Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/yI6d1S05VUz0QY-pw0Sb7c0mK3g.roa
File: yI6d1S05VUz0QY-pw0Sb7c0mK3g.roa (raw, json)
Hash identifier: nlExao6EjzUkd5CMjjgjOU/lBqyQZP29vMZMmMZee4w=
Subject key identifier: C8:8E:9D:D5:2D:39:55:4C:F4:41:8F:A9:C3:44:9B:ED:CD:26:2B:78
Certificate issuer: /CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Certificate serial: 01942747C99180337D3CAFE79B3A6612D9BF
Authority key identifier: BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/yI6d1S05VUz0QY-pw0Sb7c0mK3g.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 185.217.8.0/24 maxlen: 24
185.217.9.0/24 maxlen: 24
185.217.10.0/24 maxlen: 24
185.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c9:91:80:33:7d:3c:af:e7:9b:3a:66:12:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c88e9dd52d39554cf4418fa9c3449bedcd262b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:94:ac:30:13:8e:68:81:1a:06:da:a3:3d:
4c:af:15:ce:32:a5:fa:fa:bf:d9:c1:d0:1e:41:20:
23:71:0e:df:f9:9e:79:41:0d:b6:c1:cc:cb:08:aa:
e5:6e:31:f5:75:c1:98:80:df:51:a9:0b:f0:02:8c:
9c:9e:5b:4b:18:e6:b6:04:e6:aa:09:29:a7:05:bf:
3c:86:d2:fd:67:3a:ea:fb:ef:93:f1:a1:68:ce:9e:
cf:68:6e:88:93:3b:e1:71:9e:df:9e:2c:86:56:8b:
57:65:f8:eb:5e:04:0c:62:e1:8e:93:3b:40:a5:97:
12:b1:b0:d8:8f:f6:4d:cd:f9:2d:4a:f9:da:5d:d1:
7c:32:63:3b:e7:03:91:aa:5d:92:71:05:82:25:f3:
5d:c1:63:7e:33:03:8a:85:8d:ae:e4:46:b6:bc:22:
e1:10:5b:0e:5f:37:28:23:4f:e5:06:62:9c:45:d0:
d6:da:6b:5d:0e:fd:32:99:ec:9a:08:3c:09:8f:ef:
fc:3b:ca:78:d3:c5:0e:0f:46:22:d1:6c:06:04:dd:
9b:52:8c:cc:ba:b0:70:b6:fd:53:0a:70:9f:f4:ff:
85:19:88:7d:39:e2:2a:95:f5:2d:d1:70:f2:26:08:
40:45:33:70:ee:57:8b:4c:2d:4f:e6:64:11:72:1a:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:9D:D5:2D:39:55:4C:F4:41:8F:A9:C3:44:9B:ED:CD:26:2B:78
X509v3 Authority Key Identifier:
keyid:BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/yI6d1S05VUz0QY-pw0Sb7c0mK3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.8.0/22
Signature Algorithm: sha256WithRSAEncryption
86:e2:89:70:e3:7e:6c:0b:9e:5f:93:b5:4a:50:f1:b7:86:da:
ba:99:7f:ba:36:af:d9:9b:05:bb:71:af:e9:7f:bf:05:1b:a6:
a5:d7:2b:e6:4e:c5:32:55:b9:4d:f3:7b:ea:dc:db:32:de:c4:
4c:be:6d:61:ef:99:26:b3:af:48:5f:b5:93:c6:1b:17:16:6f:
d7:00:4a:55:62:3c:05:cd:49:19:37:2d:b2:bc:60:97:e8:7a:
9c:db:0a:ac:76:3c:b1:5c:f6:38:c8:55:1c:7b:11:44:8f:fb:
7c:03:60:95:9e:49:8e:53:80:d0:37:4d:09:9d:f7:3c:5a:da:
ff:d6:98:28:d1:5a:bd:07:4e:be:71:9e:dd:63:47:11:be:05:
f6:4a:f8:20:59:34:d5:00:7d:4a:a5:13:a2:39:c6:dc:65:a8:
1c:ba:a7:59:53:1f:1b:89:65:85:65:a8:89:37:56:79:26:24:
38:5a:ed:2c:08:cf:a0:42:ff:f8:14:ea:5f:d0:62:35:b4:14:
87:cf:5d:05:fb:98:75:aa:06:ab:40:ed:67:9e:c6:57:34:58:
47:a3:63:87:aa:f9:4a:9e:ec:c8:ed:de:d2:05:2e:1d:59:7c:
d5:16:ad:38:3a:7d:de:e0:c0:88:7d:5d:f8:15:bf:e6:bd:de:
02:52:da:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:14:14 2025 by rpki-client