Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/8M8mB_vr_dnMgJbL4JS9dvR0GzE.roa
File: 8M8mB_vr_dnMgJbL4JS9dvR0GzE.roa (raw, json)
Hash identifier: i7uT/ISGiYbhQz0DrdK0qh46OM86kjnyOMLgotkVBoM=
Subject key identifier: F0:CF:26:07:FB:EB:FD:D9:CC:80:96:CB:E0:94:BD:76:F4:74:1B:31
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0188DD03A7B7B1934DD4438E86AC3D150ABC
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/8M8mB_vr_dnMgJbL4JS9dvR0GzE.roa
Signing time: Wed 21 Jun 2023 08:13:04 +0000
ROA not before: Wed 21 Jun 2023 08:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 185.42.24.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:03:a7:b7:b1:93:4d:d4:43:8e:86:ac:3d:15:0a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jun 21 08:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0cf2607fbebfdd9cc8096cbe094bd76f4741b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:79:93:48:d9:71:da:cd:6a:fe:37:21:12:
0b:d2:ee:bd:64:04:17:e2:3d:a3:24:78:bb:84:b8:
d8:2c:38:4b:9c:6f:63:03:33:5c:8b:37:23:36:c4:
82:22:e8:c2:b1:ca:98:f2:e6:53:f3:72:fe:3d:33:
5c:00:85:9f:20:04:e5:f1:0e:f5:0b:a9:7d:25:e1:
16:37:0a:6b:ce:b9:d3:f2:73:f8:5d:12:02:8f:8a:
cd:52:3f:70:60:59:9c:fc:a1:dc:99:d3:72:14:4b:
39:92:1e:e5:1b:15:e0:7d:bf:6d:c0:6a:c8:57:56:
fc:76:88:51:23:fc:44:1c:f5:4e:aa:18:7b:41:7e:
8f:17:26:ed:5b:ab:36:3c:2d:44:48:d6:fc:df:c4:
df:b8:8e:89:a4:b9:1c:01:0e:a2:83:e1:4d:6c:11:
8a:b0:97:bc:42:d8:92:b1:fd:4e:68:04:39:a9:61:
47:13:33:c9:de:cb:de:71:6b:ff:89:1b:d0:4c:c0:
1f:0f:43:21:2e:94:61:8f:50:5b:5a:20:6c:66:17:
89:fd:54:b3:f3:c8:9e:e4:d0:fb:f2:18:5c:92:da:
7c:bc:14:84:b1:86:b9:69:24:c2:46:00:21:e1:1e:
52:13:0e:51:ab:d2:0d:8c:7d:e1:a1:c2:08:7f:25:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CF:26:07:FB:EB:FD:D9:CC:80:96:CB:E0:94:BD:76:F4:74:1B:31
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/8M8mB_vr_dnMgJbL4JS9dvR0GzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/24
185.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b3:4c:35:d6:d9:2d:86:17:56:81:30:1a:a0:c8:04:9a:47:
d6:7c:a8:72:8c:66:d6:b7:f4:f6:f3:f3:0c:5a:f4:3e:bd:12:
b8:fe:68:3f:d4:8f:c9:0a:3e:b0:61:55:b9:64:02:b7:85:ab:
22:4c:52:19:fb:d8:8c:eb:b6:94:cb:f3:04:d5:c7:20:fd:d1:
d5:4c:e3:04:ec:48:81:76:a7:f7:5b:35:b2:7c:b9:26:0f:7e:
d7:99:b6:8c:23:f3:d1:2e:ab:07:23:75:c3:9a:97:f0:c3:a6:
24:df:e7:60:24:5b:79:e7:8e:be:02:8e:92:d0:4e:75:45:5d:
a7:bd:c6:ed:72:09:92:b0:93:f9:66:49:b6:75:58:61:ae:74:
91:30:52:15:79:fa:09:d7:23:ef:65:d4:bf:92:df:ce:fc:32:
01:67:04:4e:ed:84:23:41:cc:b1:64:a0:a3:bd:a8:e6:eb:d3:
03:e6:b5:e5:27:5b:84:61:96:45:91:4b:e4:d1:85:81:47:47:
4a:c4:c5:95:10:f3:25:59:4f:29:0f:a9:d5:86:86:59:3a:bf:
ac:de:f9:a2:c2:9a:65:4c:cd:70:ca:74:b8:44:90:ec:02:ba:
9f:9f:a9:07:14:aa:a1:01:6b:f8:96:f7:c8:c3:27:ea:9c:d0:
c1:cc:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:52 2025 by rpki-client