Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/8GXnM3AJagKcdk2ivvaT4Io4ftg.roa
File: 8GXnM3AJagKcdk2ivvaT4Io4ftg.roa (raw, json)
Hash identifier: 14LuSevmK6OJlRp7gSd4MLN1Q2xz9ggQN5J+INCb+eA=
Subject key identifier: F0:65:E7:33:70:09:6A:02:9C:76:4D:A2:BE:F6:93:E0:8A:38:7E:D8
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019424B384DA47CC032AF8A659D232996008
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/8GXnM3AJagKcdk2ivvaT4Io4ftg.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.43.138.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:84:da:47:cc:03:2a:f8:a6:59:d2:32:99:60:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f065e73370096a029c764da2bef693e08a387ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:f2:fc:7b:be:b7:d5:63:e5:ae:a3:4f:5a:
3d:64:d1:f7:ca:64:11:66:22:96:78:bf:f7:b9:e7:
7a:9b:f6:e2:72:f6:1d:47:38:75:28:4d:cc:e7:14:
cb:a3:fe:4c:e9:1d:60:4e:13:0e:f0:17:d4:80:68:
d5:7c:b5:ed:4a:70:d7:fb:e2:16:73:87:b2:95:07:
35:8b:95:85:99:b2:d7:d5:29:bf:1a:1c:53:21:91:
97:9d:d6:a8:06:07:ba:62:03:ab:25:63:05:0a:36:
5d:4b:b9:19:14:32:5d:7f:18:08:4b:21:20:97:5c:
1c:76:0a:54:1e:7f:6a:58:02:e0:bf:92:a4:91:fa:
9b:3c:65:ae:80:b8:99:16:4e:81:85:60:ce:bf:bf:
3f:fc:5d:5e:b4:61:64:5b:67:bc:58:f1:21:c9:c6:
eb:41:dc:cf:19:01:25:9b:7e:1d:b2:7a:8c:7d:57:
d5:71:01:ab:a8:1a:de:ac:e1:91:6f:44:58:3c:7d:
0f:77:dd:b4:6f:52:54:16:0a:0f:5a:28:ce:49:7a:
91:22:46:f5:99:ec:f5:fd:20:c9:ef:61:97:b2:57:
bb:29:40:74:8f:5c:48:70:98:86:39:17:1a:61:07:
dc:3f:e6:55:f9:89:d3:f5:0e:3c:7f:94:e5:a1:26:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:65:E7:33:70:09:6A:02:9C:76:4D:A2:BE:F6:93:E0:8A:38:7E:D8
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/8GXnM3AJagKcdk2ivvaT4Io4ftg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fa:39:32:af:4b:be:a3:2a:f4:30:22:04:25:24:1c:e6:83:
fe:70:d4:32:22:2b:56:ac:db:54:6f:86:9d:14:d5:1c:ff:e4:
aa:70:1c:23:31:93:6e:4c:ce:c0:2a:5c:b8:e3:8e:49:4a:66:
84:5d:89:71:61:60:d6:c5:37:d1:c1:b2:46:8d:17:ee:d3:67:
73:0e:e5:77:12:c1:34:ef:45:d4:76:cf:b6:b2:09:32:a5:cc:
93:72:0e:62:70:34:30:86:26:72:aa:d5:51:09:e7:5a:b2:b0:
51:ba:90:67:5f:05:8b:9d:62:0e:bc:6f:71:37:9b:7e:5a:b6:
7d:51:8c:99:95:c3:6f:e7:d7:c7:70:92:46:ab:37:7b:42:1b:
9d:ba:b0:89:e8:a1:3d:ef:a8:14:aa:81:e2:05:8f:af:fe:2d:
55:c1:f0:f0:cf:81:86:7b:9e:25:17:1b:c2:76:44:d7:34:2e:
3c:d6:1e:79:82:9d:64:43:48:3f:4e:52:25:10:4c:60:46:79:
45:a6:5d:5b:46:fe:f6:13:2f:35:c5:e8:9c:31:d6:a7:e4:ce:
27:a1:4e:04:34:93:db:ec:cd:f9:98:94:13:41:96:5d:ce:e2:
db:a2:34:1d:de:45:1b:69:67:3e:27:4a:bf:fb:e5:45:c7:f2:
e8:fc:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:22 2025 by rpki-client