01:02:04:39:69:96:b8:06:b3:4a:
82:98:8a:3a:b8:88:30:92:21:20:ca:4b:f4:06:fa:4a:ef:23:
82:b2:d7:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:56 2025 by rpki-client