Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/8kCEwQTy5YvIQTKFaII2JxD4ODg.roa
File: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (raw, json)
Hash identifier: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=
Subject key identifier: F2:40:84:C1:04:F2:E5:8B:C8:41:32:85:68:82:36:27:10:F8:38:38
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 01956C309C4A8EC3280038745E2906E68A38
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/8kCEwQTy5YvIQTKFaII2JxD4ODg.roa
Signing time: Thu 06 Mar 2025 16:01:19 +0000
ROA not before: Thu 06 Mar 2025 16:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215691
IP address blocks: 78.40.111.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
2a14:8880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:30:9c:4a:8e:c3:28:00:38:74:5e:29:06:e6:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Mar 6 16:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f24084c104f2e58bc84132856882362710f83838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:42:db:23:78:9a:83:1f:e0:d2:a9:6a:b1:
63:36:2d:c8:33:a4:8e:34:3e:f5:24:56:be:5c:67:
6a:66:40:99:5c:71:45:52:1d:ee:44:26:7d:b6:39:
f0:fd:2c:a1:a5:fe:41:28:ae:f0:88:7e:0b:68:48:
f7:fd:80:a0:80:10:3e:50:0b:78:72:e3:2f:09:59:
2e:67:3b:5e:7e:2d:aa:0f:d2:81:a6:c8:b2:cd:cb:
88:31:55:2d:31:c9:92:af:1c:e8:10:a9:2d:3c:1a:
db:1f:5d:06:8f:ad:76:c9:9d:80:7c:f3:f7:1a:e5:
85:8a:12:b6:10:b8:45:5f:95:33:ac:f2:ec:88:b7:
1e:59:87:58:8f:ee:c1:c6:80:c4:90:39:eb:c5:e3:
43:31:9f:61:2f:07:88:f4:13:f9:65:09:5a:7a:67:
b1:22:f9:86:16:17:5a:08:ad:0d:bf:3e:27:76:78:
93:de:b4:b3:31:76:65:a0:81:b6:b2:36:32:e6:9a:
a5:82:55:da:b5:74:45:9c:32:72:6d:60:86:14:66:
64:1d:b0:59:ef:2c:4b:05:c0:86:4c:5b:2f:13:28:
97:2e:a9:72:84:b4:9f:f1:8f:b6:00:57:88:65:cf:
0d:ed:01:85:7c:d9:a9:2f:fd:f9:4d:45:9d:57:b4:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:84:C1:04:F2:E5:8B:C8:41:32:85:68:82:36:27:10:F8:38:38
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/8kCEwQTy5YvIQTKFaII2JxD4ODg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.111.0/24
171.22.18.0/24
IPv6:
2a14:8880::/29
Signature Algorithm: sha256WithRSAEncryption
9d:11:11:a8:49:de:45:ad:38:fe:02:6e:40:74:2e:d2:20:67:
56:b3:5d:b4:ad:2d:34:c0:8d:65:6e:24:6b:bd:70:71:40:39:
3a:a6:f1:38:07:13:d1:2d:e6:60:11:e6:b6:18:94:b5:bc:62:
cf:90:b9:4f:5a:9d:22:6e:8b:f4:ed:92:75:52:44:60:0a:44:
82:8b:bf:31:1a:b2:b3:a7:76:c4:1d:79:1a:db:f2:df:45:96:
eb:43:0e:9c:d3:4a:98:5c:6a:20:05:12:f3:57:de:ae:50:3a:
1e:82:2c:f1:eb:f8:58:62:b5:48:ad:e4:c1:ef:36:2b:0f:f5:
79:8f:7d:b8:cb:2b:cc:db:9e:a6:b8:4c:3e:23:eb:f8:57:91:
de:2e:ac:e9:9c:16:f5:be:3b:d8:c3:9e:9c:fc:64:d0:4d:c8:
ef:1e:85:71:58:3d:cd:d9:a6:59:e0:e8:f7:95:6c:bb:ce:00:
86:d5:c4:c9:b3:79:38:4b:48:b7:70:14:8b:2f:90:54:5d:b1:
c7:46:83:05:58:45:51:2d:31:84:40:95:4e:1a:25:cb:de:04:
08:cf:fb:fd:71:02:ff:67:d5:b1:29:6b:6a:1a:69:a1:d9:da:
ff:b3:6c:97:0e:08:b1:29:76:9f:8a:74:d1:83:ef:7e:61:81:
05:aa:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:14 2025 by rpki-client