Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/im8w3Xx-iUAQD6wX6N09-EJJW8c.roa
File: im8w3Xx-iUAQD6wX6N09-EJJW8c.roa (raw, json)
Hash identifier: /qbFQ2xM1Cro7Sw3CCIT5woLdLgqxh07N/rM/Vszw70=
Subject key identifier: 8A:6F:30:DD:7C:7E:89:40:10:0F:AC:17:E8:DD:3D:F8:42:49:5B:C7
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 0194E4411F33AC7806277F9EDF1E83D92C7F
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/im8w3Xx-iUAQD6wX6N09-EJJW8c.roa
Signing time: Sat 08 Feb 2025 06:31:00 +0000
ROA not before: Sat 08 Feb 2025 06:31:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401477
IP address blocks: 185.244.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e4:41:1f:33:ac:78:06:27:7f:9e:df:1e:83:d9:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Feb 8 06:31:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a6f30dd7c7e8940100fac17e8dd3df842495bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:e7:20:8b:11:26:e3:ff:07:2c:b0:49:ab:
c4:39:73:15:f9:9c:ed:b1:ae:76:bf:d3:84:77:d1:
b1:c6:81:f9:3b:ac:a9:ad:8a:3a:94:19:1c:b3:93:
db:df:12:fb:40:70:47:2b:38:72:04:af:47:00:9e:
c9:0b:6b:d5:d5:97:53:77:53:be:c3:fa:02:84:c9:
c9:26:48:18:da:cc:6d:58:8c:36:18:06:bb:4c:77:
fd:fe:97:9b:da:19:9d:fd:a7:13:0f:f8:94:e4:0a:
09:e2:91:54:72:89:cc:39:93:c6:e5:5a:10:51:d0:
d8:15:d1:88:77:ce:af:1f:d8:a1:bc:f5:ea:ae:35:
5f:e9:ca:e6:1d:80:6f:3f:b3:46:1e:87:3c:f5:b0:
bc:99:1d:39:40:43:6f:d3:c9:c4:98:13:81:23:36:
c9:4a:02:59:13:4a:2e:51:b5:9c:10:8d:70:82:2a:
62:51:4b:7a:29:e8:ce:9f:ae:52:b6:61:73:b3:ab:
2c:3a:2d:7a:e8:de:7a:df:0c:61:d8:28:cf:de:1f:
b0:e3:a5:1d:14:05:9e:61:fa:0c:e5:43:2a:e1:7c:
a1:1b:68:f1:9e:12:38:e8:55:2e:ba:60:2b:35:f4:
ed:dc:5e:e6:94:29:0e:cd:88:c1:cf:87:c6:06:c4:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:30:DD:7C:7E:89:40:10:0F:AC:17:E8:DD:3D:F8:42:49:5B:C7
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/im8w3Xx-iUAQD6wX6N09-EJJW8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f8:f3:66:cb:47:2e:8b:23:ca:eb:6b:05:3b:4a:4b:60:3b:
71:30:1d:8b:0f:06:e1:40:55:9e:78:63:fe:c0:4d:96:54:40:
af:94:d4:ce:bc:94:4b:1c:96:e7:d3:20:0c:b4:cc:0f:34:46:
b7:24:6c:eb:e2:24:91:e5:65:e7:4a:5d:50:bb:9e:3f:18:b6:
55:7b:c3:81:fc:cf:52:d9:51:eb:a6:a9:d7:5a:a1:61:9e:26:
57:8b:4b:fb:9a:9a:68:02:c3:04:dd:df:7f:4e:08:f6:dc:c7:
d9:32:a4:8f:5e:f7:f9:c0:8a:a4:95:42:08:a7:9d:13:14:2b:
13:c9:49:5d:0c:ea:bf:b5:b0:4f:1c:ad:0a:b6:71:35:fc:5d:
45:93:52:b8:20:d7:b9:f9:28:c7:d7:a7:7a:95:3f:51:ff:56:
80:92:73:4a:fe:9a:cc:e5:29:41:0b:50:52:91:d6:de:63:9e:
6e:66:2d:cb:23:b3:9e:af:37:30:ad:95:dc:bf:14:76:63:91:
35:82:02:f9:e1:4d:32:6c:68:a0:b5:2f:6c:45:bb:aa:b1:13:
33:a7:11:70:93:0b:4a:e8:de:e0:4f:60:c8:3b:09:22:d7:11:
9c:30:0e:8a:b8:5d:14:8a:9a:a0:e2:8b:ce:85:5b:97:b6:1e:
a2:d4:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:47 2025 by rpki-client