Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/8xc5T7ury5KMF2VHztRlqOAeusg.roa
File: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (raw, json)
Hash identifier: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=
Subject key identifier: F3:17:39:4F:BB:AB:CB:92:8C:17:65:47:CE:D4:65:A8:E0:1E:BA:C8
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 019422FC32A2EF35FE940D33F3AC2030E8ED
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/8xc5T7ury5KMF2VHztRlqOAeusg.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56485
IP address blocks: 185.179.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:32:a2:ef:35:fe:94:0d:33:f3:ac:20:30:e8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f317394fbbabcb928c176547ced465a8e01ebac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:17:c7:c3:01:a5:eb:25:46:e9:29:9e:73:
45:ad:1a:dd:3c:d9:12:09:dc:9c:9b:37:34:64:01:
97:63:af:5b:2e:95:fb:a6:1a:c9:94:07:de:1c:3a:
89:c4:a0:1a:bf:46:a9:af:b4:2d:db:24:ac:54:b7:
4a:86:73:1c:3d:f0:e6:02:dc:c3:52:7f:0e:56:99:
90:67:15:5e:9d:ec:1d:9e:93:be:81:4b:55:b4:9d:
89:69:e9:73:52:b8:78:d8:c8:56:85:04:e8:64:d8:
5c:d8:20:10:be:5c:1b:85:f0:c5:15:f4:e0:1d:a3:
1d:20:6f:3e:e8:5b:a5:27:00:63:a8:0b:7d:12:a6:
e4:ee:82:f8:fb:c7:0b:e0:86:ed:5e:fb:6b:a1:77:
4a:3c:48:f6:4a:1a:9d:9b:3b:1b:11:e4:e1:c7:99:
b6:00:86:c2:76:68:cb:1c:8e:de:0a:8e:81:92:3c:
36:9b:d7:86:87:54:c0:4e:c7:cb:cf:df:71:e3:fa:
e6:c4:f6:b6:fd:0f:b6:e7:88:82:51:bf:79:b2:b3:
88:cc:a7:06:16:61:1e:62:38:21:ee:ef:bd:7d:ca:
35:7b:d1:f4:96:31:64:ca:9a:f0:4b:04:5e:4f:ff:
89:8a:78:b3:78:5e:d2:76:e2:ce:e2:8e:a1:d7:a1:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:39:4F:BB:AB:CB:92:8C:17:65:47:CE:D4:65:A8:E0:1E:BA:C8
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/8xc5T7ury5KMF2VHztRlqOAeusg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9c:73:59:42:fe:84:73:98:5e:b5:6d:10:a5:52:bf:f0:50:
1c:f2:03:52:17:7c:a9:a4:fb:92:23:84:ec:83:61:03:45:9a:
cd:6b:7c:c3:b4:56:6f:42:f4:e7:84:11:a4:d6:14:9e:b9:b7:
e8:65:62:47:86:c6:f4:0c:61:b5:e2:35:de:25:68:b7:57:7e:
7b:0a:f9:78:4a:38:ed:94:54:a9:65:bc:96:0b:cf:35:04:49:
be:12:3f:e9:04:1c:ce:ca:78:f7:3e:d1:c6:e1:b3:25:2b:e8:
e1:09:5c:2f:b5:da:48:a1:5f:b3:d1:fa:e3:b2:70:06:ac:46:
df:2c:61:e3:f8:11:bb:6a:70:10:51:93:cc:37:ba:be:f5:74:
5e:cd:5b:3b:6c:8e:b5:df:c9:01:f7:ae:e5:94:2d:07:4f:c8:
dd:2a:13:e1:69:63:e9:97:6e:61:e2:01:7d:f4:6b:de:2e:94:
54:69:7a:e0:f6:d6:b3:7d:33:05:d8:89:bf:0e:ca:39:6d:42:
c9:f6:ee:96:77:b0:41:52:cd:37:15:9c:30:21:92:84:86:eb:
3b:28:f6:34:ad:85:b7:cb:59:80:41:57:40:53:1e:1a:07:57:
7c:4e:f6:8f:48:88:19:c6:5c:fc:f8:38:71:01:61:fb:ea:c4:
13:fa:a2:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/DKi7zX+lA0z86wgMOjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MWQ0ZjQ2MzcxM2FiOWE5MjdiN2VlM2ExMDEwNTJiMTRi
YWNjMzEwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzE3Mzk0ZmJiYWJjYjkyOGMxNzY1NDdjZWQ0NjVhOGUwMWViYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IoXx8MBpeslRukpnnNFrRrdPNkS
Cdycmzc0ZAGXY69bLpX7phrJlAfeHDqJxKAav0apr7Qt2ySsVLdKhnMcPfDmAtzD
Un8OVpmQZxVenewdnpO+gUtVtJ2JaelzUrh42MhWhQToZNhc2CAQvlwbhfDFFfTg
HaMdIG8+6FulJwBjqAt9Eqbk7oL4+8cL4IbtXvtroXdKPEj2ShqdmzsbEeThx5m2
AIbCdmjLHI7eCo6Bkjw2m9eGh1TATsfLz99x4/rmxPa2/Q+254iCUb95srOIzKcG
FmEeYjgh7u+9fco1e9H0ljFkyprwSwReT/+JinizeF7SduLO4o6h16EeRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMXOU+7q8uSjBdlR87UZajgHrrIMB8GA1UdIwQY
MBaAFCgdT0Y3E6uaknt+46EBBSsUuswxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mZmZmNmMtYzQ0NC00MjdlLTg3MTYt
MmVkMmZlYTIxZTNlLzEvOHhjNVQ3dXJ5NUtNRjJWSHp0UmxxT0FldXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mZmZmNmMtYzQ0NC00MjdlLTg3MTYtMmVkMmZlYTIxZTNl
LzEvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubOyMA0G
CSqGSIb3DQEBCwUAA4IBAQBcnHNZQv6Ec5hetW0QpVK/8FAc8gNSF3yppPuSI4Ts
g2EDRZrNa3zDtFZvQvTnhBGk1hSeubfoZWJHhsb0DGG14jXeJWi3V357Cvl4Sjjt
lFSpZbyWC881BEm+Ej/pBBzOynj3PtHG4bMlK+jhCVwvtdpIoV+z0frjsnAGrEbf
LGHj+BG7anAQUZPMN7q+9XRezVs7bI6138kB967llC0HT8jdKhPhaWPpl25h4gF9
9GveLpRUaXrg9tazfTMF2Im/Dso5bULJ9u6Wd7BBUs03FZwwIZKEhus7KPY0rYW3
y1mAQVdAUx4aB1d8TvaPSIgZxlz8+DhxAWH76sQT+qJ0
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:13:02 2025 by rpki-client