Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa
File: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (raw, json)
Hash identifier: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=
Subject key identifier: F1:65:10:AD:DC:CA:B0:46:54:37:36:7D:93:71:3D:6A:37:E4:77:9B
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 0194222015AEA365C5F3D887A30C90838CBF
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26506
IP address blocks: 86.51.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:15:ae:a3:65:c5:f3:d8:87:a3:0c:90:83:8c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f16510addccab0465437367d93713d6a37e4779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:48:ef:d8:0a:2e:3b:58:19:db:3f:ed:a7:
80:30:e6:a1:fe:48:26:23:68:b6:b2:fd:50:e1:2e:
8b:30:10:ce:d4:5d:a9:03:08:92:3c:71:53:07:40:
d6:2d:17:97:4a:c1:df:a5:27:cc:73:f2:a5:e4:3a:
7a:f7:25:91:c8:b9:4a:1b:66:75:82:30:3e:28:08:
12:b7:9c:54:67:1a:80:14:22:d1:4a:77:de:a3:b5:
f6:00:51:9f:76:7d:0a:97:1a:a2:9b:06:af:84:69:
d5:4f:a4:66:9b:9f:db:06:10:f9:30:48:6e:23:d1:
b1:4c:05:49:50:00:85:f5:82:7e:83:0f:f6:9d:25:
94:6c:bb:95:6d:bf:38:b7:63:28:31:b5:9f:2a:9a:
22:ec:06:dc:33:f6:67:d0:f4:91:ca:18:24:6b:16:
63:70:c1:c0:fa:b8:64:64:ec:2c:21:91:dc:67:18:
26:ea:ae:db:39:3a:d2:0b:f7:38:06:a1:d2:9a:af:
a7:da:c3:6e:32:e6:e2:1c:db:aa:b5:58:12:9d:ab:
7a:9d:07:8a:ee:f6:42:40:96:72:77:a3:2d:60:b2:
83:84:be:c0:c8:e7:7d:14:dc:31:6e:af:0f:02:69:
0a:92:ab:b0:c0:9e:74:40:31:c5:ba:f2:86:c0:2a:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:10:AD:DC:CA:B0:46:54:37:36:7D:93:71:3D:6A:37:E4:77:9B
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.51.91.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b2:4f:6e:10:15:ef:58:17:ff:c8:8d:9a:a3:70:1a:19:38:
9b:c4:16:4f:df:74:de:20:da:b1:7a:c0:60:71:bf:d8:ff:1e:
12:70:4c:ec:78:00:8a:0d:4f:36:05:1f:0d:00:25:0e:35:8a:
b9:60:da:98:99:32:87:c0:09:b3:63:77:64:2c:46:33:56:b6:
7e:e9:bd:2a:96:f5:d6:2d:ba:f5:a7:34:c0:4d:65:b9:77:8d:
a5:78:48:7e:ab:ea:b7:2c:da:8b:ff:35:1c:c4:06:7a:a7:4d:
a1:4c:f5:ae:49:ff:3f:98:ab:75:b1:d0:28:34:23:4c:69:6e:
da:43:05:5a:fc:1e:56:60:a2:24:2b:58:60:7d:c1:fd:5a:5b:
3e:3d:80:04:a0:ce:e2:9e:41:55:6a:96:85:bb:a3:f0:03:46:
68:58:01:1c:dd:b1:8e:82:5c:17:85:ca:13:27:0a:58:f2:4b:
0b:95:61:ad:5c:f1:20:74:8b:45:2c:66:6c:ef:f9:16:62:c2:
39:20:37:46:f5:e2:ee:38:18:c8:20:73:92:e7:95:3c:dc:41:
ab:2c:b8:a5:76:3a:ff:a1:f2:f6:4b:f6:1c:1a:5e:1d:45:54:
56:9b:d7:67:ce:73:af:74:58:57:e6:39:e9:d4:52:b2:c1:25:
02:54:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:39 2025 by rpki-client