Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8WrxG6Qr7DokeXR2Ad7dsuWildQ.roa
File: 8WrxG6Qr7DokeXR2Ad7dsuWildQ.roa (raw, json)
Hash identifier: flsipORYz7XYQE5sJ+63wJqgDVyJ3lE9TZYW8LjAn/Q=
Subject key identifier: F1:6A:F1:1B:A4:2B:EC:3A:24:79:74:76:01:DE:DD:B2:E5:A2:95:D4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C0F57A7E8EC8A829BD495C45C8FAB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8WrxG6Qr7DokeXR2Ad7dsuWildQ.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 81.180.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0f:57:a7:e8:ec:8a:82:9b:d4:95:c4:5c:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f16af11ba42bec3a2479747601deddb2e5a295d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:b8:21:99:62:91:d5:25:bb:22:4e:ee:53:
56:9f:75:34:f6:4c:a5:91:d3:2c:3d:13:07:4a:dd:
d7:8c:46:86:fc:ff:2c:17:68:44:00:95:73:d5:6b:
8d:c9:df:76:5f:42:3d:8a:17:34:59:48:93:b0:ae:
86:74:b5:54:c1:1c:c7:5a:e1:ee:20:cd:01:d0:28:
39:dd:a7:98:48:7c:1d:97:17:1c:80:3c:a2:d8:e8:
1c:3c:d9:e8:7b:c5:66:52:e8:ab:fc:6f:2c:68:f1:
bf:6b:6a:7d:af:a0:51:a4:db:ad:df:ee:ec:72:fd:
b1:a4:dd:1d:59:c7:6f:dc:e1:f2:55:e8:98:11:c0:
c1:f5:4a:4f:d7:4a:44:a3:63:b9:57:1b:f1:0b:21:
f4:5b:2f:20:c4:4b:fc:c3:09:04:30:fd:2e:df:45:
72:86:da:28:f6:ee:c8:d0:76:13:60:02:f2:62:bc:
85:a4:cb:21:fb:95:4b:6e:47:bd:c2:49:82:17:c0:
7f:80:88:b8:a9:b1:4c:32:1b:51:62:43:cf:b3:c3:
03:7b:77:e1:ed:fa:4e:e8:03:f9:41:e7:e7:1a:5a:
49:99:fa:18:f8:3f:a4:83:1f:4e:85:21:41:43:76:
40:0e:c1:1f:b5:b4:e3:cd:94:37:eb:f6:f3:de:75:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6A:F1:1B:A4:2B:EC:3A:24:79:74:76:01:DE:DD:B2:E5:A2:95:D4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8WrxG6Qr7DokeXR2Ad7dsuWildQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.72.0/22
Signature Algorithm: sha256WithRSAEncryption
75:f3:be:87:3d:6c:9e:92:4c:f7:98:91:6f:f2:14:a8:85:a2:
ac:86:b4:7c:fa:f3:4a:2c:e4:8a:6d:64:eb:48:0b:ac:c6:27:
4c:3e:a8:90:58:30:d9:2a:54:43:d6:be:a6:91:d0:6c:11:43:
b8:f4:b1:31:58:ce:62:c5:4c:d8:08:bd:ee:65:c8:e4:c2:8c:
e0:ce:47:40:8c:85:36:6d:73:8f:9c:ac:2b:99:7c:d4:19:4a:
9f:4b:43:33:d5:aa:72:20:86:3a:8e:41:ac:c3:20:cc:7a:83:
a2:9a:37:51:e7:f5:a2:93:13:36:c3:cc:97:f2:38:7a:7c:76:
45:e5:48:82:83:99:5c:14:ca:34:50:c5:29:5b:ef:e7:1f:04:
37:de:d0:38:d7:be:3b:bb:c3:5c:e0:2a:70:d6:bd:cc:68:75:
a8:86:29:aa:77:99:c9:d8:e8:00:fc:85:8e:79:1e:ee:7a:0b:
1e:b8:4c:4a:d9:f5:b3:dd:84:4d:8f:31:8a:87:e4:8a:d9:ba:
61:a2:2a:6f:4b:dc:cf:ae:7e:45:d3:3a:b6:4f:be:6c:36:1a:
51:f0:1d:7b:e5:6e:10:00:a3:f1:8a:a0:c8:14:9f:07:85:a6:
4f:e8:e2:66:94:0b:e3:3f:5d:b8:e2:a2:13:eb:55:4b:9c:1a:
75:90:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:20 2025 by rpki-client