Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_1nftr7C3s42MOhnz9rlh0MSWNQ.roa
File: _1nftr7C3s42MOhnz9rlh0MSWNQ.roa (raw, json)
Hash identifier: dV/d9sRGgnhukD3rKjEcLdzQqSbm3GbR0GIZlDrg4ys=
Subject key identifier: FF:59:DF:B6:BE:C2:DE:CE:36:30:E8:67:CF:DA:E5:87:43:12:58:D4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019472FACD2EFC417A27004D8EF73AAA2245
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_1nftr7C3s42MOhnz9rlh0MSWNQ.roa
Signing time: Fri 17 Jan 2025 06:37:06 +0000
ROA not before: Fri 17 Jan 2025 06:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:72:fa:cd:2e:fc:41:7a:27:00:4d:8e:f7:3a:aa:22:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 17 06:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff59dfb6bec2dece3630e867cfdae587431258d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:19:6b:b0:88:f7:5b:9b:d8:bc:25:eb:15:
e2:d8:c7:eb:fe:ea:56:56:ed:82:78:fc:13:03:6b:
9d:3d:9d:64:39:e5:aa:89:f4:c4:97:9a:05:b9:52:
42:d6:c0:a8:37:77:87:91:3c:24:1d:2d:78:9b:5a:
5a:f6:7d:f1:89:76:57:e5:dc:9e:cc:9a:f5:66:e3:
09:d4:25:16:bf:40:6a:6e:18:ae:2d:71:b6:19:c4:
50:d9:7c:89:45:03:9a:15:ba:82:be:a9:3e:c7:3b:
9c:32:cc:7a:eb:d7:86:5e:36:9f:61:31:19:14:12:
b7:d6:d5:7a:c2:25:2f:bc:96:96:19:d7:02:32:d8:
4d:7f:d3:0f:98:13:e9:06:95:fb:5f:a1:c0:82:eb:
16:3a:68:85:94:fc:ac:f9:0d:70:de:70:4f:2c:f8:
57:db:7d:1d:20:51:f2:47:6f:09:b1:29:fb:91:59:
9b:60:d1:82:94:4c:40:2c:e0:de:eb:6c:66:ef:97:
8f:0d:99:08:d5:cc:6c:b3:fe:d5:4d:59:99:c0:3a:
6d:4b:b7:a2:3b:20:31:bf:1f:a8:33:d2:59:15:ec:
75:05:dd:5e:88:69:f1:80:0d:40:e6:9f:69:b8:f4:
d6:66:b8:75:11:f6:ff:70:3f:92:6b:3d:78:4e:14:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:DF:B6:BE:C2:DE:CE:36:30:E8:67:CF:DA:E5:87:43:12:58:D4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_1nftr7C3s42MOhnz9rlh0MSWNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.25.0/24
84.32.46.0/23
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:fc:5d:8e:7b:4a:bf:17:90:08:57:26:ed:ef:9f:fd:70:3d:
2a:61:cb:16:e6:2d:e0:7d:8e:97:18:41:0c:47:05:24:e0:14:
f2:b9:aa:17:5a:9c:aa:e2:58:1c:98:bf:0c:b6:2e:f2:4d:64:
3d:ef:8b:6a:60:2a:08:1d:f4:0e:db:e8:08:53:03:d0:7f:dc:
0c:fe:5b:1d:c0:b5:fe:48:b7:5d:b5:f2:67:91:c7:38:e8:4a:
fc:4f:a1:79:13:8f:dd:fc:67:1c:39:23:94:40:ff:22:a5:6e:
92:72:97:77:be:29:08:15:41:7e:39:40:fd:37:d5:9f:b9:24:
6e:37:3d:19:5f:ce:f3:52:65:aa:8b:32:6f:9c:83:e9:f6:cf:
6e:66:88:fd:44:b8:91:94:19:1b:82:74:13:cf:0f:d2:d5:4c:
f8:f3:5b:3e:37:9d:87:f9:87:d4:9d:1d:3e:d4:83:69:35:10:
11:ad:29:4f:d1:03:7b:61:bd:2b:c9:9f:16:b6:ec:d1:50:62:
68:e6:96:0a:23:92:dc:38:ac:dd:01:c9:18:bb:8b:d2:c4:df:
ef:8f:9b:a1:e1:6e:0c:e1:69:23:96:2d:c8:6b:61:70:c1:3c:
5a:22:59:f0:01:52:23:5a:4e:03:6c:ef:06:af:1e:a6:1c:56:
34:f3:25:1d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZRy+s0u/EF6JwBNjvc6qiJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTE3MDYzNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjU5ZGZiNmJlYzJkZWNlMzYzMGU4NjdjZmRhZTU4NzQzMTI1OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno0Za7CI91ub2Lwl6xXi2Mfr/upW
Vu2CePwTA2udPZ1kOeWqifTEl5oFuVJC1sCoN3eHkTwkHS14m1pa9n3xiXZX5dye
zJr1ZuMJ1CUWv0BqbhiuLXG2GcRQ2XyJRQOaFbqCvqk+xzucMsx669eGXjafYTEZ
FBK31tV6wiUvvJaWGdcCMthNf9MPmBPpBpX7X6HAgusWOmiFlPys+Q1w3nBPLPhX
230dIFHyR28JsSn7kVmbYNGClExALODe62xm75ePDZkI1cxss/7VTVmZwDptS7ei
OyAxvx+oM9JZFex1Bd1eiGnxgA1A5p9puPTWZrh1Efb/cD+Saz14ThTZrwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFP9Z37a+wt7ONjDoZ8/a5YdDEljUMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvXzFuZnRyN0MzczQyTU9obno5cmxoME1TV05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWMAwDBABUIAcD
BABUIAgDBAJUIBQDBABUIBkDBAFUIC4DBAJUIJQDBAFUIK4DBAFUINYDBAJUIPQD
BAFY2BYDBAFY2CwDBABY2F0DBAFY2IIDBAFY2IYwDQYJKoZIhvcNAQELBQADggEB
AEr8XY57Sr8XkAhXJu3vn/1wPSphyxbmLeB9jpcYQQxHBSTgFPK5qhdanKriWByY
vwy2LvJNZD3vi2pgKggd9A7b6AhTA9B/3Az+Wx3Atf5It1218meRxzjoSvxPoXkT
j938Zxw5I5RA/yKlbpJyl3e+KQgVQX45QP031Z+5JG43PRlfzvNSZaqLMm+cg+n2
z25miP1EuJGUGRuCdBPPD9LVTPjzWz43nYf5h9SdHT7Ug2k1EBGtKU/RA3thvSvJ
nxa27NFQYmjmlgojktw4rN0ByRi7i9LE3++Pm6HhbgzhaSOWLchrYXDBPFoiWfAB
UiNaTgNs7wavHqYcVjTzJR0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:11 2025 by rpki-client