Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa
File: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (raw, json)
Hash identifier: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=
Subject key identifier: F1:35:1B:39:68:0C:A4:A1:02:0E:31:D3:83:58:F7:A6:E6:7E:3A:3D
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 019424B40110DCFDFFF88CB4A0B9C1ED6825
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272713
IP address blocks: 185.236.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:01:10:dc:fd:ff:f8:8c:b4:a0:b9:c1:ed:68:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1351b39680ca4a1020e31d38358f7a6e67e3a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:ed:f6:4e:e6:3e:f6:05:f1:0b:d4:7d:d4:
f7:69:69:61:6b:cc:22:76:c5:0b:39:80:f0:7a:0e:
1d:3b:0f:14:26:7f:3d:98:9a:a6:67:6c:47:e9:c2:
fb:2e:03:6c:c3:e6:a0:79:b9:46:51:ce:08:cb:43:
ef:7d:d8:05:ae:6b:86:e5:92:28:00:65:c3:f2:e9:
7f:80:18:22:58:81:1c:00:ac:ca:93:2d:62:16:1e:
95:a4:98:0e:ea:9d:72:79:ae:5c:c8:50:33:2e:44:
6d:fd:c6:62:d0:f1:29:7c:52:2e:71:73:0b:40:13:
0d:e5:09:ed:11:63:b2:4a:7b:09:57:da:06:24:c0:
ae:ba:76:30:0a:65:31:8e:02:66:54:86:aa:84:7a:
d2:09:0f:d7:d1:30:52:5e:e5:00:52:d8:d9:15:15:
0c:66:e7:1d:13:ed:cf:c9:d0:80:1c:8c:45:09:68:
4e:55:01:fd:1b:6a:7c:18:98:ce:13:91:b6:6e:36:
b4:6b:bc:42:36:fc:62:f5:92:88:6b:b1:6a:d1:e7:
fc:4c:4b:1a:46:e6:82:9a:e9:d7:26:31:de:56:cc:
53:09:64:8e:11:5c:ab:b2:75:a9:f6:9d:01:0a:b6:
69:52:ea:c3:40:c7:2d:33:34:ec:fc:ea:89:34:64:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:1B:39:68:0C:A4:A1:02:0E:31:D3:83:58:F7:A6:E6:7E:3A:3D
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.183.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:97:37:3e:21:d4:b3:50:40:5b:c5:66:41:55:90:1d:90:da:
ea:bd:2e:01:d9:1c:26:cc:ee:73:fb:08:73:58:f4:95:d7:8a:
ff:43:b5:ba:1d:3e:8f:e1:85:69:b8:d9:ac:c7:bf:99:a1:a5:
d2:af:27:a7:5c:ab:d8:e8:df:99:fc:a7:6f:38:07:d9:39:26:
fe:f2:c1:c8:24:a6:2c:1b:c7:fd:d9:a8:3f:72:01:18:e2:8c:
7c:73:e2:3d:00:f2:f5:54:2c:1d:76:a2:f4:07:41:b0:58:28:
a5:21:3b:ea:e1:8d:98:11:cd:f3:86:5c:62:6f:aa:eb:3f:e3:
78:04:98:a5:6a:97:71:3b:30:4d:6d:18:79:96:93:2d:74:d0:
b4:22:8a:e2:53:31:0c:6f:ed:60:21:cf:9d:6b:54:64:5a:67:
00:65:eb:e1:4d:47:e5:16:a5:ab:9c:88:4c:df:b0:aa:51:55:
ff:66:da:1e:66:ae:22:84:11:2e:41:ae:d5:18:14:3e:81:e1:
53:99:8e:e3:ae:80:ea:01:20:47:e9:69:2f:82:30:ff:b6:4c:
de:cf:03:bd:01:92:37:15:ff:91:42:87:53:b1:39:d5:84:d5:
cc:f5:b5:7e:db:54:8a:00:94:d3:63:08:da:59:db:98:b4:c5:
7a:b6:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:35 2025 by rpki-client