Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/P8E9Ou4g1WbTKObdDwcArgBdv5g.roa
File: P8E9Ou4g1WbTKObdDwcArgBdv5g.roa (raw, json)
Hash identifier: jEoo4eK/vJf03qD8uvHcjuGFNdhu1O0hJ9v27A3yEo0=
Subject key identifier: 3F:C1:3D:3A:EE:20:D5:66:D3:28:E6:DD:0F:07:00:AE:00:5D:BF:98
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 019421445CB48F3A7D465A277403C2893F4A
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/P8E9Ou4g1WbTKObdDwcArgBdv5g.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50622
IP address blocks: 185.47.226.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5c:b4:8f:3a:7d:46:5a:27:74:03:c2:89:3f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fc13d3aee20d566d328e6dd0f0700ae005dbf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3a:c5:be:92:bc:6d:31:69:e0:89:c3:d8:5a:
c7:fd:bb:4a:3a:1e:31:68:f8:4d:bb:37:b0:17:82:
56:95:19:97:cd:73:6a:52:c8:9a:83:2e:4b:92:b1:
f1:09:03:13:47:c1:43:21:7b:8e:ce:93:b9:73:2c:
90:fb:31:72:0e:79:43:11:de:78:bb:14:38:d0:27:
8e:0f:c1:2d:89:e9:02:4c:a1:cd:a4:4e:1f:e8:ef:
97:39:c3:fe:41:e2:7d:0c:3d:7e:4c:97:d2:20:f0:
5c:27:ba:5b:46:0e:02:63:fd:e4:c6:0b:6a:a3:55:
b9:fc:02:8d:7d:d0:81:26:46:bb:b6:ec:70:b5:92:
4c:c3:8d:e6:1a:f8:bb:57:b1:9b:87:e2:2a:af:75:
ba:6c:4d:bd:b8:41:10:6a:4c:1d:9e:4c:8e:82:3b:
d1:b8:73:80:c5:9a:11:f4:fc:62:13:ac:55:5b:f8:
ac:29:59:2e:75:cb:ff:b6:44:3b:b5:32:c8:96:25:
f5:8b:3d:c8:26:7a:6c:18:aa:e0:a7:c0:3f:36:3d:
29:80:68:54:0c:25:70:ed:aa:ee:8e:89:a1:d4:d3:
60:cd:f7:d5:6f:5c:03:b4:95:91:fd:f9:a3:17:2b:
64:d1:18:07:bb:b0:23:b8:13:02:b5:f4:6f:91:99:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C1:3D:3A:EE:20:D5:66:D3:28:E6:DD:0F:07:00:AE:00:5D:BF:98
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/P8E9Ou4g1WbTKObdDwcArgBdv5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.226.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8d:f0:3d:89:41:bf:eb:c1:ee:98:cf:b2:fa:9e:bc:66:d6:
bb:92:32:05:c8:cb:c9:ac:7b:7b:d2:a4:7c:6e:ff:62:a7:c9:
89:c8:a8:8b:58:89:13:02:4f:dd:ef:d8:08:c4:86:b0:a1:47:
f5:41:65:a5:00:99:af:22:f4:78:96:fa:58:fa:e3:34:1b:5c:
a0:2b:99:41:25:b8:34:aa:57:d6:b9:0e:e5:57:bb:32:39:8b:
76:7f:5e:40:a2:2c:21:9e:23:29:2f:35:1c:9f:12:c4:95:6d:
79:8e:0b:01:b3:c5:82:76:a2:10:6c:c2:79:9e:d0:72:a1:65:
82:fb:7f:2d:a8:7a:64:aa:e1:98:63:d5:03:60:75:52:0c:b1:
4a:9a:4c:53:e6:64:7e:af:e1:90:fa:e7:e8:34:b5:45:da:b1:
ed:d5:85:44:5d:7a:a0:be:ba:80:3f:37:d2:ac:19:f1:ac:61:
c0:87:89:49:6c:62:11:b9:ef:15:96:4d:3a:03:a3:91:1f:6a:
08:a1:27:5f:0f:8d:e3:7b:85:b3:be:ae:b3:d4:c5:2e:1d:c5:
95:43:45:e9:de:25:73:6e:00:1d:ff:d9:32:18:6a:35:f5:85:
2e:70:80:75:12:59:99:3e:06:bc:0f:9b:8b:1b:02:43:de:db:
82:19:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:02 2025 by rpki-client