Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/8CmFhnWxaCeDeglOctNQZC1ZN84.roa
File: 8CmFhnWxaCeDeglOctNQZC1ZN84.roa (raw, json)
Hash identifier: mRPJMJZCvcTnlYvn8UFVdthp3gWoolEvhKxuWOWcGDk=
Subject key identifier: F0:29:85:86:75:B1:68:27:83:7A:09:4E:72:D3:50:64:2D:59:37:CE
Certificate issuer: /CN=508a9a08abef74dcc51004f4fae0266d620395e3
Certificate serial: 019423D73FE7D08C0494C6B5F56A7D3737EC
Authority key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/8CmFhnWxaCeDeglOctNQZC1ZN84.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211197
IP address blocks: 185.7.213.0/24 maxlen: 24
193.223.109.0/24 maxlen: 24
2a03:b680::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3f:e7:d0:8c:04:94:c6:b5:f5:6a:7d:37:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508a9a08abef74dcc51004f4fae0266d620395e3
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f029858675b16827837a094e72d350642d5937ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:9c:b5:43:b5:12:0e:74:22:1f:51:6f:84:
d6:2f:30:4e:1b:c5:7c:95:da:f0:a8:39:e2:79:64:
26:2f:ac:8b:0a:ab:b1:1b:05:b8:12:eb:fd:c2:10:
0a:e4:8e:22:21:b0:f3:d2:16:0f:f9:aa:49:fe:a0:
a0:f3:b6:0d:f6:9e:f6:00:15:81:a3:e1:e4:df:e9:
52:62:0b:e8:c6:45:6f:52:87:49:50:26:38:c0:71:
ba:05:7d:dd:2d:b2:2e:da:33:02:0b:d6:07:54:28:
36:dd:af:74:ca:a7:f2:bf:47:56:32:6c:ae:fc:f9:
4c:7c:8c:20:6e:c2:d5:66:73:de:eb:8d:16:5b:d2:
bb:b2:18:81:66:72:58:75:24:20:92:0a:4a:54:b2:
30:b3:93:2e:68:4b:4f:14:0c:d8:9c:ab:7c:c0:d6:
6d:81:f1:d9:d1:a6:4a:e1:5e:72:b8:f0:f9:45:94:
b8:42:af:f8:52:4d:e0:fb:63:68:bf:d4:fa:94:85:
62:99:b3:5f:cf:9a:a2:0c:16:9d:bd:7b:9c:16:b7:
8e:a2:66:39:54:61:0d:f9:a5:2e:52:a6:85:0f:38:
af:19:30:fa:27:67:15:9b:83:07:73:50:ae:b0:45:
4d:b0:54:c0:31:4e:b2:ce:59:8e:62:f9:54:9c:3b:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:85:86:75:B1:68:27:83:7A:09:4E:72:D3:50:64:2D:59:37:CE
X509v3 Authority Key Identifier:
keyid:50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/8CmFhnWxaCeDeglOctNQZC1ZN84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.213.0/24
193.223.109.0/24
IPv6:
2a03:b680::/29
Signature Algorithm: sha256WithRSAEncryption
91:d1:ea:b4:bd:4c:d9:db:98:e6:fa:9b:fa:c2:9b:a5:72:e0:
61:8d:cf:d0:f0:c4:e5:ab:0b:72:10:aa:40:dd:cf:9c:ba:d7:
13:b8:a1:f1:ae:ea:f3:26:e1:3b:c6:ed:bb:45:0b:2d:15:a4:
e9:ce:fb:e1:9a:85:73:2f:ac:d0:70:3b:3e:8a:27:d2:bb:eb:
bc:71:3a:ae:ec:ea:9e:bc:05:dd:97:0a:fb:dc:be:e0:9f:b9:
c9:05:d1:05:e9:25:b0:f7:32:55:5f:1f:d1:af:0b:25:88:62:
ce:31:5d:ba:4a:8e:7e:eb:10:46:6d:d9:95:ea:26:32:33:9e:
87:66:c4:a9:b8:6c:17:86:62:29:c4:a5:70:05:2e:95:fb:c2:
03:8d:99:aa:da:d7:3d:4d:b3:d0:e0:0f:81:ad:57:75:b4:e9:
2c:82:3a:7b:ea:23:96:0d:5d:42:e1:30:0a:da:33:27:58:fc:
3e:eb:78:f4:38:aa:62:bd:11:d4:b0:6a:a1:f9:3e:f9:8a:85:
0e:a5:46:a2:65:49:ad:af:6e:e6:40:6c:4b:c5:c9:7f:6c:cc:
d5:ec:75:81:45:9b:a1:c4:3d:9a:ad:eb:58:e7:5c:1d:71:04:
60:22:d4:04:68:d6:f3:78:57:47:b0:eb:e2:5a:07:d0:d5:35:
f9:9a:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:59:51 2025 by rpki-client