Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i1tC0rRm83yr4rhzkRvcgYMtCs8.roa
File: i1tC0rRm83yr4rhzkRvcgYMtCs8.roa (raw, json)
Hash identifier: rZNfoZ+LJvi+29ErUrrYYjJYTcumf4HMb7Np4E+XW3c=
Subject key identifier: 8B:5B:42:D2:B4:66:F3:7C:AB:E2:B8:73:91:1B:DC:81:83:2D:0A:CF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826A7A6EC2C2619B68B3BDC3F710AEC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i1tC0rRm83yr4rhzkRvcgYMtCs8.roa
Signing time: Thu 02 Jan 2025 17:53:29 +0000
ROA not before: Thu 02 Jan 2025 17:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.108.0/22 maxlen: 24
88.216.60.0/22 maxlen: 24
88.216.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a7:a6:ec:2c:26:19:b6:8b:3b:dc:3f:71:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5b42d2b466f37cabe2b873911bdc81832d0acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:ce:43:50:8c:eb:c6:bb:8b:20:7f:0c:fe:
a9:59:ea:7f:fc:2c:f3:6d:99:14:48:a5:75:d3:22:
62:e4:cd:15:d7:3e:6a:a4:1f:7f:04:87:34:43:2c:
01:4d:e4:30:0d:4e:3d:1f:a4:b8:ff:58:b5:5b:a0:
4c:87:54:96:ab:a9:01:ca:51:e0:81:9d:a4:ac:b7:
4f:d8:28:84:a6:c6:aa:be:28:31:2f:07:a7:f3:e3:
b8:d5:2b:e2:b8:a4:02:e8:b2:a6:bd:f8:14:b1:a9:
e2:a4:7a:41:56:93:39:14:36:e4:fe:52:4b:60:1f:
11:d9:d1:2c:c8:8e:1d:5b:e7:68:7a:29:f9:17:80:
e7:04:62:16:31:d5:3b:0d:28:78:eb:9b:e4:57:13:
ce:d9:8c:14:35:07:5d:02:2b:d6:e1:6c:33:95:84:
9e:1b:3a:5a:19:c7:ce:a2:15:3d:f6:db:34:41:c2:
4d:3b:d4:4b:70:03:83:25:5c:44:fd:96:f5:88:86:
04:24:33:06:76:57:21:25:33:77:03:89:bf:22:e2:
e1:9d:27:c6:f4:cb:69:6e:39:e0:9f:9a:ce:e5:59:
80:65:3a:13:0b:dd:de:f8:75:75:95:2e:c1:a9:ad:
0d:ac:71:8b:cf:10:3b:e8:9d:dd:bb:be:e3:c8:cd:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:42:D2:B4:66:F3:7C:AB:E2:B8:73:91:1B:DC:81:83:2D:0A:CF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i1tC0rRm83yr4rhzkRvcgYMtCs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.108.0/22
88.216.60.0/22
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:21:54:eb:0b:12:0b:a1:7a:26:0e:53:eb:f3:eb:c4:52:a0:
b9:b8:b0:0b:05:4b:00:10:24:55:b8:49:08:ac:be:38:9c:02:
5f:42:79:39:96:e0:6e:65:b4:ef:ee:81:eb:64:08:53:03:df:
b2:1b:f2:1e:91:71:e3:30:c9:44:8b:aa:fa:c6:f9:ed:21:94:
cb:ee:98:72:4d:00:23:0d:69:6a:c9:13:c2:32:d1:8d:86:2d:
aa:b3:3c:b4:a9:1f:35:fc:0b:8e:fa:67:b4:d8:0b:7e:f8:33:
4c:d3:d9:92:74:70:89:8d:de:2e:b3:84:2a:e3:ca:de:2b:d5:
7e:cd:d1:f3:67:52:4d:e5:bc:2d:46:44:2a:d4:3c:11:1f:02:
1a:d8:58:d7:29:e9:d7:26:8a:8c:61:6a:eb:dc:ff:ea:9d:6e:
6b:d3:01:2f:a8:86:b5:7c:59:d7:40:e1:29:df:97:50:b9:e0:
ef:fd:19:7a:b5:56:6f:89:f6:82:8f:fa:dc:b0:4a:29:9d:26:
5c:8a:a5:a1:d8:fe:62:be:f3:ee:26:1f:d3:a9:fe:73:a2:4c:
50:09:00:1f:04:84:75:97:f6:fe:ea:fd:3b:a7:1c:cc:b7:19:
d0:4c:75:ca:d4:a7:ca:69:52:75:01:b8:af:7d:ff:1f:51:13:
2d:92:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:52 2025 by rpki-client