Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/8IUfLut7BygQV_kfUjYxZ6R1hWo.roa
File: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (raw, json)
Hash identifier: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=
Subject key identifier: F0:85:1F:2E:EB:7B:07:28:10:57:F9:1F:52:36:31:67:A4:75:85:6A
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 019425222513DF7177196AAC9D9DB779589D
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/8IUfLut7BygQV_kfUjYxZ6R1hWo.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202
IP address blocks: 193.19.196.0/24 maxlen: 24
193.19.197.0/24 maxlen: 24
194.125.246.0/24 maxlen: 24
194.125.247.0/24 maxlen: 24
195.22.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:25:13:df:71:77:19:6a:ac:9d:9d:b7:79:58:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0851f2eeb7b07281057f91f52363167a475856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:b6:fa:56:82:ab:91:f2:5d:d1:e9:13:4c:
f0:aa:16:f3:34:91:ef:2d:88:cd:99:77:c2:02:4d:
c2:97:61:7a:9c:39:d3:68:9a:48:b4:05:9d:95:b7:
6c:70:27:32:1f:a5:49:fb:4f:3b:32:b0:03:c7:7c:
c9:01:94:0a:77:3f:18:44:ce:b0:f6:48:6e:7b:5c:
36:0e:ad:b4:50:7b:8c:d1:18:36:0b:f8:ee:14:9a:
ea:d6:cb:03:10:71:03:66:f6:a9:bc:03:c6:92:41:
28:bb:06:3b:54:27:41:0d:32:f1:26:6b:71:a6:2a:
07:95:25:4e:b7:82:cc:a3:23:e1:05:74:71:98:b5:
da:78:08:47:8f:57:ac:29:5f:e1:12:00:8c:b2:c5:
41:19:95:38:24:e1:79:95:09:0f:66:1d:b8:9a:f8:
ed:58:10:a6:c6:66:24:3c:51:1e:40:01:4b:80:36:
c7:39:a2:87:12:3b:af:5d:80:ee:6e:bd:31:51:e7:
88:9f:ec:62:53:d4:fd:f1:7a:5f:7c:c6:4e:14:c8:
2b:1b:64:47:fc:ec:64:2d:7d:00:85:73:2d:94:79:
ca:b9:c6:29:4a:ab:88:f8:cd:b5:c0:ca:b1:70:53:
49:23:4e:a6:9b:99:58:57:58:af:cc:34:f9:76:df:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:85:1F:2E:EB:7B:07:28:10:57:F9:1F:52:36:31:67:A4:75:85:6A
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/8IUfLut7BygQV_kfUjYxZ6R1hWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.196.0/23
194.125.246.0/23
195.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fc:df:21:b9:f7:0b:26:37:6f:44:54:b1:7e:3d:f8:d2:52:
6b:41:a4:e1:1d:d1:02:db:1b:ba:9c:c9:59:cf:53:54:5f:77:
b3:5f:bd:21:88:6c:e0:32:40:73:20:3a:f8:f6:47:b8:9c:59:
03:7e:3b:75:2e:3e:11:74:8a:5c:3a:bb:a1:9a:cb:65:57:8a:
cd:80:f3:e3:92:21:ff:28:fb:12:31:a0:ac:8f:64:90:2e:a1:
c9:3c:56:66:ed:0b:5d:3e:d7:60:a9:32:9e:1d:59:20:51:9b:
7d:4b:0a:c6:57:c7:f7:c7:11:42:86:5b:42:d6:38:b4:c1:0b:
c1:e0:9a:57:2b:49:b8:3b:d2:db:09:0f:22:0c:8e:ec:13:4d:
4e:83:4b:cc:9f:2b:39:a8:00:62:d8:60:10:bf:95:35:11:fe:
c7:b2:35:82:22:54:e1:6c:be:3b:7d:51:98:95:47:bc:e9:e5:
86:a8:19:5c:d7:4a:30:61:82:13:16:0f:bf:ae:f0:dc:c1:ba:
7d:5e:56:df:90:5b:c3:c1:b8:45:15:b2:95:e5:b0:d3:83:5c:
97:9f:fe:25:2b:4a:96:f2:08:91:e8:59:35:d2:da:ce:1d:ff:
a7:db:b1:b2:d0:2e:8e:bf:d2:c1:19:b6:d7:5e:fc:e2:00:84:
b1:8a:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:45 2025 by rpki-client