Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8aQWQde5Ig3tYOUUnkByjs4on-c.roa
File: 8aQWQde5Ig3tYOUUnkByjs4on-c.roa (raw, json)
Hash identifier: 0XrlQOJweMyVemIclcPOoFcGbyXyyiERW8OvuT3u2vU=
Subject key identifier: F1:A4:16:41:D7:B9:22:0D:ED:60:E5:14:9E:40:72:8E:CE:28:9F:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019584EA1162EBF745F6EEB070824E84E149
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8aQWQde5Ig3tYOUUnkByjs4on-c.roa
Signing time: Tue 11 Mar 2025 11:14:47 +0000
ROA not before: Tue 11 Mar 2025 11:14:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 193.8.185.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:ea:11:62:eb:f7:45:f6:ee:b0:70:82:4e:84:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 11 11:14:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1a41641d7b9220ded60e5149e40728ece289fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:00:75:ea:58:bf:1f:e9:32:b1:0b:b4:56:
da:a4:19:71:84:ac:77:1e:74:5d:62:5c:c4:88:e7:
0f:7a:b1:58:87:1c:f8:1f:59:8e:01:99:87:8b:c8:
98:b4:bc:fe:f3:25:53:23:a8:1d:c7:99:ad:88:0d:
ad:a9:3c:89:b7:38:65:2f:75:b0:26:49:a8:04:57:
6f:b4:8c:8f:40:d7:fe:97:4c:48:03:08:7a:ac:4e:
a3:a2:ed:7d:0e:30:75:3e:97:2c:1c:83:ce:7e:1d:
98:56:e2:2b:1c:4a:37:3a:ff:30:ee:5f:af:84:23:
c1:a9:5a:41:5a:2c:20:00:ee:bd:dd:d3:5a:53:e2:
7f:79:0d:28:64:d3:06:2d:b9:4a:e5:a3:0c:c5:6b:
17:7c:73:fe:e6:e0:d1:cd:07:41:9b:2b:17:33:7d:
30:50:a9:1f:65:5d:31:f4:a6:80:a0:0e:05:e5:70:
b5:83:12:70:ea:3c:fd:e0:cd:1e:f3:c4:38:3d:5e:
d3:8f:45:43:13:3e:9d:11:e7:1d:7b:19:85:64:ca:
bd:e7:d6:d7:e3:71:2d:ae:8e:6a:6b:c0:78:18:69:
a8:9b:fc:ba:79:50:d9:68:95:82:02:07:bd:7b:58:
a0:a6:45:76:2a:49:be:f2:65:52:ce:31:67:79:90:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:16:41:D7:B9:22:0D:ED:60:E5:14:9E:40:72:8E:CE:28:9F:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8aQWQde5Ig3tYOUUnkByjs4on-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.185.0/24
194.113.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7b:9a:7e:70:7b:70:69:81:84:51:5e:60:f1:da:16:a4:ea:
20:3a:2b:33:33:78:79:9f:c1:5e:23:f3:f0:91:b0:7b:d9:69:
56:b7:07:f8:2c:ea:47:3b:b4:a9:d2:f2:f8:fd:95:6f:03:2a:
50:5f:25:9b:43:b5:6d:f4:13:b5:92:44:2c:29:73:62:b7:2b:
f0:94:9f:74:0e:30:ac:85:88:4c:d1:2c:23:60:00:bf:38:24:
90:56:f3:0f:93:2c:37:f8:ad:e1:f5:07:12:63:83:37:48:ba:
bc:e3:87:e5:87:bd:4c:2b:a0:30:ef:91:bc:ab:e9:f7:8a:0b:
54:2c:b8:6b:76:72:27:a3:e5:9f:5e:2e:e5:31:3d:d0:01:c4:
a8:29:7c:3d:ae:c2:55:68:51:49:a1:28:98:09:97:a5:3b:c9:
82:37:2f:c4:63:3a:bc:06:b7:bb:38:28:89:00:34:f6:98:0d:
50:b3:d0:15:c4:4c:02:c8:5b:b3:44:60:83:5f:f7:7d:b1:53:
f7:92:54:b4:21:a8:09:18:d7:78:ce:35:7e:01:7a:4f:01:3f:
8b:0c:bb:65:fc:02:b0:6d:35:ee:7f:5f:e0:2f:10:62:10:7c:
80:d4:b3:3e:a5:2a:bd:9d:58:24:bf:2b:a1:0a:53:ee:6f:ce:
43:1f:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:07:40 2025 by rpki-client