Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/uRAIHeAA2Vr3r1br-3dI-gsRUnA.roa
File: uRAIHeAA2Vr3r1br-3dI-gsRUnA.roa (raw, json)
Hash identifier: mrhUnpHVT9j0hbdcVzvqx5IArf2whnzACDl9uxCdp8M=
Subject key identifier: B9:10:08:1D:E0:00:D9:5A:F7:AF:56:EB:FB:77:48:FA:0B:11:52:70
Certificate issuer: /CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Certificate serial: 018CC3B66D285357FE2334D69AEC607271EA
Authority key identifier: BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/uRAIHeAA2Vr3r1br-3dI-gsRUnA.roa
Signing time: Mon 01 Jan 2024 06:29:21 +0000
ROA not before: Mon 01 Jan 2024 06:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.208.9.0/24 maxlen: 24
85.208.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6d:28:53:57:fe:23:34:d6:9a:ec:60:72:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Validity
Not Before: Jan 1 06:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b910081de000d95af7af56ebfb7748fa0b115270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:d3:93:7b:49:a0:a6:25:d4:4e:59:0f:2e:
56:68:7c:e3:3c:38:85:5e:49:0c:70:d0:44:b7:43:
ce:12:85:8b:ec:fa:8f:8d:94:4d:73:0b:a7:41:8f:
0f:a7:5a:c5:db:ca:b8:a3:fd:2c:63:59:fb:9f:25:
5c:a7:c1:ee:5e:8b:83:9d:96:6e:b6:54:3c:b0:e8:
e9:4e:a4:3f:2a:13:58:23:68:68:28:48:48:38:65:
9d:e0:11:6f:21:73:4c:ab:c4:c1:59:70:c4:81:75:
0f:8f:6d:c5:fb:0d:49:0e:3f:86:5f:55:6a:4d:76:
50:5f:c3:d0:0a:5f:2e:3a:05:c9:90:62:4a:97:d5:
75:d9:80:9d:f9:07:cf:f2:47:96:95:0c:c9:f1:33:
5e:b3:b1:e6:24:7c:77:43:c1:a6:75:56:65:70:ba:
c7:d6:0f:e2:6a:04:4e:05:88:48:48:ee:12:ea:ae:
59:c5:5a:56:9c:3a:a4:d2:a7:8b:8a:ac:97:56:39:
d4:89:e1:f4:f7:c6:10:bd:79:2a:a7:b7:ed:4d:ce:
f5:29:f9:d4:53:cb:62:ea:b4:0a:3f:34:32:ad:85:
fa:01:a7:56:f2:72:0c:aa:50:6e:f4:bf:0f:9a:70:
d6:55:dd:fd:21:c8:fa:0f:17:af:6f:2d:e1:95:1c:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:10:08:1D:E0:00:D9:5A:F7:AF:56:EB:FB:77:48:FA:0B:11:52:70
X509v3 Authority Key Identifier:
keyid:BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/uRAIHeAA2Vr3r1br-3dI-gsRUnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/u4MhwF1QHttJkZDAxKMInSRsW3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.8.0/23
Signature Algorithm: sha256WithRSAEncryption
76:07:1c:f2:05:6c:cf:09:89:e1:a6:3a:f7:76:2d:c8:eb:cc:
f8:1f:7b:75:42:31:51:89:67:d9:8a:b6:ce:f3:83:f3:7e:16:
6a:ef:e3:22:f1:bd:c9:c4:08:82:58:25:51:c6:94:c0:1b:67:
40:c3:e0:32:c0:62:c7:89:06:48:5d:fb:d4:f5:b7:6a:b4:aa:
6a:fd:1d:54:35:13:e2:f6:e2:7d:54:be:a9:00:30:6b:8d:21:
88:82:52:12:b3:f2:d1:13:97:0a:06:56:e9:db:bf:c4:02:25:
25:03:53:47:f9:3f:57:32:e4:66:b0:5c:79:3b:3c:56:12:dd:
8b:e7:af:76:a3:d2:bf:ea:4c:2c:2c:62:a3:51:e0:c5:4a:11:
78:58:e6:55:dc:57:81:de:4f:c6:b5:82:5d:fd:b8:e6:a1:53:
58:04:fd:90:61:37:62:28:99:0b:7e:07:55:ec:9c:7e:44:ba:
c8:c5:51:b4:0e:65:95:46:68:46:81:f4:bb:ea:85:eb:f6:8f:
24:23:d2:41:b0:cd:a4:9e:92:4b:87:17:90:58:5d:00:86:f1:
8b:b2:be:95:57:f4:02:8a:9e:e3:bd:fe:58:4a:ca:ae:17:78:
e9:b3:f5:3b:e4:58:2f:a2:50:15:c0:0c:b1:e2:27:0c:77:49:
e3:23:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:57:38 2025 by rpki-client