Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vqa2WcZBGnSRlTJHKfWt36ip1bA.roa
File: vqa2WcZBGnSRlTJHKfWt36ip1bA.roa (raw, json)
Hash identifier: D0JVO2g1zoqe6nOovmW3+Cm4QjAuYyeqoXi0EFwaZnc=
Subject key identifier: BE:A6:B6:59:C6:41:1A:74:91:95:32:47:29:F5:AD:DF:A8:A9:D5:B0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C7A4239E88EFB3F8C0E4CD36CAD1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vqa2WcZBGnSRlTJHKfWt36ip1bA.roa
Signing time: Thu 02 Jan 2025 17:53:37 +0000
ROA not before: Thu 02 Jan 2025 17:53:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 84.32.69.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c7:a4:23:9e:88:ef:b3:f8:c0:e4:cd:36:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bea6b659c6411a749195324729f5addfa8a9d5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:f2:a1:0d:0b:cf:dd:1c:50:37:1f:c3:d9:
1d:98:04:d2:30:d0:17:92:2a:b9:a3:a2:31:ab:27:
3b:b9:34:ac:80:78:25:5b:4a:f2:dd:d1:65:8f:94:
2a:25:a8:06:bc:63:bc:7b:de:c0:60:f8:e1:26:49:
48:98:7a:c9:92:76:e1:cb:74:d8:76:c4:44:0b:98:
a2:48:d7:d9:02:71:16:89:2d:b5:2a:ed:15:46:7a:
4e:c6:d1:2e:86:66:07:b6:f5:7a:16:20:00:4f:df:
0e:83:cb:ad:c1:ee:90:4b:b1:6b:29:2f:60:09:76:
c8:fc:cf:ca:83:2a:fe:be:de:9c:23:f1:2f:4d:85:
2a:22:09:37:14:86:6f:e4:23:a5:98:8f:2f:b9:9d:
29:5e:59:41:5d:b4:d5:c7:94:0a:dd:be:88:4b:de:
44:f9:fa:ed:22:10:5d:49:0f:23:f2:dd:95:dd:7e:
67:3d:73:df:d3:13:45:2e:64:61:1a:77:15:05:db:
d0:3c:18:e5:0b:cd:25:18:b5:91:9c:be:40:4d:ac:
f1:00:0b:6e:68:bf:b4:9a:b1:70:d3:18:37:11:ba:
03:71:8f:82:80:d7:bb:8d:2c:e6:5f:2a:d1:6a:e3:
38:d6:07:71:b7:6f:4d:4b:f6:d0:f9:85:4b:17:9f:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A6:B6:59:C6:41:1A:74:91:95:32:47:29:F5:AD:DF:A8:A9:D5:B0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vqa2WcZBGnSRlTJHKfWt36ip1bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.69.0/24
84.32.86.0/24
84.32.227.0/24
Signature Algorithm: sha256WithRSAEncryption
00:38:51:f9:c2:ab:c1:69:9d:a8:c7:38:50:7d:6f:49:06:97:
02:80:a4:a7:c8:4f:73:7e:e7:56:54:88:86:5e:5e:7d:27:c5:
8a:e8:66:09:c4:61:69:65:4f:85:bd:35:ee:0e:d5:47:52:bc:
30:15:c2:74:63:fd:1b:f6:ca:a3:d0:b9:0d:d0:96:e7:a6:3b:
62:47:1a:c5:a9:b6:68:6c:d2:4f:d1:67:e0:1b:89:a5:9c:8f:
5e:6f:0b:3a:46:65:34:e0:d3:ae:43:72:db:69:c5:d7:a1:02:
32:4d:b0:9d:0d:84:ed:ee:be:88:16:e2:e6:86:75:6f:f6:6c:
fa:c2:ae:6f:99:b4:57:c4:d8:a9:82:da:16:44:35:1e:84:62:
8e:a3:72:1b:c5:cc:30:25:ea:81:39:44:5f:1f:85:d2:37:3f:
3d:88:59:1b:6e:96:17:3c:73:65:c6:42:d3:ac:76:e3:52:82:
0c:fa:a8:79:e1:8a:51:68:cf:bd:19:25:ba:ea:28:d5:20:45:
85:98:f5:a4:eb:d0:43:2a:ca:99:fb:56:f0:37:c8:5a:98:65:
c3:34:6b:7d:5d:e7:87:95:20:0d:6a:a6:fe:4a:0f:6b:98:19:
52:0b:a2:66:cb:c5:13:f8:48:a2:31:55:15:0d:a0:bc:c2:54:
e7:74:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:33 2025 by rpki-client