Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/8en3JrS9o4QRtuuuwzZdTyG5Vh0.roa
File: 8en3JrS9o4QRtuuuwzZdTyG5Vh0.roa (raw, json)
Hash identifier: UCP/0ZQutL9d2SrTL9jG3hX65oul+/tjNqqWKX/P8ok=
Subject key identifier: F1:E9:F7:26:B4:BD:A3:84:11:B6:EB:AE:C3:36:5D:4F:21:B9:56:1D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424454E05D8C246307E629EDDB305B332
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/8en3JrS9o4QRtuuuwzZdTyG5Vh0.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 62.244.237.0/24 maxlen: 24
195.87.92.0/24 maxlen: 24
212.133.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4e:05:d8:c2:46:30:7e:62:9e:dd:b3:05:b3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e9f726b4bda38411b6ebaec3365d4f21b9561d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:8f:73:34:b1:bd:9d:ba:91:23:5a:ea:17:
06:ad:74:08:a5:c3:64:15:d1:cd:3b:0a:28:58:d0:
0f:08:e4:a8:2e:1a:e9:0f:8a:a4:80:db:59:46:8f:
ed:ff:82:b2:30:31:66:9f:b6:ca:94:52:b1:e1:c2:
f6:1b:ad:17:6a:73:6d:b2:ea:a9:d1:ad:09:22:33:
fc:c7:a7:7c:0c:7a:26:11:2a:f8:ab:3b:45:ad:da:
9e:a9:ff:bb:7c:cf:f4:f3:12:f1:f8:0c:03:6f:62:
9a:5d:2c:c2:6b:68:90:53:62:5d:af:81:12:12:8d:
02:44:ac:06:19:f1:f2:89:0b:f9:7b:32:bc:8d:f8:
68:b0:49:08:81:6e:43:03:19:9b:1c:70:d3:1d:25:
f9:e8:15:51:52:15:8c:69:a7:bb:59:36:87:3f:7c:
43:67:3e:9e:a3:bd:9f:16:bd:33:5a:5e:fe:d4:fc:
ba:82:5c:32:12:66:9b:86:ee:c5:0a:e2:fe:2b:ce:
5f:ae:d0:82:88:20:95:65:b7:0a:85:a8:00:69:43:
8e:38:8a:16:7b:4f:75:12:4e:cc:0b:23:7e:34:68:
e9:68:02:73:c9:1b:c6:52:eb:ca:bf:34:7e:9c:9e:
64:23:b6:4d:c9:96:dd:4a:b1:d9:7e:07:f4:38:52:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E9:F7:26:B4:BD:A3:84:11:B6:EB:AE:C3:36:5D:4F:21:B9:56:1D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/8en3JrS9o4QRtuuuwzZdTyG5Vh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.237.0/24
195.87.92.0/24
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a0:00:90:1d:20:84:7c:cb:52:b1:13:37:9e:63:f3:df:e6:
2c:7c:ce:0f:74:0e:96:c1:8f:9c:16:cf:02:f8:0c:ca:6b:b5:
63:8c:fe:fa:69:d5:a0:51:35:d2:99:08:a0:d7:b0:13:6d:5d:
fa:e4:29:46:0b:fe:16:45:d5:d1:0e:8b:49:19:a6:bb:72:d5:
f6:e9:d3:67:4b:d9:71:10:aa:7a:90:cb:b9:e6:5a:b4:18:79:
b4:6e:32:2d:fc:2f:c4:ff:41:2a:ae:09:b4:cb:6f:70:2f:28:
a4:ff:ff:af:11:f2:04:1d:16:cd:78:47:20:24:c8:d1:36:2b:
42:93:f3:1f:04:78:0e:0a:38:28:75:68:f1:2a:d8:33:95:96:
d4:9b:b4:74:11:3e:e8:3d:26:02:13:2d:6c:da:dd:4b:52:fa:
f2:7e:ff:b6:f4:ec:aa:5c:53:69:6c:71:5e:74:28:e0:b2:ce:
01:cc:65:3e:a2:c5:1d:32:49:3a:27:4f:87:b2:99:c5:d6:39:
08:15:0b:8c:ec:2e:68:1d:f8:d8:50:e8:d5:94:9c:04:e3:0b:
50:9a:dc:9e:52:5c:99:fa:21:4c:6d:d6:d7:e5:c5:bb:f2:89:
e8:df:73:be:ab:83:af:3d:04:29:28:64:5c:ad:1d:6f:46:de:
49:71:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:00:35 2025 by rpki-client