Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c5q48bg483Mzh68xfwIl8lGsqVw.roa
File: c5q48bg483Mzh68xfwIl8lGsqVw.roa (raw, json)
Hash identifier: ap4YtZnbVOFGTppPMegHp9b1hRXREERyhGURRCzULuM=
Subject key identifier: 73:9A:B8:F1:B8:38:F3:73:33:87:AF:31:7F:02:25:F2:51:AC:A9:5C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019445AC2E21A53AF3B7CC2E11008E1AB6D8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c5q48bg483Mzh68xfwIl8lGsqVw.roa
Signing time: Wed 08 Jan 2025 11:28:19 +0000
ROA not before: Wed 08 Jan 2025 11:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 84.32.178.0/23 maxlen: 23
84.32.214.0/24 maxlen: 24
84.32.215.0/24 maxlen: 24
84.32.248.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:ac:2e:21:a5:3a:f3:b7:cc:2e:11:00:8e:1a:b6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 8 11:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739ab8f1b838f3733387af317f0225f251aca95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:02:82:30:5c:0a:db:8d:74:8b:b7:5c:51:
87:f0:e7:36:55:1e:f0:72:9e:b7:b7:e2:0d:c4:bd:
d9:c9:67:41:29:e0:6f:28:d0:30:5f:d7:bc:2f:86:
06:73:43:6d:63:4e:e8:3a:2a:22:58:00:f3:25:3b:
31:a1:b9:c1:5c:15:3f:4b:ed:c3:a2:77:30:ac:8b:
93:dd:32:36:41:30:84:d5:09:e1:dd:96:36:58:c4:
13:54:ff:a4:35:7e:97:bd:ee:1f:6b:5f:2a:fe:5b:
aa:93:07:33:9e:8c:d3:5f:fc:9a:00:6d:6c:79:54:
e8:fd:5c:7d:e6:82:6e:d9:a6:71:ba:8b:b6:01:da:
64:67:6e:44:9f:37:0d:00:f5:05:4b:32:47:ee:17:
8f:6e:2f:f5:69:94:f9:1f:71:dc:4e:89:a5:96:f0:
4b:8e:c5:38:84:ba:8c:d5:1b:7e:d8:22:ed:e7:ad:
22:a3:ba:50:8a:94:29:67:e1:e9:40:ae:c8:7e:cb:
d9:8f:ba:cf:b9:5f:ef:07:f3:83:73:af:77:85:24:
18:a5:c4:b9:43:93:4f:3b:ca:d5:af:41:92:75:74:
94:cc:79:7b:1a:68:6b:5e:a9:1c:41:8e:26:de:4c:
9f:f9:5e:8a:6e:81:5b:90:e4:d8:32:fd:89:ca:51:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:B8:F1:B8:38:F3:73:33:87:AF:31:7F:02:25:F2:51:AC:A9:5C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c5q48bg483Mzh68xfwIl8lGsqVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.178.0/23
84.32.214.0/23
84.32.248.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3b:da:ae:3c:91:5c:33:7b:d0:e7:e5:70:46:c9:f0:9a:48:
7a:f6:42:1e:ac:18:b2:9e:7e:b4:db:aa:a0:ec:45:a8:1d:94:
49:14:57:04:eb:9c:38:50:b7:7c:ac:53:f0:ec:31:19:26:4a:
27:60:0f:1f:8e:36:d0:3a:10:05:85:fa:17:c0:1c:7c:96:e4:
1b:68:c5:2f:d9:93:83:91:0c:b4:a0:f2:cf:ab:a9:08:d2:6d:
bf:df:8f:62:28:4a:09:24:65:64:0d:1f:75:b3:cf:d9:a1:a5:
3d:93:4e:01:1c:e7:4c:9c:1a:33:1e:ae:4d:5d:f3:de:06:1d:
4a:c5:c6:0b:3a:ab:bf:f1:e2:f5:0d:5d:21:e9:4f:68:9d:7f:
d9:97:8a:89:b8:a9:0b:22:19:78:70:6f:50:e4:5c:7e:23:85:
79:e2:81:96:ab:4c:63:52:98:51:46:2c:66:6c:48:8e:fb:79:
52:bc:09:8c:79:d7:fc:8f:54:8a:b5:37:ea:d0:d5:dc:08:06:
12:98:e2:18:cf:74:ec:f3:a1:1b:1b:e7:11:d4:64:89:ec:7b:
ca:7e:a4:5c:a7:10:43:ac:8f:48:3c:e2:79:b4:8d:25:0f:a4:
98:02:dc:a3:fa:76:2f:59:ee:7e:cc:56:1c:5f:99:8e:f3:4d:
17:86:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:59 2025 by rpki-client