Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/8pbOtoickn4gngDPghS6zzsubu8.roa
File: 8pbOtoickn4gngDPghS6zzsubu8.roa (raw, json)
Hash identifier: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=
Subject key identifier: F2:96:CE:B6:88:9C:92:7E:20:9E:00:CF:82:14:BA:CF:3B:2E:6E:EF
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 0194221F2E99D6474D9B75F57E1D2E05DBF3
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/8pbOtoickn4gngDPghS6zzsubu8.roa
Signing time: Wed 01 Jan 2025 13:47:36 +0000
ROA not before: Wed 01 Jan 2025 13:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51964
IP address blocks: 194.24.8.0/24 maxlen: 24
194.24.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:2e:99:d6:47:4d:9b:75:f5:7e:1d:2e:05:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Jan 1 13:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f296ceb6889c927e209e00cf8214bacf3b2e6eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:99:e1:b3:7c:c3:cd:fa:c1:7c:09:fe:92:
47:93:19:78:53:1c:36:ec:30:51:cc:bc:ca:03:9a:
3e:ca:c3:0f:aa:12:da:e3:74:1d:88:b0:3f:11:a2:
a7:63:ad:61:bd:53:b6:d4:b2:c5:d1:eb:5b:07:ac:
7e:23:fe:ef:43:8d:98:dc:d1:f2:45:d1:48:85:e3:
07:65:47:91:e8:5c:fb:6b:3e:1b:33:48:74:46:98:
36:e2:4a:e7:b1:66:39:ad:40:58:b7:89:d9:60:39:
78:be:36:0e:75:8b:4b:ca:d9:ea:27:58:4b:81:5c:
33:18:35:24:48:70:5c:16:2f:5a:03:68:6e:65:3a:
95:97:e0:6a:11:0e:58:3e:23:25:d1:a9:5e:a8:5d:
ea:cc:29:05:13:5c:53:58:a3:68:e3:5b:73:f8:c3:
86:c1:3d:1e:b4:f5:a5:90:51:4e:dd:46:36:16:86:
ba:d1:d1:91:31:9d:cd:b0:66:a4:af:68:d0:9c:dd:
db:7d:00:88:38:7b:9c:cb:2f:2d:f9:1d:ca:ed:91:
fd:73:5a:da:f7:b2:f3:7e:9d:0b:b2:1e:67:85:6c:
87:87:13:81:21:9d:81:8a:b5:70:9e:17:03:06:0a:
01:68:4a:8c:08:fe:0a:9b:34:ac:0b:55:4a:64:d7:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:CE:B6:88:9C:92:7E:20:9E:00:CF:82:14:BA:CF:3B:2E:6E:EF
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/8pbOtoickn4gngDPghS6zzsubu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.8.0/24
194.24.10.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0c:3d:f3:c8:59:de:e1:73:e0:0f:68:45:5f:4b:c5:d3:cc:
78:64:4f:cc:75:67:0f:89:4e:a2:a6:9a:cf:a8:9b:24:ed:ab:
54:ea:68:d3:1b:66:f6:fc:da:aa:27:58:7e:d2:70:40:d1:7b:
ed:59:7a:55:f9:6c:72:ac:77:80:36:c9:6f:8d:fc:43:15:49:
50:e8:c2:cd:15:26:60:b0:e8:ea:e3:ad:89:f6:9d:10:d8:3a:
2d:62:21:0c:62:4d:f3:97:23:a0:d8:41:69:9a:d3:66:c0:db:
5b:97:19:26:2d:09:e3:14:1b:f3:fe:98:a6:d6:40:90:2d:dc:
25:e4:90:45:dc:e0:10:3c:a8:41:84:5a:0f:ae:ea:1d:cd:31:
d6:44:71:ba:7f:db:e0:f6:a3:24:41:62:51:a6:ca:4e:bd:92:
99:41:68:26:61:77:a4:78:e1:1a:58:9a:ab:c1:19:41:fd:d0:
f5:db:01:4d:b6:99:8c:87:ba:45:c6:37:7f:6d:6f:1e:40:69:
73:f7:45:41:c1:67:a6:35:0a:fc:b9:c5:df:bb:97:64:01:ea:
8d:58:27:4a:58:82:27:67:67:f9:98:b0:8c:60:e9:d5:d7:97:
16:2d:88:45:b4:29:45:51:c9:71:dc:1f:8a:70:0b:1f:b7:53:
88:11:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:14:59 2025 by rpki-client