Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nZRUrED1rebz1asfhoFB0zT4Rig.roa
File: nZRUrED1rebz1asfhoFB0zT4Rig.roa (raw, json)
Hash identifier: Tid5uBFKL77hh4q77o4gQs0PwvseCAOsh/+vxgG98fk=
Subject key identifier: 9D:94:54:AC:40:F5:AD:E6:F3:D5:AB:1F:86:81:41:D3:34:F8:46:28
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B03DAD6B9C6481336B3C418FCB77
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nZRUrED1rebz1asfhoFB0zT4Rig.roa
Signing time: Thu 02 Jan 2025 17:53:31 +0000
ROA not before: Thu 02 Jan 2025 17:53:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 84.32.91.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b0:3d:ad:6b:9c:64:81:33:6b:3c:41:8f:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d9454ac40f5ade6f3d5ab1f868141d334f84628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:28:6a:02:39:b7:dd:ec:28:5c:2e:e3:55:
0c:88:8b:78:79:43:77:7d:1c:55:17:fc:87:3f:e1:
d5:6a:bb:d8:92:48:e3:49:f4:c7:81:57:4a:d5:da:
b9:c2:6c:66:1c:09:7e:61:f3:c1:6c:72:96:39:f3:
14:56:33:e0:b6:ab:03:d1:50:c0:58:4f:3f:d3:0d:
3f:8f:b5:86:9c:dd:32:7c:2d:5d:fb:a4:1b:7b:a7:
c2:fc:2e:6d:ad:b3:5a:2f:b2:5b:07:a4:fe:2f:8e:
e1:84:af:06:fd:55:71:ae:dc:b6:ea:62:cb:d8:fb:
3f:e3:12:65:9e:04:97:f1:9f:c5:cc:71:3d:62:2a:
56:45:a3:f9:1c:c1:e9:77:ba:ac:45:98:63:d2:15:
d6:5e:9b:84:f4:6f:0e:06:8b:b7:3b:59:81:9e:f0:
86:45:36:2f:71:a0:55:f8:06:f8:2d:c7:38:55:7c:
47:91:82:f8:8a:c3:f3:67:4f:a3:68:b7:78:41:c3:
8e:5a:12:ad:6f:53:a5:5a:bc:d2:d8:a8:fa:8c:cb:
1c:fa:f0:3e:53:71:67:72:f3:44:b5:77:07:a6:6e:
15:16:09:fb:25:14:9d:86:4f:70:3c:7d:f1:12:6f:
c1:85:35:0b:db:8a:96:7b:a8:33:93:52:ee:f9:7a:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:54:AC:40:F5:AD:E6:F3:D5:AB:1F:86:81:41:D3:34:F8:46:28
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nZRUrED1rebz1asfhoFB0zT4Rig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.91.0/24
88.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
57:77:b2:01:fc:1f:4c:d4:00:15:03:49:9f:94:2a:45:cd:6c:
49:ab:2f:a5:c0:dd:ed:9e:6d:35:95:3f:e4:9b:a7:d6:f8:53:
35:90:19:29:8f:69:1d:66:6b:d4:ea:2a:97:97:7c:aa:d2:26:
2a:19:02:35:4e:aa:30:3b:6f:f6:00:59:46:86:15:61:54:33:
44:eb:a8:46:27:40:01:ee:13:a1:46:53:1f:e4:a1:da:68:f7:
e5:48:32:19:c8:e9:96:1d:05:2c:4f:6b:af:ff:01:7c:07:ce:
34:98:c1:41:a4:6d:d9:12:6a:b6:38:2b:4d:14:6f:91:86:88:
56:9c:92:cf:59:3c:e7:45:30:57:86:61:9f:b2:d1:73:a1:96:
62:76:04:00:62:c8:02:24:a9:bc:53:ad:fa:3e:60:78:96:a0:
1d:b0:e9:a9:62:cb:c4:15:ce:85:a9:76:da:37:4a:42:6f:c6:
35:c0:1e:0e:a1:c6:cd:26:f2:3f:96:c5:e5:fb:51:56:5c:bc:
2b:0b:87:28:ee:a9:0e:6f:51:5f:f2:56:7e:30:b3:01:64:81:
43:29:8d:01:59:2b:7f:08:b0:92:98:86:ae:f4:50:84:c6:14:
30:0f:70:bc:f5:8b:3c:70:04:9e:a0:a6:3e:5b:9e:a0:d3:a2:
bb:b4:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:18 2025 by rpki-client