Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wNzDCjn0xlgsDOSjlmgxQiJjrYo.roa
File: wNzDCjn0xlgsDOSjlmgxQiJjrYo.roa (raw, json)
Hash identifier: WhUtlfpThXHWVfRDAJY8RsJIIJgjz4ROdp2Mn2L+l6A=
Subject key identifier: C0:DC:C3:0A:39:F4:C6:58:2C:0C:E4:A3:96:68:31:42:22:63:AD:8A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826A92D798C7A5EC60256146EE90DA3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wNzDCjn0xlgsDOSjlmgxQiJjrYo.roa
Signing time: Thu 02 Jan 2025 17:53:29 +0000
ROA not before: Thu 02 Jan 2025 17:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 84.32.136.0/22 maxlen: 24
88.216.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a9:2d:79:8c:7a:5e:c6:02:56:14:6e:e9:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0dcc30a39f4c6582c0ce4a3966831422263ad8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:6a:73:ce:18:fb:9f:4c:d3:a0:09:bb:fe:
1b:7a:17:be:e4:0c:37:66:55:41:27:8b:77:76:f7:
62:9f:a6:84:5e:f0:61:2f:d7:80:19:80:ef:80:af:
08:c9:a7:29:67:5a:d7:8a:07:b8:af:3c:13:d9:f0:
80:c0:9d:a8:8c:d4:25:ac:e0:f1:68:35:ce:13:03:
96:bf:08:37:25:1e:97:6c:1d:fd:89:74:72:e1:ff:
ed:07:15:ff:11:30:be:3a:fa:89:ab:66:2c:e1:3a:
af:32:75:31:29:e3:d1:35:3f:9a:86:07:45:f5:e7:
c0:cc:8d:6f:42:7c:00:86:1a:c3:2d:ff:d3:2e:d4:
ed:5a:47:fa:8e:89:d5:f0:12:5c:a3:45:13:c7:7f:
e2:68:c6:c3:aa:98:d9:3b:a5:64:1a:8e:dc:cd:4e:
64:b0:bd:b7:93:f4:6e:68:73:b6:af:8c:16:6c:1a:
b2:45:17:8b:96:55:f3:a3:6a:66:92:9d:c8:2a:51:
20:07:ba:f4:8b:84:65:cf:49:7d:09:e1:1d:e5:8a:
05:23:10:3a:a6:22:1b:f7:ec:b9:79:b5:f8:00:18:
ce:5d:df:be:07:5b:26:f7:70:ba:0a:b5:81:8b:6c:
5a:56:26:0d:9b:ba:c2:80:06:9d:a6:2b:d0:1e:a5:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DC:C3:0A:39:F4:C6:58:2C:0C:E4:A3:96:68:31:42:22:63:AD:8A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wNzDCjn0xlgsDOSjlmgxQiJjrYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.136.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:76:7a:cb:e6:ca:68:14:da:79:af:0d:0e:85:eb:6b:d7:89:
3d:ac:a8:e1:7d:8d:8d:0a:c0:c6:4f:a6:fd:2b:1f:e2:1f:2a:
3b:d8:24:9c:37:4f:15:94:68:b5:cf:0b:ad:99:cb:9d:da:91:
37:88:96:d9:c4:94:25:dc:43:cc:a1:88:ed:ae:f0:d1:f0:12:
ae:15:0b:1b:92:ef:c9:b0:69:2a:58:2d:bd:f7:53:23:f8:3b:
9e:03:69:bc:fd:00:08:56:85:e5:01:9f:bd:56:58:38:76:37:
da:b5:a7:8c:eb:18:9e:05:95:59:ad:fe:dd:ee:a0:bd:84:aa:
64:86:f8:65:fb:2d:99:6b:3d:9e:9c:24:88:5f:ff:dd:42:26:
5d:da:3f:32:6d:b7:13:d2:41:8a:5f:3e:21:6e:4e:ff:27:df:
f9:16:84:47:42:68:1e:8d:96:1e:c3:95:cc:41:5f:a9:31:a1:
30:6c:05:a0:a7:b4:f8:2a:01:9c:e5:fe:f8:1e:55:37:db:b0:
bd:d9:4e:4c:75:70:0f:0b:bf:58:10:c9:5a:50:9c:e1:61:2a:
56:98:51:db:c1:bd:2a:ad:90:f1:88:ae:d7:00:be:ef:71:ed:
5f:23:c6:53:13:b0:06:5b:ed:f7:9f:76:78:d4:82:e1:b6:84:
ae:1b:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:41 2025 by rpki-client