Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/8TwyuA2K6hjfc917L9fuXLd_lfE.roa
File: 8TwyuA2K6hjfc917L9fuXLd_lfE.roa (raw, json)
Hash identifier: 97YXbepjTannaqpOnMShWJj2kjERLAeHYlR5aw0Nz/Y=
Subject key identifier: F1:3C:32:B8:0D:8A:EA:18:DF:73:DD:7B:2F:D7:EE:5C:B7:7F:95:F1
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 085AD566
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/8TwyuA2K6hjfc917L9fuXLd_lfE.roa
Signing time: Sat 01 Jan 2022 10:54:24 +0000
ROA not before: Sat 01 Jan 2022 10:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31333
IP address blocks: 80.244.240.0/20 maxlen: 24
83.151.16.0/20 maxlen: 24
79.140.32.0/20 maxlen: 24
31.15.64.0/21 maxlen: 24
2001:4d88::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140170598 (0x85ad566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jan 1 10:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f13c32b80d8aea18df73dd7b2fd7ee5cb77f95f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:0e:27:21:f0:89:5e:87:83:1c:37:0e:fc:
da:eb:1f:22:b2:e8:8f:7c:ec:35:2e:c0:7f:e6:2d:
b3:90:ff:24:1c:73:82:d3:93:96:5f:ed:8b:97:be:
9e:b4:e3:70:fa:2f:82:d6:36:f0:df:82:7a:f5:bd:
20:b0:39:29:73:2d:ca:8c:b0:97:f2:61:e5:98:cd:
c2:24:9a:15:bd:6c:17:79:e1:2b:51:4d:63:b7:9f:
2b:a1:d7:b4:ed:11:3a:c9:df:3f:87:46:aa:2f:c5:
0a:a4:65:75:83:41:32:d4:46:e0:b2:da:9f:a5:d6:
3b:8d:fa:6b:d0:12:b3:78:bb:c7:2e:03:cd:a2:95:
99:4c:f2:ed:67:a1:67:31:d6:4f:4a:15:80:f6:5d:
48:19:83:fd:9b:11:58:34:8e:e4:7c:63:e3:6f:4b:
38:e3:5a:25:74:cf:9b:f1:67:60:b0:ab:bb:cf:e9:
99:45:d7:6f:d3:26:a9:fd:7a:83:ed:c1:32:46:ef:
54:a0:20:83:f5:a2:65:e0:c7:b8:a9:6a:c9:5a:b8:
14:48:1f:7a:b4:3a:ff:2e:b4:71:f2:1b:65:b1:19:
c1:ae:a4:79:82:e8:44:ab:30:59:73:75:8d:81:d1:
a9:89:ba:06:81:31:7c:14:ca:c7:fc:46:79:af:dc:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3C:32:B8:0D:8A:EA:18:DF:73:DD:7B:2F:D7:EE:5C:B7:7F:95:F1
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/8TwyuA2K6hjfc917L9fuXLd_lfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.64.0/21
79.140.32.0/20
80.244.240.0/20
83.151.16.0/20
IPv6:
2001:4d88::/32
Signature Algorithm: sha256WithRSAEncryption
93:a6:3f:23:59:a7:d9:fc:75:e1:f1:0e:10:de:ae:7d:93:f2:
ed:f7:97:df:3b:32:94:be:10:22:10:69:7e:de:af:14:a8:a3:
d6:a6:ab:6b:f2:ca:72:63:ed:24:6c:fa:b3:4c:09:3f:eb:68:
d9:36:da:7d:76:61:89:26:d6:45:e8:14:a2:c6:0c:78:22:da:
66:b8:7c:67:df:f8:1a:5f:1a:bf:8c:53:8c:b9:22:5a:22:41:
5d:ea:91:dc:ca:cb:3e:59:13:3d:12:9a:86:93:37:ec:30:94:
f5:7d:c7:80:c5:51:01:c2:56:f3:bb:a0:ce:5f:17:55:75:b7:
e1:4f:af:e5:cd:89:e4:7f:01:3c:68:65:7d:c1:54:90:15:33:
52:e3:b8:47:4c:7d:e9:0f:58:af:28:19:c8:1a:e5:63:67:14:
07:39:9b:2b:66:6c:c7:36:4c:52:a4:ae:6f:48:23:61:8b:3f:
53:3c:0f:87:87:95:d8:85:85:0b:bb:e6:e3:3a:be:d9:57:94:
c7:27:d2:2a:73:53:dd:0e:da:65:0f:d4:10:a0:2b:a9:84:64:
22:08:94:14:21:f5:ea:0d:ba:27:1f:3f:3a:65:4d:3f:db:ca:
b0:6a:b4:4e:b4:74:83:bd:cb:94:af:59:da:6d:85:ac:5f:6b:
b4:02:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:16 2025 by rpki-client