Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bca-8089-4b71-bf5f-41e5583e3974/1/a8poGwWbxRwaoF18g5jAb-drKWY.roa
File: a8poGwWbxRwaoF18g5jAb-drKWY.roa (raw, json)
Hash identifier: ovwRWb6F591O7LPkzkWs0SzU63BaYbwVrK4MPlW+fiQ=
Subject key identifier: 6B:CA:68:1B:05:9B:C5:1C:1A:A0:5D:7C:83:98:C0:6F:E7:6B:29:66
Certificate issuer: /CN=8763cce8a03b1609835c0d45b101779250a4304d
Certificate serial: 018572CCD3E5EDFDF00B56AA3371B647A6A5
Authority key identifier: 87:63:CC:E8:A0:3B:16:09:83:5C:0D:45:B1:01:77:92:50:A4:30:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2PM6KA7FgmDXA1FsQF3klCkME0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bca-8089-4b71-bf5f-41e5583e3974/1/a8poGwWbxRwaoF18g5jAb-drKWY.roa
Signing time: Mon 02 Jan 2023 14:05:04 +0000
ROA not before: Mon 02 Jan 2023 14:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20832
IP address blocks: 185.109.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:d3:e5:ed:fd:f0:0b:56:aa:33:71:b6:47:a6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8763cce8a03b1609835c0d45b101779250a4304d
Validity
Not Before: Jan 2 14:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bca681b059bc51c1aa05d7c8398c06fe76b2966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:c9:c7:a1:89:1a:ce:9b:fc:07:5e:fa:c6:
46:c1:5c:4e:68:85:70:db:5f:09:1d:b1:17:76:9b:
89:b2:76:e4:8f:11:c6:b2:9f:ab:31:40:cb:34:ac:
80:78:00:35:8d:4f:32:8a:f6:44:e9:4b:21:3b:1f:
4b:91:22:b8:7c:5a:5b:e0:b8:0f:16:71:b6:9f:af:
30:70:a6:52:5d:fa:bd:e3:26:38:1c:5c:bc:dd:4c:
5d:2b:a7:6b:dd:f5:46:04:fc:29:2c:49:2e:11:f7:
85:f8:f1:76:68:b9:33:8b:ad:b9:2d:83:50:ce:1d:
51:12:5d:af:f1:8f:61:9f:4b:7b:b0:58:b6:83:4b:
4a:9e:9f:f2:54:52:72:2f:80:74:e6:4e:0e:ac:8e:
4b:75:55:b1:c5:90:ff:e1:96:5b:27:da:a0:b0:53:
96:f1:a1:a8:39:83:5b:1c:66:58:38:bc:97:3c:30:
44:3a:ea:f6:05:ff:b2:3d:bc:2e:59:f3:33:02:7c:
11:2b:c2:8a:24:48:43:c7:13:f1:d4:4c:b3:a1:f4:
0b:ea:50:bd:b2:0e:36:66:0b:ec:ad:e8:49:32:49:
7f:f9:7a:5c:06:95:76:c4:29:bb:e6:bc:5f:44:2e:
2c:d2:cb:cd:67:55:97:5b:75:fc:f2:c2:67:be:d5:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CA:68:1B:05:9B:C5:1C:1A:A0:5D:7C:83:98:C0:6F:E7:6B:29:66
X509v3 Authority Key Identifier:
keyid:87:63:CC:E8:A0:3B:16:09:83:5C:0D:45:B1:01:77:92:50:A4:30:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2PM6KA7FgmDXA1FsQF3klCkME0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bca-8089-4b71-bf5f-41e5583e3974/1/a8poGwWbxRwaoF18g5jAb-drKWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bca-8089-4b71-bf5f-41e5583e3974/1/h2PM6KA7FgmDXA1FsQF3klCkME0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.104.0/22
Signature Algorithm: sha256WithRSAEncryption
87:9b:bb:49:4d:e1:2c:71:fb:b1:c5:0c:47:a7:45:92:53:67:
b1:14:91:30:79:fe:d2:49:de:fb:09:9f:47:4c:0d:bb:2b:30:
db:23:a7:d3:91:b9:f5:43:47:3e:8a:9a:36:2b:95:c0:47:23:
77:7e:47:62:3a:79:78:5f:62:d9:e9:94:fb:2e:4b:31:d8:d0:
dc:7b:e3:aa:df:b0:04:2e:ce:36:2b:eb:40:60:cb:8e:63:49:
3e:f1:85:0e:d0:a0:a8:29:fa:58:d5:62:04:4d:04:d9:7b:40:
7e:fc:5c:4b:e3:eb:ae:e7:a7:5a:e7:19:8e:2c:fc:32:2e:1d:
aa:14:14:7e:e4:98:ee:1c:3e:4b:a3:ee:ce:6a:8e:e1:7e:de:
e5:ff:e8:0d:a3:64:8c:1f:b6:4f:f5:c6:26:ad:94:f4:b9:8f:
74:2e:9f:87:a3:06:3f:05:70:bf:0d:eb:d0:1e:e9:e6:ae:9e:
75:70:a0:d7:42:58:e7:1a:4f:ca:76:9a:2f:74:00:54:63:7e:
8d:c1:cc:c8:53:ab:d7:db:80:80:d1:47:52:e5:bb:52:25:d7:
dc:12:af:44:ee:8d:15:c7:ac:d8:92:78:7f:cb:2d:d7:da:84:
ef:ca:2b:18:69:98:62:e7:3f:8d:5a:52:05:28:2b:d5:44:8b:
fa:8b:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:30 2025 by rpki-client