Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa
File: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (raw, json)
Hash identifier: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=
Subject key identifier: 81:25:BC:6D:B7:EC:27:68:D0:A8:D9:4D:F5:D6:61:10:62:45:5C:FF
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 019422FBA37BBE9114DACB5367A02CE7C6B3
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35219
IP address blocks: 185.64.64.0/22 maxlen: 24
185.185.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a3:7b:be:91:14:da:cb:53:67:a0:2c:e7:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8125bc6db7ec2768d0a8d94df5d6611062455cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:89:9d:18:b2:2e:7d:12:5c:8f:4b:9d:54:
94:ab:5a:9b:fc:d9:3c:a5:af:66:17:8e:18:9f:aa:
de:d6:93:e0:d8:ca:17:d5:4a:0b:f7:b7:fa:62:a0:
55:f5:ea:7d:a0:1a:72:e4:0b:34:83:30:9c:b8:81:
54:2b:37:20:0a:36:b3:af:09:dc:61:0a:2d:bb:3e:
28:74:5f:df:db:d0:3a:35:81:a4:5a:ce:4e:3f:7f:
8f:89:15:5b:03:e6:d1:32:54:c4:9b:89:6c:dc:89:
25:95:b8:5b:12:db:5c:b4:a3:c4:15:56:9d:53:4c:
b5:c7:02:be:73:a0:96:b8:5c:4c:c9:fb:20:75:50:
7a:ed:8b:b0:a3:78:f8:e9:2a:e5:33:6a:98:88:05:
c2:5a:b6:0c:00:9f:a5:66:9e:21:f9:a0:52:35:62:
6e:d8:9b:d1:56:d2:0c:89:03:ff:65:3a:3e:99:2c:
54:35:44:97:bc:aa:70:15:59:8b:39:d1:78:0e:bc:
eb:bd:7c:43:97:d7:d9:8d:75:20:5a:3e:57:6e:2a:
3e:83:12:01:46:92:c4:6d:4f:89:92:6f:0a:bb:23:
8b:32:c4:d6:40:87:bf:45:ce:ee:b8:be:29:64:46:
fa:43:b2:c7:9c:58:58:82:a3:04:04:5a:e8:51:17:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:BC:6D:B7:EC:27:68:D0:A8:D9:4D:F5:D6:61:10:62:45:5C:FF
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.64.0/22
185.185.228.0/24
Signature Algorithm: sha256WithRSAEncryption
97:31:65:73:6c:9b:e8:5c:ae:3b:a9:69:e0:f7:76:87:01:bb:
4f:62:e9:17:1c:7f:93:21:b3:b9:96:16:75:8c:1e:4f:e9:80:
f8:91:55:8d:ef:a0:80:f8:e9:4f:90:2e:80:47:70:97:5f:29:
59:e2:ed:60:68:b2:da:82:91:3c:1e:f0:2f:e5:53:d0:d6:64:
19:07:87:ea:f7:bf:81:2f:a6:0a:ca:5f:64:94:cb:59:4d:98:
e9:4f:49:ef:da:ec:60:17:53:f9:92:4d:4e:1c:5e:42:e1:99:
61:2c:ca:d3:2d:63:d1:67:77:ae:8d:04:cf:58:83:91:ad:36:
50:e9:24:d8:b1:bf:15:db:19:66:dc:5f:55:67:f5:a1:0e:9a:
f5:d2:df:6d:59:1c:3b:0a:a5:e4:7d:37:cf:7a:ce:cd:04:42:
ae:ff:f2:aa:62:82:c9:e6:d5:72:6a:10:32:65:10:45:44:69:
1b:ff:17:37:80:35:1d:06:cc:d2:7e:54:86:55:e9:96:34:84:
ca:f2:12:aa:f8:2d:c6:ae:2c:29:86:99:a6:27:0f:8a:93:69:
ea:b8:39:f7:f4:24:4b:50:d0:f5:c5:43:a7:cb:3a:f2:12:2f:
c7:f9:85:0c:b8:36:ca:85:b1:58:0e:96:50:42:46:8e:d8:ab:
8a:ae:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:21 2025 by rpki-client