Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/8n-UaJ-6v9D8OY6UI_3c913de8A.roa
File: 8n-UaJ-6v9D8OY6UI_3c913de8A.roa (raw, json)
Hash identifier: MB4zCtmIxKlKfUYzxraiz9pkglorI5SWLRQdhix65dE=
Subject key identifier: F2:7F:94:68:9F:BA:BF:D0:FC:39:8E:94:23:FD:DC:F7:5D:DD:7B:C0
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424449BEBFE225A005E235CBBBACB1319
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/8n-UaJ-6v9D8OY6UI_3c913de8A.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206505
IP address blocks: 79.110.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9b:eb:fe:22:5a:00:5e:23:5c:bb:ba:cb:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f27f94689fbabfd0fc398e9423fddcf75ddd7bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:b2:39:f0:93:2c:16:36:e4:f3:5d:52:00:
77:60:f8:fa:8a:57:fd:42:54:d6:a0:dc:54:fe:df:
53:41:f0:23:9e:2d:9a:63:e3:0f:81:b3:c3:2f:5e:
d3:6c:2a:86:04:8e:a9:89:52:a2:48:07:18:98:ed:
b5:84:57:08:a3:87:97:0e:4a:92:e8:87:72:f0:4c:
73:8f:ae:02:51:d3:99:3c:8c:23:4b:54:23:e6:11:
87:ff:81:a9:c0:a5:cc:6a:4c:be:47:13:f1:a2:23:
90:d0:4d:cb:74:b4:6f:95:27:2e:5a:8d:9b:9f:43:
5c:b1:41:cf:f3:5a:2f:63:65:42:7f:a1:52:78:9f:
c5:c8:dc:31:30:25:4d:ab:65:e9:35:9f:32:e0:ea:
16:4b:b5:96:77:a3:21:fb:f2:b2:96:dd:05:73:0d:
7e:8e:a8:dc:98:37:57:cc:bd:1c:92:c5:0f:e7:6e:
97:c1:a2:db:da:13:88:aa:a2:79:ac:21:77:01:91:
51:98:b8:b5:e2:f0:8d:c9:53:f3:e8:fe:b0:67:6c:
c4:52:0d:04:88:b0:a9:c8:aa:46:6c:88:38:1b:79:
99:a9:54:12:f2:88:a5:7b:6b:d0:d7:dd:5d:4a:70:
12:4d:91:4b:1e:29:61:8b:d4:ab:88:d5:0c:6a:1c:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:94:68:9F:BA:BF:D0:FC:39:8E:94:23:FD:DC:F7:5D:DD:7B:C0
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/8n-UaJ-6v9D8OY6UI_3c913de8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9c:58:36:46:e7:b2:9c:9f:3c:d8:f2:13:67:49:4e:dc:cd:
63:3f:aa:d7:10:7a:7e:fd:fe:23:31:4f:17:18:68:da:0a:54:
50:29:e0:b3:95:9c:37:6a:2c:ab:e4:37:ed:d0:37:71:99:2a:
f6:62:c2:3e:f7:ea:d0:e2:7f:af:8b:5c:78:d7:fc:31:05:35:
44:c4:fe:82:c2:35:87:ca:27:dc:62:b8:6f:d2:0a:79:5f:c5:
9f:04:b1:16:60:c4:0e:69:a3:2e:98:aa:8b:57:7b:aa:db:2a:
e6:9d:fb:24:2a:df:63:ed:92:4f:2d:6e:2d:c7:6d:15:df:6e:
f4:f0:1e:36:cb:7a:90:c3:1a:14:34:bf:cb:91:92:ee:bc:c1:
ad:23:87:eb:fc:69:64:a5:f1:79:8c:e4:f9:7d:e4:1d:f3:66:
f1:e9:be:08:bb:a1:3d:1c:e4:9d:a8:86:61:89:f5:6b:87:ae:
ce:b6:65:48:6e:da:a6:75:1f:08:11:1a:22:3e:54:9c:42:a5:
8b:ca:f2:4f:d9:84:8a:4a:6f:5c:72:e3:e3:f8:e1:20:ff:82:
b4:70:c4:cc:b2:f8:1e:63:b2:25:3e:cf:6f:3d:7f:fe:79:8e:
d8:55:9d:6f:3f:45:d8:df:59:19:c4:7e:af:83:bd:1a:1e:10:
53:e0:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:16:47 2025 by rpki-client