Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hNsDLzzM_s4krteIIACSkgtnSNk.roa
File: hNsDLzzM_s4krteIIACSkgtnSNk.roa (raw, json)
Hash identifier: lKNPIL17yPFfVA9gLtnzla2Wl6C/1W03LYMs87/aXhg=
Subject key identifier: 84:DB:03:2F:3C:CC:FE:CE:24:AE:D7:88:20:00:92:92:0B:67:48:D9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194D1E3FD3D27CD1AC11E20DB03165E088D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hNsDLzzM_s4krteIIACSkgtnSNk.roa
Signing time: Tue 04 Feb 2025 16:56:07 +0000
ROA not before: Tue 04 Feb 2025 16:56:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:e3:fd:3d:27:cd:1a:c1:1e:20:db:03:16:5e:08:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 4 16:56:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84db032f3cccfece24aed788200092920b6748d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:87:fd:c2:cf:11:da:ae:6d:d1:4b:bd:22:
6c:4f:aa:9f:e3:69:10:29:55:36:b2:86:4b:4a:ae:
5b:fa:8d:90:f2:94:cc:e9:ef:4d:83:4d:4f:db:cf:
3f:85:16:18:c8:6f:0f:be:10:5d:50:e8:17:e0:4a:
05:0f:9f:11:b4:e1:09:31:3a:f3:3b:bb:b8:63:00:
51:6f:ce:54:6c:38:b0:17:32:6f:3e:c4:e6:cc:db:
a7:c3:ea:a5:14:11:63:1d:e4:3e:0f:be:52:fe:a2:
f0:db:8c:d3:b0:bd:f3:3d:aa:a5:44:d5:07:29:2a:
9e:eb:ce:bc:9b:8e:61:83:fc:e0:9b:62:24:57:a7:
e5:fd:ca:97:04:91:96:e6:8e:4c:f9:c0:dc:1a:c5:
24:bc:f5:78:54:d7:f7:47:85:cd:8a:ad:81:29:69:
5d:b5:bf:9a:6f:3f:33:57:a1:5f:46:31:90:2a:28:
39:45:81:d8:8c:b4:45:c4:7d:86:84:a6:14:08:bc:
e8:54:7d:c5:5b:ee:9b:59:f7:08:6d:d8:72:36:bd:
ee:d4:15:27:70:b0:15:02:90:01:d7:8f:a1:f7:1d:
c5:ba:00:d9:93:d8:d2:f4:13:fe:a3:e4:2a:24:96:
55:6f:f7:79:03:32:3d:0c:86:de:c9:4c:85:70:78:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:03:2F:3C:CC:FE:CE:24:AE:D7:88:20:00:92:92:0B:67:48:D9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hNsDLzzM_s4krteIIACSkgtnSNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.236.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9e:b2:76:20:a1:c3:83:27:ec:4a:1f:2e:f4:01:4c:66:29:
b4:ca:d9:df:89:df:95:28:cb:95:f9:08:9b:b6:fa:eb:35:70:
63:69:ab:e5:d2:9f:d5:6f:a1:65:ec:d3:e4:ed:1e:e2:d1:41:
10:0e:60:93:f1:65:20:bd:ec:4f:e7:ed:a5:ec:2c:6f:cb:f9:
7d:d2:09:2b:5d:33:93:8f:f0:00:7e:78:78:81:37:ee:6e:55:
d1:85:90:6f:b6:27:b8:83:d5:d2:ee:a8:5c:e2:ea:6b:a1:af:
9d:07:ff:8f:29:f1:0c:87:1a:79:c7:b3:ce:cc:74:18:c1:81:
1b:31:7b:7e:38:ca:94:7e:a5:54:ce:ed:1b:bd:4b:f1:0b:34:
cf:ad:0b:67:a5:26:e1:4b:6c:7e:f8:fe:c3:36:4a:da:26:5d:
5e:ef:9d:31:c4:c2:77:ae:d2:1e:7b:e2:c9:07:a5:24:db:18:
63:20:13:ec:b8:5b:4e:b3:ff:ad:46:91:30:72:9e:fd:81:ee:
09:a7:5a:4e:d4:f2:c2:2f:55:97:e1:62:df:c6:d7:70:63:72:
44:82:b5:71:56:41:a9:d7:d2:3c:a7:0a:5e:01:c9:c5:67:1c:
a5:66:c4:06:f0:6d:35:bb:27:61:b3:d9:dd:0c:e1:d0:ae:72:
33:cc:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:45 2025 by rpki-client