Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/1-vGsC17KAMvj9iPw5hzyT1K2O7M.roa
File: 1-vGsC17KAMvj9iPw5hzyT1K2O7M.roa (raw, json)
Hash identifier: crWYlz6And/WjwsRxsjTMdzzQyIY3MAqueK9xPOwRVQ=
Subject key identifier: FA:F1:AC:0B:5E:CA:00:CB:E3:F6:23:F0:E6:1C:F2:4F:52:B6:3B:B3
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 0194228DFB70D137905101B90CE7C6E79DD4
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/1-vGsC17KAMvj9iPw5hzyT1K2O7M.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8455
IP address blocks: 185.121.92.0/22 maxlen: 24
185.121.93.0/24 maxlen: 24
185.121.94.0/24 maxlen: 24
185.121.95.0/24 maxlen: 24
2a03:8300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fb:70:d1:37:90:51:01:b9:0c:e7:c6:e7:9d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf1ac0b5eca00cbe3f623f0e61cf24f52b63bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:74:31:9a:17:89:f8:d0:a1:4d:12:b2:08:
71:80:64:c2:83:6d:b5:d2:11:9e:ba:da:f2:be:75:
ee:3c:1f:58:8e:1a:a8:a5:1a:88:11:dc:cd:ae:89:
ec:56:a1:35:32:6b:83:06:ef:c8:95:15:05:1a:f3:
d1:4d:de:69:7d:52:70:95:a4:f5:4f:0b:df:26:b6:
03:78:88:92:64:90:f2:5e:6b:9f:4a:6f:69:29:2b:
0d:dc:6e:83:e0:df:64:0f:9f:55:ef:48:17:7c:b5:
34:c9:22:ef:76:fa:a2:9b:92:d2:81:86:66:f9:c2:
23:fd:d4:42:48:72:9e:c5:35:ca:76:9b:82:f5:aa:
2c:b6:bc:5a:33:06:db:18:57:94:89:93:a1:ff:69:
2f:13:fd:58:c0:8e:74:1d:de:df:02:25:98:8e:ac:
0a:61:34:f8:7c:a7:5c:34:ee:b6:bb:11:da:46:50:
05:ef:af:02:1c:83:db:45:bb:7e:69:c7:bb:3a:25:
d8:94:37:10:6b:7d:56:21:a8:f6:be:a5:e6:42:f7:
d3:bb:48:68:7b:c7:e4:98:93:03:0e:8f:b8:7a:bd:
c5:5d:ca:76:53:bb:0d:b4:64:b5:10:7a:08:32:27:
49:28:41:4c:5f:54:88:86:f8:a3:e2:0d:03:77:56:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:AC:0B:5E:CA:00:CB:E3:F6:23:F0:E6:1C:F2:4F:52:B6:3B:B3
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/1-vGsC17KAMvj9iPw5hzyT1K2O7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.92.0/22
IPv6:
2a03:8300::/32
Signature Algorithm: sha256WithRSAEncryption
56:8b:a5:b5:43:03:e9:57:fd:a2:d6:b9:7f:22:13:d5:90:9d:
96:08:e2:38:06:75:ac:2a:04:4f:34:f9:fa:35:16:9f:6d:4d:
6b:d7:02:62:57:2a:ca:90:91:b5:08:80:e7:e4:67:e5:11:e4:
cd:1f:c1:50:5c:7e:22:1b:8d:67:4a:b7:b2:3c:9b:da:2d:c2:
a2:65:4c:e9:d8:a0:13:58:b2:9d:32:bb:4e:0e:c7:7f:48:72:
06:54:0e:28:67:aa:5d:e7:bf:ef:c8:c5:26:11:be:0a:14:f5:
a6:c7:73:20:37:36:8b:56:b5:84:78:34:d1:52:3c:3f:4b:b6:
c0:f6:d5:21:84:e6:04:83:7b:fb:d2:32:c2:04:df:45:b0:d9:
21:f8:bd:d0:75:8d:a9:0a:bf:23:2c:2a:0c:88:16:f6:11:5b:
79:68:5f:76:09:ec:a6:43:13:8b:1c:82:9b:fd:35:d6:38:ac:
ba:a3:9e:3e:63:c1:45:bd:4b:fb:0b:34:b8:df:b0:17:05:7a:
17:a3:59:86:04:51:0c:bb:7a:11:53:9d:6d:80:c9:de:5c:88:
a3:71:72:00:d8:3b:87:f6:b6:2a:63:a5:fd:98:ac:ff:9b:37:
d3:bc:c0:2d:6c:82:c6:a6:a1:93:3c:ce:a8:dd:eb:7f:f3:94:
e7:8a:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:50 2025 by rpki-client