Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/8FU11yYabBJRRjHXhYHw1w8tXqs.roa
File: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (raw, json)
Hash identifier: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=
Subject key identifier: F0:55:35:D7:26:1A:6C:12:51:46:31:D7:85:81:F0:D7:0F:2D:5E:AB
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 0194282849F5F41110F2B2A727256F3A5511
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/8FU11yYabBJRRjHXhYHw1w8tXqs.roa
Signing time: Thu 02 Jan 2025 17:55:16 +0000
ROA not before: Thu 02 Jan 2025 17:55:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 185.70.96.0/24 maxlen: 24
185.70.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:49:f5:f4:11:10:f2:b2:a7:27:25:6f:3a:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jan 2 17:55:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f05535d7261a6c12514631d78581f0d70f2d5eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:98:b9:ba:a6:41:0b:c4:f2:02:42:7e:92:
d8:ae:54:b9:b9:cf:6c:2e:cb:13:91:03:6e:6f:fa:
e7:88:ca:04:0e:7f:92:b9:8c:cb:58:75:6a:82:7a:
a0:08:62:38:ab:b6:cc:ba:0d:c9:6c:f2:26:c5:d1:
fe:14:dc:ce:d3:bd:b6:0a:cf:24:55:e0:67:97:68:
63:b4:54:97:38:ae:97:6f:a3:18:cd:7f:83:67:5b:
e9:f9:9b:e6:2a:72:77:5c:be:db:54:03:cf:55:87:
38:82:0b:e3:ed:35:2b:6e:73:3b:8b:9b:82:8a:90:
36:07:17:9d:b6:44:6b:48:f6:c1:9a:99:d9:70:8f:
08:a5:44:67:2d:2d:fb:48:ba:a7:96:50:6c:55:b8:
87:98:17:05:ca:7c:36:b9:fb:3b:de:c4:e1:82:a1:
1e:47:db:f2:2a:fe:f3:58:8c:30:84:f7:3e:f3:26:
3e:4d:81:96:51:a0:ee:36:27:97:29:2b:82:a9:23:
02:c4:7e:a2:57:a3:40:3c:0d:1e:87:bb:95:63:81:
82:b0:33:01:a7:85:a7:67:48:04:ce:5f:7a:b5:64:
09:e4:9e:d8:e7:b3:04:17:02:b2:e8:84:1e:3c:b2:
eb:51:42:c6:a3:85:2f:fa:50:9e:7a:52:e3:8c:42:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:55:35:D7:26:1A:6C:12:51:46:31:D7:85:81:F0:D7:0F:2D:5E:AB
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/8FU11yYabBJRRjHXhYHw1w8tXqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.96.0/24
185.70.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b4:6a:45:a2:f1:9e:de:e5:71:ce:40:51:d3:c3:3e:b8:d7:
00:b4:43:ed:ad:f8:40:bf:fc:70:11:58:e8:2b:3b:6a:b3:38:
90:a3:90:2b:f1:55:f6:9a:f9:0a:d7:5c:fc:53:50:df:6a:bb:
f1:32:3f:fa:86:19:65:8e:f3:51:74:d3:62:fd:0c:07:07:7b:
a3:26:70:90:5c:b6:a6:ce:26:1b:5a:f9:9c:ed:fd:81:50:17:
71:2e:60:6d:ce:9f:ab:f2:4f:ad:97:1e:f1:51:b7:5e:f5:4d:
16:ad:6c:39:d1:2d:eb:b1:a6:8a:32:3e:cc:b1:f2:4a:9c:b6:
3d:0a:0a:c3:26:dc:ae:87:ec:dc:5b:0f:c9:79:75:ff:69:7c:
14:91:53:13:b5:90:43:da:58:be:9a:06:87:14:88:39:d2:b1:
92:59:07:f2:fe:00:1b:54:f0:ce:e5:82:ce:e6:ae:2c:f0:49:
ee:6b:a6:51:53:b5:01:12:63:67:fa:49:42:dc:d0:51:d5:44:
e9:01:00:f2:6e:5c:62:9f:de:80:a0:2c:d3:da:2d:3b:08:41:
d1:9f:06:39:b5:82:d4:20:e6:5f:ee:2f:6b:85:0d:40:1e:f4:
03:f4:0d:09:d0:8d:40:77:cc:88:83:d3:c8:a0:5d:3d:0c:13:
ff:d6:57:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoKEn19BEQ8rKnJyVvOlURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm
NmM3M2IwHhcNMjUwMTAyMTc1NTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDU1MzVkNzI2MWE2YzEyNTE0NjMxZDc4NTgxZjBkNzBmMmQ1ZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XOYubqmQQvE8gJCfpLYrlS5uc9s
LssTkQNub/rniMoEDn+SuYzLWHVqgnqgCGI4q7bMug3JbPImxdH+FNzO0722Cs8k
VeBnl2hjtFSXOK6Xb6MYzX+DZ1vp+ZvmKnJ3XL7bVAPPVYc4ggvj7TUrbnM7i5uC
ipA2BxedtkRrSPbBmpnZcI8IpURnLS37SLqnllBsVbiHmBcFynw2ufs73sThgqEe
R9vyKv7zWIwwhPc+8yY+TYGWUaDuNieXKSuCqSMCxH6iV6NAPA0eh7uVY4GCsDMB
p4WnZ0gEzl96tWQJ5J7Y57MEFwKy6IQePLLrUULGo4Uv+lCeelLjjEIqGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPBVNdcmGmwSUUYx14WB8NcPLV6rMB8GA1UdIwQY
MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt
NWVhOGY1M2FiNDkxLzEvOEZVMTF5WWFiQkpSUmpIWGhZSHcxdzh0WHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx
LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUZgAwQA
uUZjMA0GCSqGSIb3DQEBCwUAA4IBAQC6tGpFovGe3uVxzkBR08M+uNcAtEPtrfhA
v/xwEVjoKztqsziQo5Ar8VX2mvkK11z8U1DfarvxMj/6hhlljvNRdNNi/QwHB3uj
JnCQXLamziYbWvmc7f2BUBdxLmBtzp+r8k+tlx7xUbde9U0WrWw50S3rsaaKMj7M
sfJKnLY9CgrDJtyuh+zcWw/JeXX/aXwUkVMTtZBD2li+mgaHFIg50rGSWQfy/gAb
VPDO5YLO5q4s8Enua6ZRU7UBEmNn+klC3NBR1UTpAQDyblxin96AoCzT2i07CEHR
nwY5tYLUIOZf7i9rhQ1AHvQD9A0J0I1Ad8yIg9PIoF09DBP/1ldz
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:16 2025 by rpki-client