Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8B4WW-ZUou1DVQ22KoWbO7JRRI0.roa
File: 8B4WW-ZUou1DVQ22KoWbO7JRRI0.roa (raw, json)
Hash identifier: TvP1QX0vpJH9L2Q3Li123Rof34BoacONx9U6QsxaMrM=
Subject key identifier: F0:1E:16:5B:E6:54:A2:ED:43:55:0D:B6:2A:85:9B:3B:B2:51:44:8D
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018BB292A78164381E0F9DAFA54817FF8EB0
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8B4WW-ZUou1DVQ22KoWbO7JRRI0.roa
Signing time: Thu 09 Nov 2023 05:33:57 +0000
ROA not before: Thu 09 Nov 2023 05:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216127
IP address blocks: 194.28.226.0/24 maxlen: 24
89.23.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:92:a7:81:64:38:1e:0f:9d:af:a5:48:17:ff:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 9 05:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f01e165be654a2ed43550db62a859b3bb251448d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:a8:52:a2:d6:8a:26:b0:bd:38:71:4f:ce:
31:92:c2:06:1d:66:73:fb:ca:1f:a0:b6:83:e0:86:
5e:68:8b:5c:3c:f9:7f:a1:86:d7:75:c2:ce:c3:b4:
26:fd:d9:e5:0b:be:be:2a:b8:f7:ef:1d:40:c5:c2:
b1:b2:f3:3a:81:86:ee:7c:b6:43:2f:76:17:cc:48:
05:d1:eb:c1:fb:13:26:3d:6f:1c:66:75:4d:74:45:
fb:ff:bc:91:72:ae:b3:20:18:0f:73:7a:68:ed:01:
a7:51:c2:7a:e4:93:eb:54:f8:4e:82:c4:63:c1:88:
03:81:04:c9:b0:e0:08:9f:d8:66:ef:25:d8:98:07:
b8:6b:32:ef:cb:4b:80:a1:ca:78:4c:85:6d:f1:ad:
2c:79:27:f6:f6:62:72:c6:d8:2b:53:09:92:dc:97:
3c:96:e6:f1:e2:dd:9b:2a:91:e2:71:5b:5c:19:13:
73:22:06:55:f0:7b:d4:82:cc:f4:ee:26:1b:d0:f3:
21:be:e4:bd:02:93:bf:a9:6f:cd:40:ae:5d:ca:d8:
0e:8a:b9:34:a2:c7:e6:c7:0a:4c:5d:1c:fd:8d:ec:
13:09:ef:e4:ef:8f:79:a3:47:e0:61:61:a6:9e:0a:
0a:12:63:e9:d0:71:cc:13:f8:da:49:11:e1:eb:8b:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1E:16:5B:E6:54:A2:ED:43:55:0D:B6:2A:85:9B:3B:B2:51:44:8D
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8B4WW-ZUou1DVQ22KoWbO7JRRI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.123.0/24
194.28.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a7:3c:56:4c:a4:31:9d:1b:e0:9b:e1:ea:08:8a:a2:fd:a9:
8c:22:66:bb:d3:08:a5:44:c5:82:6a:d3:7f:88:ab:e9:1c:d4:
29:91:d7:89:d8:dd:f1:12:d9:f7:42:27:e1:f8:ae:c6:2a:71:
c7:64:28:67:3b:a1:d9:db:7d:d6:68:da:fb:d7:58:f9:87:58:
d6:e5:fa:22:e0:ab:b1:6d:c3:83:d9:17:e9:dc:6d:b7:4b:8d:
ce:3c:81:93:bc:65:35:fb:94:12:35:90:1b:97:49:e4:00:a1:
9e:a2:42:00:4b:72:54:94:c4:a2:ce:42:68:73:8c:ce:e6:b4:
82:e1:9c:77:0c:f1:64:3f:ec:75:89:04:65:05:cc:a3:fd:e0:
48:15:38:ec:b3:46:a5:37:c0:c8:b2:97:b9:b1:e4:d9:e6:46:
d1:e3:4d:0b:95:4d:f2:d7:03:47:1f:55:ee:09:92:ef:7b:1f:
e5:09:37:af:aa:7b:b2:bd:c1:27:2a:d7:af:d3:64:c0:1d:ce:
9b:da:a9:38:e7:81:c4:8f:a9:45:d6:11:9d:68:aa:a4:e9:44:
a2:d9:2b:c8:4a:6c:1c:4c:62:96:ae:7b:23:2d:ee:68:09:58:
e7:09:29:f6:7c:3f:1d:48:4f:d5:52:9b:ae:40:4c:29:55:ca:
b4:b6:b7:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuykqeBZDgeD52vpUgX/46wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMxMTA5MDUzMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDFlMTY1YmU2NTRhMmVkNDM1NTBkYjYyYTg1OWIzYmIyNTE0NDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNCoUqLWiiawvThxT84xksIGHWZz
+8ofoLaD4IZeaItcPPl/oYbXdcLOw7Qm/dnlC76+Krj37x1AxcKxsvM6gYbufLZD
L3YXzEgF0evB+xMmPW8cZnVNdEX7/7yRcq6zIBgPc3po7QGnUcJ65JPrVPhOgsRj
wYgDgQTJsOAIn9hm7yXYmAe4azLvy0uAocp4TIVt8a0seSf29mJyxtgrUwmS3Jc8
lubx4t2bKpHicVtcGRNzIgZV8HvUgsz07iYb0PMhvuS9ApO/qW/NQK5dytgOirk0
osfmxwpMXRz9jewTCe/k7495o0fgYWGmngoKEmPp0HHME/jaSRHh64sHqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPAeFlvmVKLtQ1UNtiqFmzuyUUSNMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvOEI0V1ctWlVvdTFEVlEyMktvV2JPN0pSUkkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRd7AwQA
whziMA0GCSqGSIb3DQEBCwUAA4IBAQBepzxWTKQxnRvgm+HqCIqi/amMIma70wil
RMWCatN/iKvpHNQpkdeJ2N3xEtn3Qifh+K7GKnHHZChnO6HZ233WaNr711j5h1jW
5foi4KuxbcOD2Rfp3G23S43OPIGTvGU1+5QSNZAbl0nkAKGeokIAS3JUlMSizkJo
c4zO5rSC4Zx3DPFkP+x1iQRlBcyj/eBIFTjss0alN8DIspe5seTZ5kbR400LlU3y
1wNHH1XuCZLvex/lCTevqnuyvcEnKtev02TAHc6b2qk454HEj6lF1hGdaKqk6USi
2SvISmwcTGKWrnsjLe5oCVjnCSn2fD8dSE/VUpuuQEwpVcq0trda
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:05 2025 by rpki-client