Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/8F8GN4ESpXAtjtkPchVtNKTCHa4.roa
File: 8F8GN4ESpXAtjtkPchVtNKTCHa4.roa (raw, json)
Hash identifier: VF5+XyfSlhhER5b3fcK030b+ZGQJ9hi2yuKQABKmVXg=
Subject key identifier: F0:5F:06:37:81:12:A5:70:2D:8E:D9:0F:72:15:6D:34:A4:C2:1D:AE
Certificate issuer: /CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Certificate serial: 01856F024402657EF3DED929302054DB3C63
Authority key identifier: 5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/8F8GN4ESpXAtjtkPchVtNKTCHa4.roa
Signing time: Sun 01 Jan 2023 20:24:57 +0000
ROA not before: Sun 01 Jan 2023 20:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203423
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:44:02:65:7e:f3:de:d9:29:30:20:54:db:3c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Validity
Not Before: Jan 1 20:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05f06378112a5702d8ed90f72156d34a4c21dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:f5:6e:ea:d8:f0:c4:37:e0:e5:a8:9c:d6:
c2:c4:26:e2:55:83:f7:e7:cb:0d:3e:48:4d:f1:4e:
82:00:05:d8:08:d0:14:55:19:bd:99:68:17:c2:a4:
1d:16:d2:d7:f2:71:db:b0:75:23:53:a4:21:f7:05:
57:88:12:84:ea:d9:c1:34:47:3d:de:37:a9:ef:5a:
26:bc:ce:e4:0a:ce:ec:de:dc:9d:25:ab:7a:65:39:
95:59:76:67:e1:1e:7a:51:02:a9:c8:a4:1d:33:bc:
8a:fa:a1:7b:87:c6:90:05:c0:59:fe:08:1b:5b:2b:
aa:4c:16:21:24:bb:2e:c3:c3:e2:89:4e:1f:ad:cb:
f7:5a:6c:8d:85:67:1b:11:a8:5b:06:05:4f:07:27:
53:0e:2c:08:f5:e5:8b:02:09:19:bf:f4:43:1b:ed:
d8:5b:85:93:0e:8f:87:f3:e2:2f:e0:f6:e5:47:ef:
13:85:92:6f:2c:7f:be:03:46:cc:e6:25:de:38:c0:
1c:83:ed:21:0a:1c:5a:38:e7:05:fd:51:0c:e9:a9:
ce:08:50:0c:cd:da:a8:69:c9:90:28:b2:72:3e:71:
78:53:ce:62:2e:90:3a:e6:0c:cb:98:52:eb:90:b8:
9d:5e:46:cf:93:76:dc:09:8b:0f:c2:ff:27:74:c7:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:06:37:81:12:A5:70:2D:8E:D9:0F:72:15:6D:34:A4:C2:1D:AE
X509v3 Authority Key Identifier:
keyid:5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/8F8GN4ESpXAtjtkPchVtNKTCHa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
22:34:77:08:5d:6a:8e:3a:0f:24:29:3f:90:9c:0e:0d:86:39:
f1:6b:7a:34:9b:62:1a:52:c0:55:4d:b6:2d:ab:05:41:95:1b:
36:cc:f6:ae:ed:0e:70:c2:bb:8e:20:fc:eb:82:22:93:91:e0:
96:bf:e2:ed:ed:0e:52:ed:91:60:48:a2:56:0f:c0:c3:48:77:
c6:24:f8:b5:04:5f:8c:38:44:c9:6f:ae:3b:23:b5:06:3b:f4:
ad:ed:ba:54:78:e6:2c:98:fa:bf:f8:0b:b4:41:48:48:f0:d7:
b0:dc:00:61:f9:c5:60:d7:20:b8:c9:1f:43:e2:b9:ef:67:07:
9e:17:38:5e:aa:c2:17:58:14:36:da:af:d1:e2:22:cd:23:64:
a7:60:03:4a:40:3e:4d:f3:5f:c9:68:88:85:37:e2:4c:d3:7a:
a2:52:12:f5:76:8f:38:37:04:e7:dc:00:f3:f9:a5:8e:70:c3:
79:94:5b:e5:ca:3d:2a:99:27:9f:07:1c:63:3e:28:8c:bb:cb:
0f:30:53:8f:99:88:c2:2e:f7:f0:0a:33:44:9c:ee:32:62:1c:
e3:85:36:fc:63:4a:09:d3:a5:73:5d:3a:c0:6b:af:96:a4:49:
8f:d0:8f:08:9f:24:d7:c3:04:83:31:79:36:11:c7:e0:f7:2f:
76:d8:98:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAkQCZX7z3tkpMCBU2zxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzE3NjI3ZjdiMmZjYzU2ZjBkN2JlNDY5YTEzMTcxNjA3
ZDI0MjcwHhcNMjMwMTAxMjAyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDVmMDYzNzgxMTJhNTcwMmQ4ZWQ5MGY3MjE1NmQzNGE0YzIxZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykz1burY8MQ34OWonNbCxCbiVYP3
58sNPkhN8U6CAAXYCNAUVRm9mWgXwqQdFtLX8nHbsHUjU6Qh9wVXiBKE6tnBNEc9
3jep71omvM7kCs7s3tydJat6ZTmVWXZn4R56UQKpyKQdM7yK+qF7h8aQBcBZ/ggb
WyuqTBYhJLsuw8PiiU4frcv3WmyNhWcbEahbBgVPBydTDiwI9eWLAgkZv/RDG+3Y
W4WTDo+H8+Iv4PblR+8ThZJvLH++A0bM5iXeOMAcg+0hChxaOOcF/VEM6anOCFAM
zdqoacmQKLJyPnF4U85iLpA65gzLmFLrkLidXkbPk3bcCYsPwv8ndMdTJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBfBjeBEqVwLY7ZD3IVbTSkwh2uMB8GA1UdIwQY
MBaAFF5xdif3svzFbw175GmhMXFgfSQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5GMkpfZXlfTVZ2RFh2a2FhRXhjV0I5SkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zZDE5NDUtZDYwZS00OGFiLTg4YmMt
OGNmZTRiODE1N2QyLzEvOEY4R040RVNwWEF0anRrUGNoVnROS1RDSGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zZDE5NDUtZDYwZS00OGFiLTg4YmMtOGNmZTRiODE1N2Qy
LzEvWG5GMkpfZXlfTVZ2RFh2a2FhRXhjV0I5SkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/6lMA0G
CSqGSIb3DQEBCwUAA4IBAQAiNHcIXWqOOg8kKT+QnA4Nhjnxa3o0m2IaUsBVTbYt
qwVBlRs2zPau7Q5wwruOIPzrgiKTkeCWv+Lt7Q5S7ZFgSKJWD8DDSHfGJPi1BF+M
OETJb647I7UGO/St7bpUeOYsmPq/+Au0QUhI8New3ABh+cVg1yC4yR9D4rnvZwee
FzheqsIXWBQ22q/R4iLNI2SnYANKQD5N81/JaIiFN+JM03qiUhL1do84NwTn3ADz
+aWOcMN5lFvlyj0qmSefBxxjPiiMu8sPMFOPmYjCLvfwCjNEnO4yYhzjhTb8Y0oJ
06VzXTrAa6+WpEmP0I8InyTXwwSDMXk2Ecfg9y922JiH
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:52 2025 by rpki-client