Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/4CDpfs04Q6BhM73eRs3ynYW0oqc.roa
File: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (raw, json)
Hash identifier: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=
Subject key identifier: E0:20:E9:7E:CD:38:43:A0:61:33:BD:DE:46:CD:F2:9D:85:B4:A2:A7
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019498D77CF649A2D229B5757A39A4536DC4
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/4CDpfs04Q6BhM73eRs3ynYW0oqc.roa
Signing time: Fri 24 Jan 2025 15:04:06 +0000
ROA not before: Fri 24 Jan 2025 15:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.14.65.0/24 maxlen: 24
86.104.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:d7:7c:f6:49:a2:d2:29:b5:75:7a:39:a4:53:6d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 24 15:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e020e97ecd3843a06133bdde46cdf29d85b4a2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:3e:cc:ae:04:e1:0f:c6:b6:3d:9a:3c:de:
97:0b:e5:2d:93:8d:76:b6:46:57:8e:8f:9c:82:55:
b4:2f:5d:55:2b:df:20:01:83:58:0e:e1:97:2b:9c:
a5:0c:62:35:2c:d9:4e:83:17:a3:64:aa:93:0b:cf:
9d:36:18:b4:c3:6e:c2:a3:90:c9:45:8b:c9:4f:86:
77:88:d8:de:6e:24:84:c1:10:d3:f5:58:93:3d:de:
82:4d:78:51:87:d3:ff:53:5c:11:34:e7:a8:0a:72:
2b:d2:94:a7:a4:31:34:ee:3c:76:0b:94:68:7f:06:
3e:d6:1d:da:22:e3:7c:56:ec:bd:98:06:87:21:14:
a9:4d:ba:5d:2d:da:08:9b:01:e8:ca:b0:01:74:9f:
59:74:98:d2:dc:17:bd:74:0d:56:9b:11:cb:db:2f:
b5:40:7e:b7:7d:7c:de:7c:7d:7f:b3:a3:17:be:ce:
d5:7c:14:ae:e7:99:d8:ab:2e:2b:ca:ce:1f:c5:b6:
53:aa:7f:b1:13:c4:9a:28:8d:4c:98:64:30:3a:c8:
a7:41:12:4d:27:44:a3:f5:e4:70:4e:23:6d:6c:36:
b6:12:2a:8d:60:c5:83:28:7c:48:1a:9b:33:43:b8:
e9:78:30:6b:0d:b8:e9:9c:e6:8e:02:63:0d:46:02:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:E9:7E:CD:38:43:A0:61:33:BD:DE:46:CD:F2:9D:85:B4:A2:A7
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/4CDpfs04Q6BhM73eRs3ynYW0oqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.65.0/24
86.104.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2c:84:ea:61:e9:5b:81:ef:bc:c7:42:55:5a:85:07:18:3b:
e7:a1:49:15:92:5b:1f:4f:37:39:bb:cb:d2:40:1f:df:89:de:
76:14:45:4e:c3:ea:ef:43:5c:fc:fe:0d:44:2b:cd:86:90:87:
26:21:58:47:4e:b7:73:4c:6d:11:84:d5:c1:36:26:a6:3d:50:
cd:1f:b2:47:4e:30:ea:3b:64:31:cf:3d:ad:b9:3e:f9:e1:01:
60:db:09:ac:63:97:68:0c:a2:96:0a:40:67:b7:a6:2a:92:b7:
22:7f:9c:6e:25:47:df:af:d6:8a:be:57:a9:0d:65:0e:ef:32:
6a:6a:f0:f4:8c:da:66:13:1e:8f:37:2a:b7:44:6e:0c:0e:51:
f3:a8:39:2e:9b:d3:5c:e1:42:2a:de:f6:cd:ef:64:cb:04:6c:
e4:79:89:0a:1d:e6:cc:26:49:f0:cc:84:69:e7:85:bb:8e:e9:
6c:02:56:2a:20:e9:89:e3:5c:2d:69:a7:93:91:d1:5b:e6:b1:
f2:14:da:f6:4f:05:1c:f8:a1:4c:4b:93:e6:fd:ce:67:b2:1c:
02:62:58:f9:ee:1a:f9:3e:d2:33:9c:93:33:19:f9:34:bf:b3:
6d:b4:32:cd:19:39:62:37:e6:24:e8:e5:51:97:04:96:59:67:
66:4d:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:54 2025 by rpki-client