Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/apQAA53lzV7AVatKSGtkAi-x1D8.roa
File: apQAA53lzV7AVatKSGtkAi-x1D8.roa (raw, json)
Hash identifier: 966A2ahH54QvAPuP1JJFLG/bc63Cm82G2hwLhAOgcU4=
Subject key identifier: 6A:94:00:03:9D:E5:CD:5E:C0:55:AB:4A:48:6B:64:02:2F:B1:D4:3F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194D1E3FC7D144675AE88926C995E856B3F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/apQAA53lzV7AVatKSGtkAi-x1D8.roa
Signing time: Tue 04 Feb 2025 16:56:06 +0000
ROA not before: Tue 04 Feb 2025 16:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:e3:fc:7d:14:46:75:ae:88:92:6c:99:5e:85:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 4 16:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a9400039de5cd5ec055ab4a486b64022fb1d43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:ff:b9:b8:08:33:1d:35:af:7c:53:8c:56:
22:fb:ff:e5:77:04:83:65:4f:24:ad:0c:a0:15:75:
52:0f:d3:dd:43:69:f8:b4:ea:f7:94:2b:07:13:c9:
9e:a9:28:07:a4:2e:e6:27:b5:ae:e8:1c:08:b7:be:
39:4a:26:d3:0e:e9:2e:55:f9:ea:b4:5d:8d:09:46:
7a:e1:a0:80:01:06:98:2a:3a:e3:90:c8:8a:3d:8e:
84:8f:00:6a:08:96:45:86:8d:82:ff:45:c1:9d:08:
6f:15:13:71:d9:9f:27:84:00:c3:aa:3b:d5:10:a7:
85:07:c4:90:0b:64:1e:40:1e:fd:eb:4e:e6:8d:04:
1b:e1:7e:02:d5:ca:fe:48:af:bf:4a:ee:f3:33:71:
2f:a4:32:67:3c:c2:31:2e:d6:4e:50:11:54:9c:12:
04:38:94:6c:cc:7b:09:09:5a:9e:06:c2:3c:3d:bd:
6b:81:d2:ca:0c:01:ef:c4:d3:a4:43:6d:5e:77:3e:
61:82:ef:28:a7:78:3a:d2:f6:67:2e:d6:c7:b6:16:
2a:6b:0e:2a:e5:89:54:0c:0c:e8:65:64:a5:0c:2d:
4f:29:aa:b0:d6:9f:a4:7a:28:6d:f4:ea:f1:b1:b0:
87:6c:43:21:93:b7:d5:30:c7:6c:a7:ee:58:60:3f:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:00:03:9D:E5:CD:5E:C0:55:AB:4A:48:6B:64:02:2F:B1:D4:3F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/apQAA53lzV7AVatKSGtkAi-x1D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.63.0/24
84.32.107.0/24
84.32.149.0/24
84.32.151.0-84.32.152.255
84.32.154.0/24
84.32.156.0/24
84.32.177.0/24
84.32.217.0-84.32.218.255
84.32.244.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2e:1b:b4:c4:4f:ee:17:e4:05:26:3a:b1:b2:2b:9d:0d:19:
61:d9:de:ec:ba:bd:c2:e3:18:9e:71:14:4e:3f:b5:10:ec:ba:
c2:97:e5:b9:bb:ed:c7:11:5b:7e:8b:dd:95:3a:89:c4:54:a0:
42:0a:cf:19:52:64:cd:1e:07:69:cd:37:47:fb:d6:7b:4e:8e:
43:74:8e:ad:be:b5:fb:27:95:17:1b:82:7c:57:0c:8c:7d:94:
88:ac:0b:38:8f:0e:4d:5e:43:98:72:f8:6d:61:90:15:00:6b:
7d:df:aa:ff:90:0c:b2:af:a1:47:17:74:0e:c2:54:bd:ba:81:
ea:ab:86:62:fc:61:3b:75:06:61:e5:77:69:68:f0:11:d6:7e:
e6:e4:c8:63:49:f3:c3:f0:61:ba:77:af:6b:b9:51:78:14:ac:
81:37:8a:48:dd:a5:89:b4:61:f5:86:6b:d6:e4:86:ee:75:ec:
41:9b:83:29:e8:6c:78:54:68:af:28:46:13:6d:3e:b7:58:a3:
dc:7c:fc:2a:97:82:00:f6:e5:6b:66:62:8a:61:e3:66:09:23:
f8:85:64:82:6a:00:d0:e9:58:11:d6:ba:6a:67:6a:57:1c:4e:
8a:bb:e4:c3:67:0a:95:ef:2b:c9:50:2a:96:aa:78:e8:72:f7:
1b:ce:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:26:29 2025 by rpki-client