Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa
File: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (raw, json)
Hash identifier: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=
Subject key identifier: F1:92:48:40:57:E4:5E:E4:57:68:C7:CD:22:3D:40:68:E4:20:9A:66
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019425215D63201C3335C3371F8E1E7057B5
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 145.243.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5d:63:20:1c:33:35:c3:37:1f:8e:1e:70:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f192484057e45ee45768c7cd223d4068e4209a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:bd:bc:fe:6c:ee:fa:2c:38:60:17:93:d1:
09:05:1e:7e:cb:9b:c2:3a:6b:30:ef:3f:41:22:99:
5b:0b:b2:58:60:34:a7:66:34:ac:3d:e0:13:88:5b:
2a:72:d5:8b:f3:ac:61:8b:78:96:f9:1a:3d:1a:3d:
ac:3a:da:7a:ff:ad:02:ef:a6:c3:13:9d:5f:bb:2b:
52:47:14:d9:b3:83:11:ce:ed:db:c0:73:3a:48:48:
e7:82:f2:69:23:33:13:d1:ad:7f:80:f5:65:01:14:
25:67:53:0a:77:2c:36:f7:6b:06:6f:6d:2e:69:37:
2f:fd:79:5e:83:1e:77:85:51:06:b4:16:c8:2a:31:
48:87:3b:4a:3a:ec:fb:46:1f:8b:09:7b:e4:32:c2:
e6:da:ab:d6:a5:09:b8:3b:16:d9:fa:2d:7e:23:48:
51:eb:a6:57:f6:3f:8f:f9:3f:c0:71:f2:b7:3f:53:
a4:59:5d:72:f4:4f:22:b6:82:61:9e:a9:06:e2:f7:
48:33:74:60:99:74:2d:23:65:00:98:aa:26:e9:c0:
f8:3d:44:55:3e:7c:c7:1b:f3:19:70:23:b4:a5:82:
15:61:d8:bd:35:45:84:58:6c:54:bd:c6:a1:d5:56:
0f:1e:ab:20:71:6a:d1:df:02:09:70:21:1d:0d:d9:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:48:40:57:E4:5E:E4:57:68:C7:CD:22:3D:40:68:E4:20:9A:66
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.243.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8e:4d:e1:21:0c:db:35:dd:63:01:2f:6a:2c:6a:d3:e5:8b:
47:60:11:1b:69:35:51:9d:d9:b8:1b:63:d5:7c:8e:f0:fc:87:
86:44:0f:17:e7:cc:a5:58:94:59:c7:04:f7:d4:30:5d:82:d2:
c5:38:96:d0:a0:3b:7c:80:8f:1b:ff:41:df:fc:dd:38:9b:2e:
f0:3d:62:11:4e:d0:55:13:21:3d:fc:f1:14:2d:57:6f:7f:a4:
9f:5e:33:86:23:d4:a4:75:34:44:d4:c6:ce:4f:5c:62:7a:35:
2f:1d:e5:2f:89:e1:da:10:90:b0:70:fe:31:7a:c2:db:cc:05:
25:e2:7f:68:c9:01:29:67:f8:87:b2:f5:9b:91:e4:20:7f:8f:
85:ac:4f:df:ea:32:8b:ba:27:44:f1:94:77:75:05:80:08:d5:
ff:f4:a5:f6:2d:44:32:7a:f8:60:2e:66:52:f1:25:7d:ec:8a:
3a:d1:53:99:b1:75:69:d3:ad:dc:16:b6:30:dd:be:7d:39:09:
76:62:ac:c7:99:0e:b3:68:e9:26:b8:de:44:df:15:0b:36:da:
3f:63:5b:04:73:a2:e5:ca:6d:4f:a2:15:42:38:d6:de:68:00:
5a:0d:77:28:63:06:be:63:37:a9:fb:a8:d2:76:ff:d8:c1:2a:
8c:a0:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:23 2025 by rpki-client