Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nMeTCkUvlEgsbZPzJkplc3wgELo.roa
File: nMeTCkUvlEgsbZPzJkplc3wgELo.roa (raw, json)
Hash identifier: NeUjGIHxIx34y3RHZk8FddcAphewpdhVKYXX8hUvJRw=
Subject key identifier: 9C:C7:93:0A:45:2F:94:48:2C:6D:93:F3:26:4A:65:73:7C:20:10:BA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BD6D3D7CA3843DA64754415BEEE6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nMeTCkUvlEgsbZPzJkplc3wgELo.roa
Signing time: Thu 02 Jan 2025 17:53:34 +0000
ROA not before: Thu 02 Jan 2025 17:53:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 84.32.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:bd:6d:3d:7c:a3:84:3d:a6:47:54:41:5b:ee:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc7930a452f94482c6d93f3264a65737c2010ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:0a:c4:f9:14:b5:7e:ea:d6:be:58:e9:3c:
08:d1:ba:df:bc:ab:41:5b:a5:d8:c5:ef:97:c5:ea:
54:15:4c:30:a2:3c:9d:b6:27:11:3e:a0:b9:0a:35:
ea:fe:09:ef:1b:6f:79:99:f8:00:cb:7b:79:01:af:
1a:00:8c:9c:68:68:53:2b:e8:df:39:86:45:1a:19:
f5:27:e4:6c:23:5c:56:b5:f7:91:d8:a7:4e:6e:c3:
9f:81:e9:3b:c3:44:9a:d3:01:43:b8:98:be:9f:e9:
1c:78:76:56:e9:90:ff:63:ad:ae:0a:a8:5c:48:1e:
eb:57:93:a4:b6:4a:34:ad:b1:4e:ac:fb:50:ce:d5:
c0:13:1c:8e:86:25:7f:e9:b7:67:ce:83:dc:21:1a:
bd:e3:93:98:9d:e2:6a:26:4d:92:b5:a7:2a:a9:da:
ca:22:d7:8b:44:ec:db:0a:91:a3:48:04:02:44:13:
bb:c4:4e:d7:aa:01:19:d2:14:eb:19:aa:cf:a7:e2:
28:bc:57:da:a4:22:f1:c3:4e:02:cc:58:9f:de:21:
c2:ae:f2:61:c5:d6:ac:04:0a:5e:d6:60:42:38:5f:
2f:2d:d9:6c:13:d6:7e:01:97:a5:38:28:4f:88:f1:
5b:28:17:7f:14:ce:58:49:3f:ca:07:0a:4a:10:11:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:93:0A:45:2F:94:48:2C:6D:93:F3:26:4A:65:73:7C:20:10:BA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nMeTCkUvlEgsbZPzJkplc3wgELo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.21.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8b:38:6b:77:97:bd:65:9e:0e:f8:df:19:4f:4f:6a:fa:20:
90:71:0e:8e:2a:f4:c0:73:0f:ce:50:7e:b1:a3:90:c4:72:03:
c8:e4:25:e1:3c:02:b7:89:04:14:ec:ed:f2:33:08:5a:19:16:
1f:d4:55:2d:eb:2b:a6:e9:61:79:1e:29:37:30:68:d9:08:88:
38:59:80:e3:57:a3:c9:e2:eb:b9:4d:1c:b3:92:dc:ae:48:d5:
b8:c7:7e:80:af:67:c3:89:dc:9a:6c:3e:65:bf:9a:26:6a:7a:
d8:a5:f6:26:75:aa:7c:37:e1:c0:85:49:40:c4:a3:8d:81:a7:
cc:2a:cd:7b:03:a1:4f:c9:21:04:74:72:dc:c3:2c:44:9a:d1:
ca:10:d3:14:a9:78:14:99:fb:7e:17:62:6e:06:b1:ed:c4:ff:
0e:9b:20:c5:ab:37:62:48:8d:55:9b:af:90:0e:2e:c4:f7:ef:
53:10:46:a0:b9:da:1e:f8:8c:a0:82:01:d5:ea:78:b9:e8:b8:
9e:b0:6d:34:ac:4a:2b:13:04:85:d7:33:7a:4e:c5:f9:17:0a:
59:14:52:d4:b5:a2:5c:70:37:56:6c:31:9e:ab:b4:05:a1:d8:
20:26:b8:77:5a:66:6b:c3:60:ab:d3:13:17:1f:b9:8c:49:cc:
29:88:77:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJr1tPXyjhD2mR1RBW+7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTAyMTc1MzM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2M3OTMwYTQ1MmY5NDQ4MmM2ZDkzZjMyNjRhNjU3MzdjMjAxMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWoKxPkUtX7q1r5Y6TwI0brfvKtB
W6XYxe+XxepUFUwwojydticRPqC5CjXq/gnvG295mfgAy3t5Aa8aAIycaGhTK+jf
OYZFGhn1J+RsI1xWtfeR2KdObsOfgek7w0Sa0wFDuJi+n+kceHZW6ZD/Y62uCqhc
SB7rV5Oktko0rbFOrPtQztXAExyOhiV/6bdnzoPcIRq945OYneJqJk2StacqqdrK
IteLROzbCpGjSAQCRBO7xE7XqgEZ0hTrGarPp+IovFfapCLxw04CzFif3iHCrvJh
xdasBApe1mBCOF8vLdlsE9Z+AZelOChPiPFbKBd/FM5YST/KBwpKEBEPKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJzHkwpFL5RILG2T8yZKZXN8IBC6MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbk1lVENrVXZsRWdzYlpQekprcGxjM3dnRUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAVMA0G
CSqGSIb3DQEBCwUAA4IBAQBxizhrd5e9ZZ4O+N8ZT09q+iCQcQ6OKvTAcw/OUH6x
o5DEcgPI5CXhPAK3iQQU7O3yMwhaGRYf1FUt6yum6WF5Hik3MGjZCIg4WYDjV6PJ
4uu5TRyzktyuSNW4x36Ar2fDidyabD5lv5omanrYpfYmdap8N+HAhUlAxKONgafM
Ks17A6FPySEEdHLcwyxEmtHKENMUqXgUmft+F2JuBrHtxP8OmyDFqzdiSI1Vm6+Q
Di7E9+9TEEagudoe+IygggHV6ni56LiesG00rEorEwSF1zN6TsX5FwpZFFLUtaJc
cDdWbDGeq7QFodggJrh3WmZrw2Cr0xMXH7mMScwpiHfp
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:13:12 2025 by rpki-client