Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa
File: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (raw, json)
Hash identifier: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=
Subject key identifier: F1:8A:F4:D9:55:CB:32:66:1B:B0:34:01:97:36:D4:32:35:3E:FF:86
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 019426D9E9391EEC3B33A7D4CB3A33004F19
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34959
IP address blocks: 45.139.24.0/22 maxlen: 22
194.55.234.0/23 maxlen: 23
194.55.244.0/23 maxlen: 23
2a0f:1140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e9:39:1e:ec:3b:33:a7:d4:cb:3a:33:00:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f18af4d955cb32661bb034019736d432353eff86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:20:e5:9a:ad:c9:49:d8:af:ac:b5:4a:eb:
d7:5f:7e:e0:6b:86:0c:41:a1:b6:07:a9:4a:36:97:
20:6e:df:89:d4:8a:0c:47:e6:73:9c:7e:c1:4f:78:
ad:62:9b:e9:a2:2c:03:7c:1a:c9:3a:62:24:60:d5:
55:dd:35:8c:94:90:b0:28:db:e7:88:fe:c1:15:f5:
4d:6c:16:f0:c3:a0:50:75:83:0f:27:ac:ff:6f:8f:
6e:9a:f7:c8:7c:3e:4f:36:55:9c:b8:c6:bc:7e:ac:
2e:7f:19:3d:49:93:c3:b6:13:8b:b6:d0:f4:e5:68:
b8:98:72:1f:d3:6e:66:b9:d1:b2:a4:64:20:fe:11:
79:99:19:0b:51:61:f1:04:da:a3:f4:f8:ec:3e:f8:
80:3f:87:5f:a8:56:cd:43:bd:ac:e6:2c:46:8b:81:
3c:91:cf:58:57:c4:ff:c3:c1:7e:12:f7:3c:99:b3:
a7:7c:91:f5:fe:34:bc:fd:41:61:4d:fe:19:c5:70:
0f:4c:ba:87:4b:9f:90:a1:bd:09:6f:9b:1b:74:23:
06:17:22:a5:7e:2d:75:20:ba:c7:8d:c9:a6:70:7e:
04:70:da:17:14:27:f8:e6:ff:c9:74:79:c3:8b:f8:
35:4d:c9:1f:1d:38:ae:16:18:f4:32:a3:eb:c8:b2:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:F4:D9:55:CB:32:66:1B:B0:34:01:97:36:D4:32:35:3E:FF:86
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.24.0/22
194.55.234.0/23
194.55.244.0/23
IPv6:
2a0f:1140::/32
Signature Algorithm: sha256WithRSAEncryption
26:98:33:af:fd:c9:7a:0b:f6:fd:4d:6b:68:e8:88:c2:9c:84:
0f:fa:f8:8d:7f:e9:c9:f2:7e:7c:17:09:1b:ba:22:ba:f5:f2:
47:89:38:a7:ee:df:8c:59:23:83:13:86:a3:b6:21:88:91:c6:
2a:a9:f0:1c:df:16:44:29:07:4a:dd:8c:b9:a5:51:a9:19:2d:
d4:c1:35:c5:aa:89:76:9e:89:be:e8:10:80:06:69:11:4f:28:
dd:42:f1:80:96:7b:c3:7f:58:9f:3d:59:b5:ad:1f:70:8d:61:
c8:ec:b2:07:4c:4d:37:ab:eb:87:2f:72:86:35:13:c1:43:0a:
65:e5:78:7e:8d:05:08:04:67:68:c6:a7:8b:ee:51:d4:ce:5c:
aa:2d:e9:08:87:52:db:6c:ae:81:a9:ec:cc:e8:e2:a8:ac:c0:
34:48:45:71:2a:54:fb:85:92:b3:d1:60:b5:4e:8e:0a:41:fe:
43:71:92:b2:c7:a9:9e:51:4e:b2:7b:cd:4d:c1:bc:ba:43:56:
42:c0:62:e6:cf:69:1f:8a:e3:8e:2d:95:3c:4c:af:b8:e4:25:
b7:78:43:46:41:c4:54:1d:7e:0d:5a:b0:f5:68:48:5f:63:db:
24:61:63:85:e0:bb:0b:1e:15:53:3f:49:bd:8e:2e:0b:0b:78:
d3:6c:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:14 2025 by rpki-client