Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/8s5jlmVuyTPiRv4H9BvQU42g7nw.roa
File: 8s5jlmVuyTPiRv4H9BvQU42g7nw.roa (raw, json)
Hash identifier: Ucu3y8/kR6J85jmowJDRLpHtgn2LtVqQioF1Y1wmZq4=
Subject key identifier: F2:CE:63:96:65:6E:C9:33:E2:46:FE:07:F4:1B:D0:53:8D:A0:EE:7C
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 0194236A3610866EF1DFA000697A38C38A20
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/8s5jlmVuyTPiRv4H9BvQU42g7nw.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58273
IP address blocks: 185.243.104.0/22 maxlen: 24
2a0d:f80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:36:10:86:6e:f1:df:a0:00:69:7a:38:c3:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2ce6396656ec933e246fe07f41bd0538da0ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:a7:34:d9:9e:16:83:1c:29:64:9d:ad:6a:
af:72:fd:d8:2b:83:7e:69:e9:42:d2:fd:d9:f1:d0:
2f:19:9a:34:9c:18:8a:4b:1b:15:28:6e:64:ca:8f:
03:df:aa:3d:a3:dd:f8:13:11:0e:f9:7d:96:cf:ca:
cf:20:28:a6:43:68:d1:6b:b8:3a:2a:d1:c5:2b:5f:
85:bb:85:e3:bd:a8:d6:77:a1:b2:4d:e2:42:55:77:
8d:3f:80:8e:4f:79:28:2d:7c:0b:bb:e9:68:3e:d8:
f5:a4:e1:14:85:ff:8d:db:b0:7d:f6:72:44:52:e9:
22:84:54:39:f6:24:24:61:fd:e3:b0:3d:a8:9e:a5:
1e:94:4a:24:c3:84:73:a8:37:13:de:6a:c1:2b:66:
6c:70:99:33:b9:82:86:78:a5:21:a6:cd:74:d9:72:
57:10:88:9e:98:4d:f7:c0:15:2c:ec:62:ad:55:6f:
fb:0d:bf:b4:1e:87:45:46:ce:86:d1:b2:26:55:17:
47:df:da:19:12:6e:bd:ca:af:f7:82:4c:19:80:47:
7e:3f:43:34:65:14:b3:ac:d2:ee:6e:4e:69:42:f5:
34:31:59:d0:d2:5e:ef:2c:59:44:3c:20:50:15:0f:
1f:84:61:fd:37:86:24:88:09:02:54:a8:4d:e5:b1:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:63:96:65:6E:C9:33:E2:46:FE:07:F4:1B:D0:53:8D:A0:EE:7C
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/8s5jlmVuyTPiRv4H9BvQU42g7nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.104.0/22
IPv6:
2a0d:f80::/29
Signature Algorithm: sha256WithRSAEncryption
ad:36:83:ff:3e:09:90:6c:88:17:c9:9a:b4:a1:e9:69:92:10:
cb:b3:cc:87:eb:95:b6:d3:4b:37:a8:00:f3:e3:3d:b3:a6:6f:
db:1f:f6:f8:51:90:f6:bc:07:a3:e4:fb:12:df:db:45:3b:e5:
a5:a7:a1:1a:22:d5:0e:23:f4:bd:9f:13:bf:fa:c3:9f:b3:18:
db:3d:bc:59:f1:d9:32:e7:a3:45:48:ab:e6:19:22:51:87:70:
02:98:1d:c1:2e:ee:75:19:6f:7c:83:a9:b8:5e:e2:ac:b4:11:
31:4b:60:c6:bf:dd:e5:d0:ec:b0:a8:2a:87:8d:25:2b:23:23:
eb:7a:98:7a:14:48:55:06:fd:19:72:3e:63:9b:26:97:c0:ab:
94:98:94:01:84:65:2d:91:3f:bf:92:77:df:5e:15:56:0c:d7:
86:13:24:64:31:24:8e:89:df:3b:4a:73:55:90:50:37:a7:1f:
fb:a6:05:d3:05:18:10:95:c4:42:4c:59:9e:1e:10:00:fe:f4:
e0:e3:5d:63:73:30:ea:d3:0a:f5:1a:f4:97:ee:5b:27:82:a4:
9f:4f:51:bb:4b:ca:73:88:7d:7b:49:50:bc:6d:7c:30:bc:62:
61:9d:9d:98:f3:d1:42:63:21:eb:22:f4:15:e5:c1:f1:db:45:
6b:ba:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:43 2025 by rpki-client