Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vhGdQwPbLjKEUzGkwu9UsgzyLrE.roa
File: vhGdQwPbLjKEUzGkwu9UsgzyLrE.roa (raw, json)
Hash identifier: gPkd74kxb67+cohMSnpC/7EFBvLFZ0gmj+StGIU8jUA=
Subject key identifier: BE:11:9D:43:03:DB:2E:32:84:53:31:A4:C2:EF:54:B2:0C:F2:2E:B1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C6C007DD83105C4A31F3DF2BE223
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vhGdQwPbLjKEUzGkwu9UsgzyLrE.roa
Signing time: Thu 02 Jan 2025 17:53:37 +0000
ROA not before: Thu 02 Jan 2025 17:53:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 84.32.82.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
88.216.37.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
88.216.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c6:c0:07:dd:83:10:5c:4a:31:f3:df:2b:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be119d4303db2e32845331a4c2ef54b20cf22eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:f4:b2:0c:06:b8:cd:75:5b:33:76:de:74:
4c:c7:50:aa:d0:53:e5:e2:70:dd:a6:22:7d:3a:9b:
33:1d:e5:b4:68:df:21:4c:f5:a2:ae:3b:a5:b2:64:
11:0c:24:f3:df:f5:2a:39:de:b1:d9:62:de:8f:f5:
31:b2:2b:aa:11:42:26:4f:48:cc:09:75:46:f6:98:
c4:6d:da:b5:6b:ff:c8:cb:d6:b8:2e:d0:eb:91:6e:
c3:34:58:c4:f1:c9:d6:d6:be:54:91:8c:8b:43:ff:
96:d7:38:00:1f:57:bf:86:88:b2:f2:1b:9a:49:ed:
7f:54:2a:9a:4c:b3:b0:91:d4:41:65:d9:20:a7:00:
cd:76:df:72:8f:b7:8a:28:38:09:3e:1a:70:2c:5c:
ea:92:f6:c6:2a:45:19:2f:54:54:b4:28:c2:cd:c5:
be:47:53:47:67:f0:98:e3:8d:b5:5f:14:ef:6f:a4:
37:a5:a4:4a:d4:78:70:1e:48:16:cf:be:3d:6c:f7:
99:1f:a9:ab:cb:3a:81:30:48:c4:ee:2d:74:5e:aa:
39:20:db:05:0d:88:84:36:04:be:ab:d9:56:b8:6c:
b2:0e:8c:1f:f5:d8:09:23:a9:02:28:be:4e:54:03:
9f:93:23:b8:c2:4d:f3:b7:99:72:3b:33:f1:18:66:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:11:9D:43:03:DB:2E:32:84:53:31:A4:C2:EF:54:B2:0C:F2:2E:B1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vhGdQwPbLjKEUzGkwu9UsgzyLrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.82.0/24
84.32.86.0/24
88.216.37.0/24
88.216.46.0/24
88.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7e:42:ab:cf:5a:b1:9b:02:cc:5b:26:95:93:61:d2:50:58:
f2:27:57:a7:f2:1e:99:fe:02:5d:06:a1:dc:02:9b:5e:d2:aa:
47:7d:90:d1:0c:87:40:c7:60:19:57:c3:b6:9e:96:5a:7e:71:
40:bb:78:79:37:97:41:48:c4:90:1d:6c:97:55:d9:7d:b6:23:
07:63:cd:c1:d9:9b:68:c9:31:8d:d6:a6:54:5f:ed:5a:39:a6:
6f:91:41:57:46:4b:84:bd:67:7c:50:b6:00:84:73:ff:d4:e0:
00:54:3b:e0:bf:fc:c8:98:3d:56:a7:d4:ce:8d:17:eb:19:87:
85:d0:c2:af:52:da:34:14:47:42:5e:ed:f1:06:6d:fe:6b:4b:
17:07:72:f9:be:71:62:25:8b:9e:79:56:78:01:5b:d7:d4:ff:
27:b0:e1:4c:4f:0c:ce:06:e5:dc:1c:53:9f:ea:eb:8c:cd:a2:
b8:a3:cc:4f:5d:1d:b0:86:4a:e5:8b:63:47:b5:c6:36:d9:61:
f1:3d:8b:1b:c8:7c:ae:eb:28:ba:97:71:ab:49:02:54:2a:d5:
b1:75:77:c7:1c:3f:11:d7:8e:3e:62:7e:f7:81:ba:f3:a2:d1:
f6:43:2e:a1:f4:16:a9:58:65:02:e1:98:cf:db:e5:2b:ed:cf:
04:99:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:12:52 2025 by rpki-client