Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/lk8dT_2BP_fnIuQwJvIdeoZh5HY.roa
File: lk8dT_2BP_fnIuQwJvIdeoZh5HY.roa (raw, json)
Hash identifier: bx4mYPIqbkDGfkDg4OE+BQAixc03rEvgP6xFCKgH3tY=
Subject key identifier: 96:4F:1D:4F:FD:81:3F:F7:E7:22:E4:30:26:F2:1D:7A:86:61:E4:76
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0190251384C9CF2DDB55529CFF91D16C518D
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/lk8dT_2BP_fnIuQwJvIdeoZh5HY.roa
Signing time: Mon 17 Jun 2024 07:22:34 +0000
ROA not before: Mon 17 Jun 2024 07:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.194.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:13:84:c9:cf:2d:db:55:52:9c:ff:91:d1:6c:51:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jun 17 07:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=964f1d4ffd813ff7e722e43026f21d7a8661e476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:f7:32:17:61:3b:b1:38:5a:b4:8f:f7:5d:
e5:6a:24:6c:17:64:5a:e9:72:4f:e6:02:e3:cc:d5:
6e:3d:92:f1:06:09:31:79:03:e2:e5:aa:43:20:df:
b5:82:ce:77:34:f1:03:fd:63:97:2d:dc:66:e4:a0:
f3:49:a1:7e:4e:d9:4c:30:c4:f4:8f:b3:a8:ec:72:
7e:4a:2b:39:0e:c4:7b:38:3a:3f:97:70:54:43:2d:
be:4c:57:7d:1f:37:e8:66:8b:e3:56:e5:7f:be:86:
61:11:db:fe:4d:52:37:11:25:2d:c3:fe:51:51:4c:
00:1a:ff:ea:ca:00:de:8c:e8:e1:e6:8a:36:9b:8a:
db:db:c2:e2:f3:11:74:8c:de:90:d5:6a:a0:4f:7f:
e7:96:e8:e5:8c:c4:78:4f:df:01:38:f6:78:03:dc:
bb:52:b9:bb:e9:14:f8:bf:16:69:21:92:ba:e8:12:
d4:24:3f:e3:81:e8:93:cc:df:88:f2:2d:f8:db:34:
7d:e2:32:f1:6e:bc:aa:60:43:ae:3d:bd:22:a6:98:
7d:73:3b:43:b7:75:e4:30:14:5f:44:75:e3:46:a5:
fa:30:aa:94:66:db:15:4b:da:47:53:90:f6:4e:47:
1f:b3:f2:e1:cd:17:34:6c:e6:63:bf:de:e5:12:c9:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:1D:4F:FD:81:3F:F7:E7:22:E4:30:26:F2:1D:7A:86:61:E4:76
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/lk8dT_2BP_fnIuQwJvIdeoZh5HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
70:99:1d:ad:ab:b0:fc:9a:40:4c:5b:8e:a8:36:9d:8d:24:6a:
b9:f2:12:20:3b:31:af:c2:ed:e1:04:03:01:d3:8e:37:cd:57:
69:1f:0f:e0:28:94:7c:10:a6:30:c5:a0:d0:17:14:df:28:62:
8a:f4:95:71:ef:90:fe:19:43:65:f6:e9:83:18:29:03:2c:23:
89:3c:48:dc:4e:6e:bb:e8:8a:b4:a0:82:da:1e:c3:6b:0c:af:
17:e3:f8:30:83:bc:a5:bb:69:6b:1b:cd:a9:28:c7:af:2e:52:
b1:2c:ac:fd:32:b4:9f:73:30:0e:19:82:ac:7d:f5:26:28:17:
f0:8c:f8:4e:6d:35:50:7b:a9:47:1b:5a:62:4d:8c:e3:d0:88:
35:cd:af:fd:0b:b9:aa:94:ab:0e:70:7a:73:19:56:bf:77:0e:
88:d5:11:c9:98:54:f0:94:a8:00:ac:c3:81:75:2b:05:b7:b6:
67:99:cf:82:0c:bb:7f:d1:88:d9:84:42:ef:2a:8c:7e:2a:d7:
d2:0f:db:3d:dd:00:19:75:32:ff:31:42:9f:96:ad:46:fe:af:
65:18:6f:aa:b9:ab:16:5c:d0:42:e2:08:f5:86:93:e2:67:98:
9d:78:a4:e6:2c:51:c9:43:d4:eb:31:0b:21:c9:96:64:19:18:
4a:6f:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:42 2025 by rpki-client