Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8Pql3WWXWEFRERRDmVMGD4G9M-A.roa
File: 8Pql3WWXWEFRERRDmVMGD4G9M-A.roa (raw, json)
Hash identifier: Ou+GeKB9aMm7s/S9nX0yfjyzbehhUnphSDoiUeT/MCo=
Subject key identifier: F0:FA:A5:DD:65:97:58:41:51:11:14:43:99:53:06:0F:81:BD:33:E0
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D6349EC8C688BA979D81724B8D0ADA
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8Pql3WWXWEFRERRDmVMGD4G9M-A.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 146.19.26.0/24 maxlen: 24
217.119.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:34:9e:c8:c6:88:ba:97:9d:81:72:4b:8d:0a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0faa5dd65975841511114439953060f81bd33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:68:f8:95:71:91:a3:9d:a1:cb:83:08:9d:
c5:f8:7b:bf:41:85:b8:4a:b7:84:78:d6:61:18:ce:
ce:c4:7b:cd:6d:6d:0b:f2:88:df:cd:ce:8f:77:40:
8f:ba:3f:2a:e4:5c:8e:6d:3f:a0:4c:a9:23:f5:f3:
53:39:de:77:5b:27:3e:88:10:c0:c9:fc:8c:74:db:
9c:9a:8d:ce:c9:f6:92:c4:c4:36:03:75:8b:f3:41:
8a:e3:e8:bb:27:c9:6d:69:42:67:34:43:d2:e5:91:
01:32:34:92:79:ba:49:ec:03:0e:5f:e6:5d:5e:ed:
70:ab:41:9a:63:fb:f7:e3:48:0c:da:38:76:6c:87:
1d:ea:83:a5:15:10:3a:d9:5e:bc:92:77:4b:0f:bd:
ce:6a:56:1b:7e:fc:68:db:fd:9b:e9:bd:95:56:b4:
14:f0:6f:8f:c9:a0:f8:eb:9d:e1:72:bf:f5:0e:1d:
12:59:c8:a4:a0:91:89:ce:c0:81:0e:c0:82:09:98:
6e:67:83:64:de:1f:d1:f6:ad:bb:55:2b:67:48:04:
f2:09:7a:70:ab:e7:ef:42:38:3c:07:52:e0:f3:80:
3b:b2:63:08:4b:ba:1c:10:c5:e7:c7:b2:5e:8d:04:
a4:24:78:95:da:d2:6b:27:88:51:0b:a6:63:82:6c:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:A5:DD:65:97:58:41:51:11:14:43:99:53:06:0F:81:BD:33:E0
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8Pql3WWXWEFRERRDmVMGD4G9M-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.26.0/24
217.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b6:fa:b0:1f:04:b5:a9:2f:0a:e5:55:28:2a:2b:90:1c:c2:
03:5c:aa:fd:1b:02:ab:50:ea:05:36:a1:45:bf:5e:34:1b:87:
d9:23:95:90:37:8d:cd:d9:4d:03:8b:df:ae:e8:38:1e:25:86:
e8:a2:34:5b:04:65:2c:de:00:a8:54:4e:c5:5c:ed:bb:e6:11:
d2:bb:17:dc:0a:07:f5:73:ba:4a:7b:d7:7f:d0:25:d7:df:9c:
e4:96:64:53:bb:15:90:47:7e:f5:9e:f2:43:a0:90:23:a6:a1:
1d:87:28:b3:9e:34:a4:5e:0e:85:8f:96:16:b6:8d:cb:4e:49:
00:5c:2e:e2:fe:76:62:82:d2:1f:f4:be:bc:f3:2d:32:e3:1f:
83:99:10:67:62:90:05:b7:4e:27:d5:53:9e:ce:73:86:71:b3:
20:02:de:1f:98:b7:1a:5e:27:20:23:5d:e0:de:98:c0:63:ac:
67:f9:44:98:a1:e8:96:91:b5:d0:77:22:33:de:01:21:86:e7:
aa:a7:63:77:c7:7e:59:27:4a:7c:47:bb:10:a3:dd:2c:fb:bb:
52:c9:28:a4:a8:c1:f0:96:6e:47:a9:b5:b3:29:a8:39:41:d0:
b1:c1:6b:23:35:48:c4:0e:3f:67:59:a5:4d:57:39:a0:c8:7d:
4b:87:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:23 2025 by rpki-client