Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8es5WUjCpzbWEQdLdvRmhiI4IP8.roa
File: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (raw, json)
Hash identifier: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=
Subject key identifier: F1:EB:39:59:48:C2:A7:36:D6:11:07:4B:76:F4:66:86:22:38:20:FF
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194282417D38D6A4C725427D507C108D4FC
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8es5WUjCpzbWEQdLdvRmhiI4IP8.roa
Signing time: Thu 02 Jan 2025 17:50:41 +0000
ROA not before: Thu 02 Jan 2025 17:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 31.186.176.0/22 maxlen: 24
92.114.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:17:d3:8d:6a:4c:72:54:27:d5:07:c1:08:d4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1eb395948c2a736d611074b76f46686223820ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:fd:95:10:5f:91:4c:98:05:cf:06:fe:a0:
50:d5:bd:54:48:e7:36:22:09:ef:87:ae:e9:47:83:
8f:bd:89:74:67:c7:f8:cc:c6:80:22:eb:de:d2:3b:
a3:97:9d:88:d0:32:d7:f5:a0:e7:ed:27:69:3a:35:
6e:ec:89:49:a0:df:87:57:bb:e7:d1:fb:2d:39:e3:
ec:5e:d1:a4:cb:75:de:1e:a7:d5:57:ca:75:2d:08:
62:b7:ae:dc:fe:fd:ff:83:d3:42:9e:62:5d:37:2a:
65:62:d7:7c:47:9a:9e:9c:f4:ca:d9:5b:da:fa:34:
19:68:4d:a3:62:a1:85:8d:aa:e8:e6:0d:22:7d:db:
b8:1f:56:ba:e4:07:74:8a:35:0f:8b:e4:48:70:86:
8a:aa:b3:60:72:b3:dc:49:4c:c8:34:83:2e:59:bf:
02:75:b5:5f:22:88:88:a7:bf:a1:b3:76:47:4e:77:
30:d0:50:c5:66:30:5b:e4:9d:95:94:4d:e4:79:f5:
aa:59:fb:63:20:cb:54:41:1a:35:a6:b8:47:9d:61:
12:57:91:69:03:62:a3:0e:17:88:d8:b4:24:9b:66:
43:3e:ea:29:96:99:02:bc:8a:e4:c7:82:5e:76:1b:
35:48:8d:84:32:09:db:ff:48:82:ce:5f:0c:e4:ef:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EB:39:59:48:C2:A7:36:D6:11:07:4B:76:F4:66:86:22:38:20:FF
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8es5WUjCpzbWEQdLdvRmhiI4IP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
92.114.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:86:66:d4:44:f0:9c:20:33:95:31:ad:c0:cd:ac:33:92:1d:
35:5e:9a:fa:37:6b:76:02:8b:03:f3:2e:3b:ee:e6:46:7a:70:
fd:1e:f7:3b:b0:85:4f:1c:33:58:18:76:b3:6b:fc:e2:c0:c5:
14:54:d4:e5:d2:e4:7a:a0:fc:c2:35:5e:41:d1:87:48:da:77:
75:da:18:06:7d:8e:78:f3:40:df:90:89:52:ed:82:82:16:8e:
ba:fc:e0:af:be:d4:ac:70:ab:2d:86:b2:3f:94:48:0e:e5:84:
a8:37:66:7b:17:9a:b5:44:65:b8:f0:c7:74:ca:c9:bf:2d:58:
e7:80:be:cf:5c:0e:f1:00:01:b5:4f:e1:f6:e9:f2:bf:04:bb:
01:e2:a0:eb:13:f8:f0:73:7a:f2:7e:13:6b:18:56:71:72:e2:
0e:63:92:79:c2:81:cd:4b:9d:6d:f2:8c:49:1b:d9:7c:c3:26:
01:8e:39:6f:5c:4d:ad:35:7f:be:a6:92:08:70:72:dc:3a:6c:
bd:d1:80:e5:0f:2a:84:40:b6:d4:13:d2:3a:db:07:be:b1:c8:
b8:42:18:2c:ff:3d:08:86:28:80:6e:af:61:ad:19:da:48:1f:
cd:24:f4:5d:81:85:5f:c0:11:6f:e0:4f:50:d9:ce:38:c0:00:
05:f2:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:46 2025 by rpki-client