Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/D3l1UPqW-Q-FC8YkZXRA5kRtwF4.roa
File: D3l1UPqW-Q-FC8YkZXRA5kRtwF4.roa (raw, json)
Hash identifier: eLuFUBHjY1UWAH5SMHqnV+9oZNU3xTLuWRvDzlbwDo0=
Subject key identifier: 0F:79:75:50:FA:96:F9:0F:85:0B:C6:24:65:74:40:E6:44:6D:C0:5E
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0193D49656126B947CAFF62804BED73706F3
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/D3l1UPqW-Q-FC8YkZXRA5kRtwF4.roa
Signing time: Tue 17 Dec 2024 12:27:22 +0000
ROA not before: Tue 17 Dec 2024 12:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 86.38.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:96:56:12:6b:94:7c:af:f6:28:04:be:d7:37:06:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Dec 17 12:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f797550fa96f90f850bc624657440e6446dc05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:0c:22:3b:57:52:56:bd:43:8c:f2:b5:da:
14:95:af:50:7e:d2:c7:24:19:b7:ff:a4:ee:03:8b:
cb:9f:b3:44:3d:cd:2a:d0:39:83:f7:72:68:44:91:
4d:42:23:4d:1c:f6:b1:24:89:e7:e8:74:36:4b:22:
42:04:8f:a5:25:a8:df:f3:42:4b:85:b2:61:e0:e5:
eb:f6:9b:09:e7:24:1a:b1:93:36:af:1e:5d:19:7d:
eb:f7:21:14:79:a8:7a:da:4f:07:8a:20:14:50:4c:
96:12:97:f1:5b:91:87:8b:5a:c3:e0:f0:1e:5f:1d:
60:ea:5d:c4:42:9b:71:04:80:57:13:4b:20:93:3e:
05:57:80:53:47:ec:b9:ed:b6:ac:23:f6:cb:b1:52:
af:33:4e:25:58:f4:16:ea:91:01:95:27:37:44:99:
3b:78:74:23:06:55:a4:be:35:52:d8:ca:8c:f8:7d:
31:7e:4b:46:00:22:52:3f:a0:78:07:72:f8:56:0d:
d3:8a:7d:05:73:51:86:cf:04:21:b4:fc:2c:10:8d:
e8:25:fc:7f:0c:84:4b:63:08:3a:b3:c8:e4:65:79:
8d:9b:c2:c7:84:fd:50:72:05:98:cc:de:47:f3:ee:
de:7c:e5:1a:43:53:cd:82:bf:38:a6:7b:2c:3b:ce:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:75:50:FA:96:F9:0F:85:0B:C6:24:65:74:40:E6:44:6D:C0:5E
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/D3l1UPqW-Q-FC8YkZXRA5kRtwF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.164.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1e:7b:92:da:67:44:26:9e:48:f7:db:f8:2d:50:75:06:66:
d0:10:8b:b8:2a:2b:80:49:81:27:ab:59:9f:d0:6a:e0:b1:fe:
b7:79:1e:8c:6a:77:eb:6b:d2:f7:c4:12:65:3e:1a:05:96:db:
f9:90:13:e7:1e:60:ab:53:2b:30:e5:59:c9:2b:3f:33:d5:49:
fc:1d:77:bb:50:72:7b:8a:41:37:67:e3:82:6f:a3:e6:86:90:
64:b0:78:2a:7c:7c:03:53:5e:4e:ec:ba:cb:a7:40:f2:eb:1f:
f1:bb:c5:ea:e5:92:e4:89:3c:16:1c:cb:7e:7c:48:ad:fa:bb:
49:cd:ed:cb:12:fa:32:1c:60:26:e0:4b:70:0a:cc:45:0b:8f:
59:2c:e8:c3:ab:6d:c5:ff:0f:80:81:0a:06:b8:51:a1:90:48:
28:15:08:3e:52:72:85:9f:a4:ee:67:2a:cb:82:0b:86:40:d6:
9e:25:cb:61:8f:5a:69:8b:8a:a1:50:30:bf:e2:2e:1c:55:eb:
32:fc:b3:1d:76:a7:56:49:e7:61:f4:21:ad:6b:db:47:5f:02:
d4:34:1b:e3:91:3a:15:a4:d0:3a:c5:b2:73:b2:62:da:41:dd:
51:8e:ca:f3:b0:1f:dd:f2:86:37:f3:32:e9:8f:77:93:83:25:
ce:5b:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:43 2025 by rpki-client