Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/8whQoCNJkcO8xIN4te953BPSKIE.roa
File: 8whQoCNJkcO8xIN4te953BPSKIE.roa (raw, json)
Hash identifier: Hi+Lg2/SC23FTXEW5HEq9SyVqw0M6I1sge9enc2fYd4=
Subject key identifier: F3:08:50:A0:23:49:91:C3:BC:C4:83:78:B5:EF:79:DC:13:D2:28:81
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 019425FCA4E4B8ADF4FF9BE4737DD36456C8
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/8whQoCNJkcO8xIN4te953BPSKIE.roa
Signing time: Thu 02 Jan 2025 07:48:21 +0000
ROA not before: Thu 02 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 185.43.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a4:e4:b8:ad:f4:ff:9b:e4:73:7d:d3:64:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Jan 2 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30850a0234991c3bcc48378b5ef79dc13d22881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:9b:4e:76:e1:ef:ac:28:96:28:6c:79:9b:
bf:3f:a5:86:a4:74:b6:0f:25:f4:77:b1:f1:0f:59:
fa:47:69:62:93:3e:87:cb:08:a9:54:8a:ed:a2:f8:
11:61:8d:ba:fa:2f:44:68:fe:1a:58:3e:39:87:d3:
b6:2f:0d:73:18:69:14:d1:8c:4e:f5:af:a1:ae:8c:
28:0e:f4:78:4f:e9:66:6c:ad:7e:87:6f:61:eb:0f:
44:73:85:1e:c3:ed:f2:39:11:c3:8f:3b:d4:48:0e:
72:0b:2d:0b:31:e7:5f:f8:86:d8:65:3a:35:ed:61:
e8:e7:65:3b:0b:7e:7a:7d:4d:c5:31:44:62:27:00:
6b:eb:c7:28:56:dd:21:bf:dc:43:a3:4b:19:22:b5:
cc:44:0a:76:31:f6:2b:e5:79:5c:4a:9b:0c:d1:d7:
a7:1a:ff:d7:84:c8:6e:5d:f2:0e:a6:24:30:39:be:
69:25:2b:4a:da:bd:7c:61:b7:3c:ec:5a:9a:43:87:
2d:38:64:61:b3:7c:b9:e1:66:e3:cf:e7:b2:d5:62:
06:68:f0:78:95:5e:ad:72:b7:7f:7f:53:d8:3e:7e:
e3:6d:06:e4:53:35:51:d5:13:7b:36:58:bc:12:c2:
9c:fe:43:b4:0e:ca:34:b5:1b:ef:79:19:46:bc:a1:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:50:A0:23:49:91:C3:BC:C4:83:78:B5:EF:79:DC:13:D2:28:81
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/8whQoCNJkcO8xIN4te953BPSKIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:52:a6:9d:d9:69:93:b7:01:08:00:af:47:64:8a:3a:8d:c5:
d3:56:28:11:e3:8a:78:34:0a:65:64:44:6d:47:34:7f:7b:6f:
63:e1:c7:f5:fc:43:47:2b:ad:85:f5:24:f7:2a:ae:29:77:af:
2a:5f:8a:c5:db:4c:ad:41:af:ed:1e:37:80:6c:ad:60:e6:21:
70:ac:30:f3:bd:31:ba:72:34:31:68:63:38:62:30:44:6b:57:
bb:38:2f:4d:66:a0:b7:2c:3f:da:e6:bb:ef:f2:c2:00:82:e6:
2b:a3:5a:32:fa:79:b5:af:17:b7:3c:0a:ff:17:81:a8:c0:2b:
c0:a0:e2:30:74:7b:c9:7b:c7:cb:67:f5:bf:ed:1d:b1:1e:6e:
f2:63:1f:02:7b:55:31:a5:b5:b9:10:6c:22:d9:44:34:63:d0:
1d:11:3b:99:d4:2d:b0:4b:ec:2b:c3:d0:8d:45:f1:8b:a7:67:
05:20:32:ba:70:d8:04:37:ee:97:b3:91:bf:3b:f5:2c:32:58:
69:b7:b1:22:79:34:25:fe:2c:dc:5f:f3:1b:9a:99:e3:25:88:
69:81:9b:a2:66:8c:c0:08:a0:a1:6b:d9:8b:f4:73:c0:62:e5:
d7:19:e0:b6:83:13:9f:b5:05:b4:1e:69:87:0e:1f:4b:00:23:
25:19:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:52 2025 by rpki-client