Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/8yIYBoW_8FaQv1_So8h-X0EADYM.roa
File: 8yIYBoW_8FaQv1_So8h-X0EADYM.roa (raw, json)
Hash identifier: +ml54R8Xo0sUoQq586NaymNSu6Mw3IUx+Tdl3Tm2wgk=
Subject key identifier: F3:22:18:06:85:BF:F0:56:90:BF:5F:D2:A3:C8:7E:5F:41:00:0D:83
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018C2F36FB76B14C98F6253E60DB0FEC7DA7
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/8yIYBoW_8FaQv1_So8h-X0EADYM.roa
Signing time: Sun 03 Dec 2023 10:26:21 +0000
ROA not before: Sun 03 Dec 2023 10:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203847
IP address blocks: 185.206.52.0/23 maxlen: 23
185.122.44.0/22 maxlen: 22
2a01:57e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:36:fb:76:b1:4c:98:f6:25:3e:60:db:0f:ec:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Dec 3 10:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f322180685bff05690bf5fd2a3c87e5f41000d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:3e:01:a0:e2:4a:4a:96:5c:90:6a:5f:4a:
77:bf:bb:d1:47:29:32:ad:df:d6:c1:88:ed:97:a9:
8d:40:32:5f:fd:61:c8:ad:72:80:3e:cc:2e:01:59:
8d:59:8e:c4:7f:72:49:b3:ad:86:e5:ff:92:dd:bc:
67:f6:f5:db:de:f0:c1:ea:75:ec:c1:d1:c7:6f:86:
bb:4f:91:a3:7a:32:5f:0d:c6:f7:0e:e9:8e:62:c7:
c9:b6:6a:5e:5f:81:7d:c4:ea:2a:73:eb:9e:a9:5a:
5b:1f:38:30:67:89:bc:18:02:2a:e6:6f:78:32:17:
7c:eb:b7:1a:a3:20:ee:5e:a5:49:4f:54:b7:b1:ee:
84:0a:d4:fb:63:5d:9d:d8:e9:bc:28:61:88:8e:fb:
fd:71:1e:60:e5:46:f9:49:3d:74:4b:20:11:de:a5:
91:60:b0:51:cd:d9:9b:53:b4:1a:78:f5:6c:8b:eb:
92:41:04:03:5a:17:68:36:12:72:d2:29:93:35:5b:
00:d3:6f:33:36:4b:eb:0b:1e:d2:ee:b3:73:d2:76:
95:f3:cc:94:b6:74:aa:4d:a6:0d:9b:a2:85:3b:e9:
48:64:9d:26:c0:66:c5:19:9e:bb:0d:7b:96:b3:d2:
f2:12:a9:5b:f1:59:11:c3:84:94:71:7e:92:06:56:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:18:06:85:BF:F0:56:90:BF:5F:D2:A3:C8:7E:5F:41:00:0D:83
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/8yIYBoW_8FaQv1_So8h-X0EADYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.44.0/22
185.206.52.0/23
IPv6:
2a01:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
c5:93:59:8b:2e:b8:84:56:3d:ce:30:45:a8:08:86:26:ae:48:
86:0b:82:ca:ed:b5:33:09:3c:e6:11:81:9f:59:09:63:2d:a1:
3d:cc:9c:57:ab:38:7a:42:f0:46:22:f4:24:62:c4:fb:2f:e9:
46:f9:44:f1:85:e2:ff:f0:34:84:0e:bd:a1:76:a5:c6:10:51:
d0:ce:28:03:50:02:7e:78:e0:22:c0:db:d5:5e:a1:89:5a:7f:
3e:27:04:ef:81:5f:3e:43:ca:07:fd:d2:80:0e:02:e5:4d:79:
7a:3c:6e:ba:f2:db:67:d6:6f:39:db:dd:92:96:b1:d6:37:fc:
3e:b7:05:9a:06:30:65:26:6b:0b:29:c1:b0:04:9b:71:55:a9:
b6:ec:c0:f4:9f:19:99:ab:0d:fd:4b:49:e7:87:ee:2c:cb:8f:
5e:f6:1e:39:75:1e:fc:7f:b9:fe:3a:ed:30:c4:0f:fd:5e:79:
b8:07:9b:dd:be:03:93:2d:54:2e:8b:47:4d:2d:17:34:30:99:
1e:1a:d7:f4:a7:ba:96:3b:df:05:50:cb:da:23:e3:0b:30:e7:
a6:ef:68:68:8c:79:a8:5a:f9:11:51:93:64:95:ff:bc:de:00:
4d:b5:de:6b:53:ac:ae:c0:f2:30:a8:ce:54:8c:ee:d0:e8:7f:
52:2b:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:21 2025 by rpki-client