Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/8eOXfqAkJqXP3wXDUaIxraOki3I.roa
File: 8eOXfqAkJqXP3wXDUaIxraOki3I.roa (raw, json)
Hash identifier: R7bxKwNtqC/oTBwL83XqaIAv5I/52rZnoW3WSovbBso=
Subject key identifier: F1:E3:97:7E:A0:24:26:A5:CF:DF:05:C3:51:A2:31:AD:A3:A4:8B:72
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0195D85787530E39A560AFD1AE14D8C6AC6E
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/8eOXfqAkJqXP3wXDUaIxraOki3I.roa
Signing time: Thu 27 Mar 2025 16:02:49 +0000
ROA not before: Thu 27 Mar 2025 16:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212983
IP address blocks: 94.131.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:57:87:53:0e:39:a5:60:af:d1:ae:14:d8:c6:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Mar 27 16:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e3977ea02426a5cfdf05c351a231ada3a48b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:90:a3:d9:1b:53:0e:24:d4:44:62:a1:a0:
bb:e9:16:7e:b2:91:4a:11:03:50:47:61:6e:99:5a:
0f:cb:34:29:74:85:89:26:38:de:47:06:0d:a2:65:
2d:48:eb:4d:3e:bb:2e:2d:ce:38:5e:75:55:2c:bd:
09:69:26:ca:c3:9a:64:e0:c5:2b:57:5d:04:37:e3:
ea:21:98:7a:e3:90:73:ce:66:97:ba:63:8d:52:ee:
81:13:8e:ea:a2:ab:31:cc:41:bb:ea:f9:97:3b:d5:
48:e6:6d:81:37:9d:79:ea:6f:81:32:8c:31:29:14:
f3:04:ac:b2:5b:cd:1d:ac:2d:55:ca:a8:b8:35:8f:
63:71:42:f6:7f:ae:76:07:4c:ff:24:34:25:44:5b:
fa:32:60:7a:1e:df:9e:df:45:d2:2f:b7:6d:f2:3e:
21:c7:da:ab:87:84:d8:26:4b:27:48:64:f3:99:de:
77:d1:16:89:4b:7a:92:f2:eb:29:c1:ec:48:35:d0:
89:9e:f0:64:f7:3f:02:f9:f7:96:6f:62:fb:13:93:
d1:01:79:b8:16:d7:b7:76:26:a7:fa:6c:29:d4:7f:
ec:0b:ec:af:a9:bb:7a:a5:9e:f9:41:1c:44:c4:df:
13:e0:a0:2d:ec:a5:c1:63:68:a5:cb:aa:d2:03:a9:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:97:7E:A0:24:26:A5:CF:DF:05:C3:51:A2:31:AD:A3:A4:8B:72
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/8eOXfqAkJqXP3wXDUaIxraOki3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.194.0/24
Signature Algorithm: sha256WithRSAEncryption
39:22:c6:2f:84:24:e2:92:5f:cd:e2:90:93:7d:4e:48:ce:18:
6e:b0:95:67:8a:33:ed:e1:4f:ce:b8:79:ee:67:10:9a:a3:d6:
fb:b6:b8:3d:8d:b6:1e:48:f1:d4:98:b3:1b:17:e9:e6:41:70:
f2:ab:29:02:73:1f:ba:3c:35:a6:04:f0:c4:1d:0e:1a:83:6f:
68:83:90:34:98:93:d6:66:a8:85:14:a5:92:ac:81:cb:73:81:
ee:9d:0b:68:b6:08:f1:53:b7:48:c4:d2:44:ef:80:1e:34:a2:
0d:99:16:9b:be:64:15:3f:1f:e5:90:cb:f0:6f:7b:9a:e5:d9:
19:3d:0f:87:07:9a:0f:86:a8:d6:8f:9a:43:1d:0b:84:f1:30:
d0:68:0a:fb:f9:5a:d9:d3:d6:45:18:02:db:3a:2f:45:db:57:
85:10:af:eb:f2:7a:75:9a:ad:6c:fc:d1:87:e3:5f:75:d1:ac:
8a:3f:d5:4e:5d:1b:74:a8:bd:b7:ef:86:15:ba:b9:ba:84:5e:
c6:01:b6:28:a6:9f:fc:20:c5:88:91:1d:f9:7f:ee:c0:bf:00:
29:41:37:05:a4:c9:30:54:f5:a7:ab:ec:3a:df:8e:3c:79:e4:
be:b6:d0:e5:dc:41:3c:8d:5a:56:7e:2a:31:80:2e:08:62:0f:
b7:a1:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:22 2025 by rpki-client