Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xrHQPtl0D0ZuTTxKTj7DkDJztJs.roa
File: xrHQPtl0D0ZuTTxKTj7DkDJztJs.roa (raw, json)
Hash identifier: nk2+UnCX9vX5Yuaehm/HWy1R9dZAhdPSewlh4SxUJgQ=
Subject key identifier: C6:B1:D0:3E:D9:74:0F:46:6E:4D:3C:4A:4E:3E:C3:90:32:73:B4:9B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C3B58BEE776CB76A803FFE458FDC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xrHQPtl0D0ZuTTxKTj7DkDJztJs.roa
Signing time: Thu 02 Jan 2025 17:53:36 +0000
ROA not before: Thu 02 Jan 2025 17:53:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210926
IP address blocks: 84.32.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c3:b5:8b:ee:77:6c:b7:6a:80:3f:fe:45:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6b1d03ed9740f466e4d3c4a4e3ec3903273b49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:0c:b3:16:d1:70:b7:a0:4b:50:27:55:31:
9f:f9:ef:c7:dc:95:4b:31:c4:2e:d6:a1:de:c0:14:
48:eb:78:79:ca:54:d6:36:f9:42:9b:0f:d2:3c:53:
3b:41:8c:ca:50:23:52:d4:0f:fd:10:1a:d4:73:67:
94:ac:26:a7:e6:8c:18:16:02:5a:67:31:62:ab:46:
cd:7a:b8:9d:96:d6:47:5d:7a:9e:9f:92:29:29:fd:
cf:83:4b:1f:1d:41:6b:73:93:4f:c1:ba:17:4f:13:
d0:63:8c:89:7a:51:71:11:bf:15:a9:dc:bd:83:93:
35:a2:34:0c:08:49:bd:af:54:b0:6c:b6:a0:23:3a:
bb:72:3b:4d:82:c5:02:40:21:3d:fc:c9:6e:70:2d:
52:ed:3a:48:7f:4e:1a:bb:49:ea:9d:8f:6b:36:1d:
37:f6:65:ff:bd:ff:81:35:a9:80:62:26:fb:d3:eb:
d9:3e:cd:bc:ac:fc:37:23:52:28:fa:6b:77:f7:7b:
b2:ca:c2:b0:d2:30:4c:ed:e2:ad:67:4d:ea:87:60:
fd:25:ab:ae:5b:a0:b3:3b:1d:c8:66:de:63:51:4d:
68:80:2a:4c:fd:4f:cf:7e:c6:f8:e2:a4:99:c6:fa:
5e:0f:62:21:45:83:f9:dd:59:29:78:0c:fd:1c:f3:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B1:D0:3E:D9:74:0F:46:6E:4D:3C:4A:4E:3E:C3:90:32:73:B4:9B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xrHQPtl0D0ZuTTxKTj7DkDJztJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4d:85:1d:0c:01:05:5e:a0:52:6a:17:8b:f1:f3:1b:19:ec:
36:68:ef:8e:62:e4:a3:fb:c8:40:e1:f5:c0:0f:2e:8e:6a:38:
88:81:ae:f1:75:24:fa:9a:72:ca:14:ef:38:94:e0:57:da:e3:
8d:b2:af:e9:3f:09:9d:4d:49:ac:db:5a:26:f2:d9:b6:81:ea:
41:8b:3f:74:b6:c6:74:70:b7:3b:b2:40:77:96:74:82:85:8a:
45:b1:6f:63:2c:9d:a0:f3:2a:8c:23:ac:cf:e8:d6:3a:53:99:
fd:26:7d:09:e5:8e:8a:ec:b5:ef:30:a0:72:f6:29:b3:30:bc:
5e:1e:36:5c:29:1b:6b:6d:5b:bb:92:ad:3f:6f:70:8a:f7:c6:
3a:09:49:fc:d2:f9:9a:0f:6c:cc:39:f7:83:a4:1c:e4:a7:a3:
f7:e9:05:44:31:d4:c4:21:f1:b2:09:0d:b7:3a:b6:38:16:ff:
e0:dd:ee:d2:76:d9:25:8b:97:9f:71:9f:34:05:6b:63:eb:0a:
83:56:e8:56:c7:58:d5:4a:ad:05:bd:60:ea:8e:87:13:89:e3:
c8:6b:a0:e3:5c:3e:36:48:56:0c:32:99:82:a1:d6:c6:0d:9b:
3c:c5:45:b7:c4:9e:af:e6:1d:99:bc:e3:bf:2f:6d:70:c5:e1:
ae:4d:8e:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJsO1i+53bLdqgD/+RY/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTAyMTc1MzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmIxZDAzZWQ5NzQwZjQ2NmU0ZDNjNGE0ZTNlYzM5MDMyNzNiNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvMMsxbRcLegS1AnVTGf+e/H3JVL
McQu1qHewBRI63h5ylTWNvlCmw/SPFM7QYzKUCNS1A/9EBrUc2eUrCan5owYFgJa
ZzFiq0bNeridltZHXXqen5IpKf3Pg0sfHUFrc5NPwboXTxPQY4yJelFxEb8Vqdy9
g5M1ojQMCEm9r1SwbLagIzq7cjtNgsUCQCE9/MlucC1S7TpIf04au0nqnY9rNh03
9mX/vf+BNamAYib70+vZPs28rPw3I1Io+mt393uyysKw0jBM7eKtZ03qh2D9Jauu
W6CzOx3IZt5jUU1ogCpM/U/Pfsb44qSZxvpeD2IhRYP53VkpeAz9HPMwgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMax0D7ZdA9Gbk08Sk4+w5Ayc7SbMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEveHJIUVB0bDBEMFp1VFR4S1RqN0RrREp6dEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAaMA0G
CSqGSIb3DQEBCwUAA4IBAQCITYUdDAEFXqBSaheL8fMbGew2aO+OYuSj+8hA4fXA
Dy6OajiIga7xdST6mnLKFO84lOBX2uONsq/pPwmdTUms21om8tm2gepBiz90tsZ0
cLc7skB3lnSChYpFsW9jLJ2g8yqMI6zP6NY6U5n9Jn0J5Y6K7LXvMKBy9imzMLxe
HjZcKRtrbVu7kq0/b3CK98Y6CUn80vmaD2zMOfeDpBzkp6P36QVEMdTEIfGyCQ23
OrY4Fv/g3e7Sdtkli5efcZ80BWtj6wqDVuhWx1jVSq0FvWDqjocTiePIa6DjXD42
SFYMMpmCodbGDZs8xUW3xJ6v5h2ZvOO/L21wxeGuTY7b
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:41:17 2025 by rpki-client