Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iVD8BB_pBQZu4BFonnQS0Uunb1U.roa
File: iVD8BB_pBQZu4BFonnQS0Uunb1U.roa (raw, json)
Hash identifier: k3dIaAVMrk9U41liOuFClAM8qAY8HpFAsFQiqwe67so=
Subject key identifier: 89:50:FC:04:1F:E9:05:06:6E:E0:11:68:9E:74:12:D1:4B:A7:6F:55
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFDB812980A65A073CAA5DF0B300C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iVD8BB_pBQZu4BFonnQS0Uunb1U.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49658
IP address blocks: 151.237.16.0/24 maxlen: 24
185.236.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fd:b8:12:98:0a:65:a0:73:ca:a5:df:0b:30:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8950fc041fe905066ee011689e7412d14ba76f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:e0:be:35:af:24:06:0d:45:9f:3f:cd:08:
24:8e:bd:be:a5:9c:26:c0:36:00:be:1b:d6:30:b8:
84:c5:dc:3e:f9:78:d2:11:75:22:97:10:7b:01:4e:
3b:0b:06:fb:e9:70:dd:e8:36:27:86:b8:98:25:9c:
63:11:a2:0d:36:c0:f3:86:d5:1e:f5:ab:1d:5f:1f:
5c:dd:6d:24:65:07:27:8a:9f:89:b3:49:65:a3:e3:
45:4b:55:41:8c:1c:72:25:71:a0:d9:56:bb:a7:89:
cc:ca:01:11:85:82:59:46:b4:74:4e:e5:79:26:13:
1f:da:22:29:cd:74:9d:47:c1:45:a2:cb:5e:95:4c:
03:a3:c4:c1:b0:74:ae:63:d3:2f:f4:c2:bb:fa:9e:
28:15:fc:32:ce:5a:cc:0c:aa:98:c3:8b:f5:b6:98:
ac:82:fb:eb:3c:cc:39:ff:ab:39:f7:35:36:c3:48:
bb:3c:21:64:57:89:61:39:4b:3d:eb:d7:f5:ca:d2:
30:dd:aa:3a:b8:30:74:60:f0:88:f8:64:49:54:bb:
21:7d:3f:47:ec:f3:13:6f:ce:59:c0:9f:c5:11:e5:
51:28:8e:d3:3f:4c:d1:48:ad:0d:e5:02:53:e1:8e:
27:c1:48:ca:c4:06:23:a4:43:75:e7:6b:34:55:ee:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:FC:04:1F:E9:05:06:6E:E0:11:68:9E:74:12:D1:4B:A7:6F:55
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iVD8BB_pBQZu4BFonnQS0Uunb1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0/24
185.236.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:05:38:56:21:fb:03:07:14:68:2b:d7:73:17:dc:11:28:21:
26:f9:06:19:5c:f6:55:ed:c3:45:45:54:0d:4d:23:20:b1:be:
c4:74:de:de:cd:da:a0:c9:f9:55:20:4b:bf:d9:c1:05:2b:e7:
67:27:6b:90:d9:bc:7d:f9:85:8b:f4:f3:26:3f:6a:99:76:4c:
96:37:6a:e2:97:99:a0:8e:38:2c:67:16:82:c9:b1:37:9a:ff:
74:7b:40:7c:0d:3a:e7:8f:ad:fa:9d:3a:38:ff:4e:3f:e8:34:
0f:9a:5d:63:eb:9e:8b:45:ec:a5:47:9e:a5:1f:a5:82:fa:68:
a6:df:0e:7c:c0:6a:f6:95:32:69:93:40:60:f0:c6:b8:ae:86:
07:4e:a5:6f:c5:d0:d1:09:ba:b2:4f:77:60:ef:e1:05:73:c8:
96:16:0b:ca:e1:fe:81:31:fc:66:f6:ce:d6:f2:1a:4b:f9:53:
ad:15:08:c8:56:70:09:a3:33:1b:25:fa:ae:3b:45:d0:1a:97:
c7:76:d4:e9:74:cd:82:17:ec:08:2f:0e:da:29:9a:83:0f:68:
22:9a:22:7b:13:77:25:d3:16:e2:8b:04:bf:2d:b4:f3:7d:11:
fd:7c:ea:b5:95:73:a0:e1:9c:14:86:6b:ea:43:eb:11:95:7e:
25:f6:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:50 2025 by rpki-client