Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jU-6D_0zZIWCqyx1HtKm17AUdVo.roa
File: jU-6D_0zZIWCqyx1HtKm17AUdVo.roa (raw, json)
Hash identifier: C/roDwKipRqDwIvM0cmMYdy4THhJHL/tOiaK5x2AjBQ=
Subject key identifier: 8D:4F:BA:0F:FD:33:64:85:82:AB:2C:75:1E:D2:A6:D7:B0:14:75:5A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194E4C0C3A13F52D35DD8FDD3362E101518
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jU-6D_0zZIWCqyx1HtKm17AUdVo.roa
Signing time: Sat 08 Feb 2025 08:50:25 +0000
ROA not before: Sat 08 Feb 2025 08:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.101.0/24 maxlen: 24
84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:c0:c3:a1:3f:52:d3:5d:d8:fd:d3:36:2e:10:15:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 8 08:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d4fba0ffd33648582ab2c751ed2a6d7b014755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:2b:2d:a8:20:a2:45:ca:c8:12:db:72:93:
a6:ed:28:4a:56:e1:16:d8:38:56:66:31:03:53:c7:
52:65:7f:7d:5e:39:3e:ed:2b:2a:51:7c:77:c9:87:
fc:45:42:a7:f7:90:72:5d:66:4d:ee:62:5e:d3:10:
50:ab:26:3f:86:28:e0:da:97:5a:46:2d:62:b4:d2:
5b:29:a3:39:47:5f:fb:b5:65:86:47:9f:9a:84:d0:
9d:73:bf:dd:d8:b1:40:df:02:13:e8:9f:23:1e:f1:
48:b4:62:ec:10:68:d3:a6:87:2b:f1:58:84:6d:49:
ab:bb:32:ac:47:c7:51:66:8d:df:bc:0a:af:71:e0:
e6:92:05:0e:73:3a:cc:cd:e4:9b:de:78:05:3b:b1:
22:7c:1c:dd:03:b3:2d:e8:8a:83:31:3a:67:45:b7:
f0:1b:4b:c1:00:ee:3d:55:bd:d4:fd:eb:05:3d:70:
78:9c:d3:ff:fa:8c:2c:cc:42:a6:b4:fb:f0:54:3a:
c2:39:4d:54:39:8d:37:02:16:a3:86:b7:c6:11:04:
50:2f:a8:2d:37:55:0c:31:da:e8:91:f9:af:ea:99:
07:5a:ae:b5:8f:1d:b8:0b:ca:75:79:2f:06:1c:e1:
fb:25:13:2a:54:ff:bb:12:f8:c8:5b:fb:2d:ec:32:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:BA:0F:FD:33:64:85:82:AB:2C:75:1E:D2:A6:D7:B0:14:75:5A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jU-6D_0zZIWCqyx1HtKm17AUdVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.101.0/24
84.32.184.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:f0:5e:94:70:a1:c1:62:a8:a0:f2:f6:ce:0d:9f:5f:7e:77:
1a:4b:e8:92:67:cb:f7:85:1b:cb:e3:51:56:bf:c4:55:1e:43:
d2:4c:82:3c:4d:88:d9:59:4b:ef:50:cd:6b:c1:64:7e:5a:66:
af:02:1a:8c:e4:a3:78:53:62:c3:da:fc:65:76:46:a2:e0:b0:
b9:82:fa:7b:62:4d:d8:74:de:cd:fe:77:6f:04:9e:25:0a:2d:
a7:27:d0:b7:60:61:89:a7:41:0b:8d:40:93:c6:2c:d6:7b:9c:
e8:ef:d8:4f:42:0e:29:40:a9:7f:a1:6b:ed:54:43:60:09:25:
f5:6f:99:9e:a7:7b:93:d9:9e:cf:1f:c2:53:bd:0f:7b:09:67:
68:37:51:78:14:18:0f:4d:c7:3c:2d:22:38:e0:58:3c:94:e7:
94:15:b7:1d:c7:24:8b:a3:35:37:01:4e:9d:13:44:07:14:d4:
15:f1:d2:5b:6b:85:37:d0:c2:66:48:96:70:75:61:cd:9d:6e:
b6:42:6a:97:a7:07:70:11:26:ab:45:c8:a1:72:1e:9a:3a:49:
a1:2a:03:02:9b:b2:ae:94:11:93:08:8c:04:64:a9:e4:81:53:
2e:4b:17:5e:5c:ca:bc:60:58:32:af:33:02:78:32:ec:a7:b7:
4b:e1:fc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:00:03 2025 by rpki-client