Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa
File: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (raw, json)
Hash identifier: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=
Subject key identifier: F0:95:43:01:52:CD:15:AB:B0:A9:06:95:7E:7B:76:55:B7:FB:AB:23
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194222000727A3B4CEA67DFCB73F60812C2
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33823
IP address blocks: 89.39.203.0/24 maxlen: 24
193.168.186.0/24 maxlen: 24
2a0e:4840::/32 maxlen: 48
2a0e:4844::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:72:7a:3b:4c:ea:67:df:cb:73:f6:08:12:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f095430152cd15abb0a906957e7b7655b7fbab23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ee:f1:32:7c:66:c2:46:22:ef:f2:b2:df:90:
9b:0f:61:9b:b3:41:50:40:10:20:25:05:f1:21:d2:
d9:5c:94:7d:0f:ce:69:08:c3:91:1a:a4:40:27:6e:
9b:3a:6e:30:33:80:52:b7:9d:ee:d8:25:7f:0d:f8:
65:f0:2f:87:6a:99:cb:16:7c:d8:5c:54:75:39:72:
b0:78:bc:29:a1:0f:2c:4c:85:0f:1f:87:70:5d:73:
08:05:68:01:67:11:21:3e:12:76:f2:e2:83:7e:18:
c9:d4:f8:fe:0d:4f:9f:08:2a:4c:21:ad:ef:ee:ce:
79:f9:a9:38:79:64:7d:37:9a:75:bb:48:ad:63:1a:
cc:04:f5:84:d9:eb:51:45:6a:1e:e1:5f:91:5a:18:
2a:db:ea:b9:f2:ac:c2:c2:a8:fd:ab:0e:d7:b7:05:
3e:d9:a6:25:7c:c3:b8:5c:3d:20:0b:7c:7e:b4:ba:
ef:fc:dd:e1:a7:33:fb:05:b9:14:18:2c:8c:df:57:
37:4d:2b:ef:cd:e7:e4:6a:6d:a8:88:b3:c6:93:cf:
ef:6b:04:d2:40:6b:0d:2e:56:ad:07:aa:ec:bf:ca:
14:3e:4f:ef:bd:0d:68:e4:aa:9c:21:9f:d7:f4:01:
7b:80:de:44:66:b9:62:8c:e5:6e:dc:f0:e7:cb:97:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:43:01:52:CD:15:AB:B0:A9:06:95:7E:7B:76:55:B7:FB:AB:23
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.203.0/24
193.168.186.0/24
IPv6:
2a0e:4840::/32
2a0e:4844::/32
Signature Algorithm: sha256WithRSAEncryption
29:91:64:23:2a:66:dd:f0:55:9b:1f:7c:59:28:f1:35:51:a9:
5c:96:85:94:db:f1:eb:86:f5:b6:c3:7e:96:01:52:49:65:ab:
24:c6:c4:d3:4e:e5:15:66:45:ce:4a:21:7f:56:e7:18:94:97:
20:32:01:81:ed:1f:06:12:49:58:74:69:f4:8c:be:aa:55:fa:
d2:2d:a3:2f:4f:6a:31:ca:a6:1a:98:36:e4:41:8a:8f:bc:f3:
89:82:96:81:7d:16:64:3a:5f:25:3c:f8:18:bc:71:0d:db:4e:
c1:4d:6d:aa:41:55:cb:33:47:1d:be:1c:4e:e4:f1:b1:53:13:
3d:b2:5d:1e:b5:3c:c2:54:0a:ef:19:e0:b4:05:4a:30:c5:e3:
db:f0:d2:f0:b8:76:b5:78:07:b6:ef:4c:35:5b:1c:64:8f:ab:
b7:b5:11:b1:c4:56:6d:85:92:37:2f:cc:4d:60:e0:3e:ba:03:
5a:63:06:65:a6:46:5d:62:5b:72:ce:6f:6b:6e:2d:b1:1e:b5:
fd:2a:00:9f:67:1b:e0:7a:5c:5e:0c:a0:8c:d8:71:77:fb:42:
84:89:f9:a1:35:98:e9:1a:c8:0a:0d:7a:f2:3d:d7:af:aa:94:
f6:0e:8c:cd:16:41:73:48:8a:ef:50:9c:6c:db:c0:ca:61:c8:
4d:14:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:46 2025 by rpki-client