Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8dxyxFPV1cnh-eQT38Vwo804Zc8.roa
File: 8dxyxFPV1cnh-eQT38Vwo804Zc8.roa (raw, json)
Hash identifier: zBtUxTyecKrv2ZfDIBGczN9TScVAsZYl+XFgs+EoiSU=
Subject key identifier: F1:DC:72:C4:53:D5:D5:C9:E1:F9:E4:13:DF:C5:70:A3:CD:38:65:CF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01951D6FEE420A68E45A978E76B6EDF01196
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8dxyxFPV1cnh-eQT38Vwo804Zc8.roa
Signing time: Wed 19 Feb 2025 09:00:29 +0000
ROA not before: Wed 19 Feb 2025 09:00:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.244.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:6f:ee:42:0a:68:e4:5a:97:8e:76:b6:ed:f0:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 19 09:00:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1dc72c453d5d5c9e1f9e413dfc570a3cd3865cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:b3:5b:fe:de:7b:73:10:34:10:99:51:46:
76:63:6e:f6:d0:84:f2:6d:d4:4c:09:7e:c2:b4:0c:
5d:ff:c5:ad:90:9d:ca:cd:c5:19:db:56:7c:86:d0:
5b:c6:54:0b:48:ab:19:c6:dd:75:c6:66:95:bc:42:
cb:01:ea:ef:4f:36:0b:81:97:31:fd:93:7c:58:8e:
63:df:6f:14:97:4d:4f:52:fd:c6:9e:44:e5:11:fa:
08:6a:5a:e9:76:89:b9:df:17:f6:b0:4e:e1:4d:41:
39:c8:4f:9a:96:d2:e3:16:dc:92:bf:57:6e:a5:01:
2f:4e:20:86:6a:d3:d1:44:b3:ea:44:86:ca:2f:be:
53:1c:79:77:3f:fd:b4:a6:55:9c:fb:06:03:46:27:
89:e1:24:cb:b6:88:e3:97:fb:64:24:fd:9b:ef:24:
95:74:13:43:09:84:f9:55:62:79:4a:0f:44:c2:9c:
48:7f:6c:7e:9d:d5:40:f4:63:00:d9:28:cb:36:2c:
07:4a:97:3a:a1:ba:67:29:6d:4e:20:64:fa:36:20:
d0:64:05:75:89:89:99:c1:94:8f:d8:b7:fa:45:3e:
7e:4e:47:9f:49:e8:72:cb:e3:a9:49:c4:05:d3:3b:
88:ec:9c:ac:b5:f9:fe:6d:18:88:6d:3a:29:d4:d4:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DC:72:C4:53:D5:D5:C9:E1:F9:E4:13:DF:C5:70:A3:CD:38:65:CF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8dxyxFPV1cnh-eQT38Vwo804Zc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.104.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3a:1b:2a:e1:0c:09:50:fa:cc:9b:1f:e9:29:fa:f9:68:92:
2c:ba:8c:a2:7d:1f:1f:27:0f:e8:80:09:33:42:45:b2:6a:4f:
84:e1:0f:d7:d0:ab:be:29:32:c6:81:8e:b1:d9:6a:e0:70:d6:
62:58:c6:77:9b:07:ed:2e:f0:7d:98:59:41:42:a5:71:b9:63:
33:f1:ef:40:04:a5:56:0c:78:df:d6:d5:29:e8:e9:a8:10:d7:
18:b3:e8:a4:2b:cc:20:46:e9:3a:4c:37:62:8c:e2:22:56:43:
9d:87:aa:67:8e:96:cb:a9:a4:bc:bb:73:6a:85:84:16:c9:70:
70:65:0a:64:b8:83:c4:df:5c:bb:ef:34:87:06:00:7e:51:49:
b4:d4:50:f0:5b:6e:fa:30:97:ea:0b:1c:7f:e8:2f:49:ef:ec:
43:6c:bc:b2:b8:86:e2:7a:fd:99:42:e1:d9:e9:53:2d:23:bd:
22:98:14:3c:75:db:1b:c7:7f:9f:e9:c1:f6:89:0d:95:89:81:
b7:47:d5:6d:99:66:3d:11:b6:99:0d:6a:77:65:4b:8a:ac:46:
57:f8:7e:72:67:22:90:99:75:07:e7:7d:22:f3:44:27:2f:61:
1f:f8:46:26:ff:82:5f:04:73:74:ee:5f:63:68:3c:c7:2c:53:
c0:7e:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:21:52 2025 by rpki-client