Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/8CV_4ygnLIHarraBhz3oGUMWMOk.roa
File: 8CV_4ygnLIHarraBhz3oGUMWMOk.roa (raw, json)
Hash identifier: L6jHG9A6f7B6PJSq79KhFuddAKgB7h0BRkRypkd+Otw=
Subject key identifier: F0:25:7F:E3:28:27:2C:81:DA:AE:B6:81:87:3D:E8:19:43:16:30:E9
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 0186BCCF683DFFE4638471140C377690F086
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/8CV_4ygnLIHarraBhz3oGUMWMOk.roa
Signing time: Tue 07 Mar 2023 16:02:34 +0000
ROA not before: Tue 07 Mar 2023 16:02:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44709
IP address blocks: 185.139.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:cf:68:3d:ff:e4:63:84:71:14:0c:37:76:90:f0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Mar 7 16:02:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0257fe328272c81daaeb681873de819431630e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:20:d3:de:7d:f0:e2:74:86:31:e6:95:8d:
c9:a8:92:35:3f:f5:55:7f:f2:4a:70:9b:46:c2:90:
1b:69:d8:5e:9c:05:0e:fd:7a:4d:d7:4e:48:c8:0b:
c0:19:80:aa:a1:76:b2:84:e8:ab:af:dd:fd:ec:f0:
1f:d9:4b:3f:82:0f:ac:7e:c5:3e:f1:b6:91:3e:d8:
d3:ea:35:80:f7:9b:ba:42:bd:b7:81:2c:6e:e4:95:
42:5d:b2:a0:08:6b:66:41:59:3a:31:24:6e:e5:33:
23:80:63:42:f6:05:17:c4:63:c6:6f:a6:5a:61:d6:
12:cc:4e:a1:7f:5b:63:94:d7:a4:5e:af:ad:31:7c:
d0:41:05:db:b6:72:81:a6:06:87:59:b0:3e:23:2e:
bc:80:a6:ec:de:93:f2:83:90:33:88:a2:a6:0b:c8:
ff:15:3b:7b:04:ca:f0:54:ed:ae:64:2d:bc:e9:04:
65:99:1f:fb:b9:01:14:ca:b3:6c:1c:3b:7e:6d:df:
e3:bd:13:9c:f7:3c:e2:c9:06:27:e5:a7:4d:b3:c4:
63:b7:ac:6a:03:cb:c1:8e:59:3f:b1:d7:17:4b:04:
6c:46:04:65:3a:3c:ca:46:04:be:63:e8:fa:5a:6a:
81:8c:43:18:33:1c:51:42:f2:ce:ab:ae:6e:74:9b:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:7F:E3:28:27:2C:81:DA:AE:B6:81:87:3D:E8:19:43:16:30:E9
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/8CV_4ygnLIHarraBhz3oGUMWMOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:52:6e:4a:ac:35:10:ce:7c:70:e3:1d:f2:01:55:6b:77:0f:
e0:d5:66:37:bc:05:28:e6:59:cb:4c:d2:6f:3b:8f:41:87:bc:
ac:7b:e2:04:fc:5c:5b:c4:18:30:12:b2:c8:8f:a7:8a:37:61:
9c:27:44:3b:1d:76:e2:c1:0b:8a:05:52:ff:ec:4b:35:d3:e5:
30:b6:03:0c:f0:8d:cb:1c:f7:79:1c:72:c7:a3:d6:1a:65:21:
c2:d7:3c:1d:de:8c:70:61:d4:6f:06:b0:6c:2f:ba:91:1f:57:
ae:d3:f7:1a:1e:8b:60:ee:73:21:a3:42:09:dc:a0:bf:e5:86:
f9:d3:f0:fd:9e:d3:07:6f:e5:df:87:b0:7b:8b:81:0d:2e:a4:
ce:2e:f3:04:2e:98:0d:7d:8b:31:76:bf:87:b6:b1:bd:e7:3f:
d5:b8:81:e0:56:74:04:d5:96:39:34:ec:6a:16:3e:1c:21:5f:
f4:e3:38:93:14:b4:b5:c9:22:61:b9:e3:1d:0d:7c:72:53:fd:
c1:7b:24:9e:5b:87:45:c6:93:ca:4b:68:4b:e6:84:39:fd:c7:
72:2e:d5:f8:57:25:ed:04:e6:cd:8d:d3:c3:4d:ec:c5:6b:de:
71:71:15:b6:ec:bd:ae:69:9a:b4:7c:46:3d:d4:95:0a:04:e1:
49:07:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:10:19 2025 by rpki-client