Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/8U2ACQzYPSPV3L5sSEkKCsB8pBA.roa
File: 8U2ACQzYPSPV3L5sSEkKCsB8pBA.roa (raw, json)
Hash identifier: ZbH4IgJyW8KkApU2bDE8XFDW+P9+bjUQNudFm1PbyTE=
Subject key identifier: F1:4D:80:09:0C:D8:3D:23:D5:DC:BE:6C:48:49:0A:0A:C0:7C:A4:10
Certificate issuer: /CN=2901f5019a970ba5be0c754d20f78671818f4a2e
Certificate serial: 01942067C1E87A841DA6DDF51EFFA3925BF7
Authority key identifier: 29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/8U2ACQzYPSPV3L5sSEkKCsB8pBA.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203988
IP address blocks: 185.65.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:e8:7a:84:1d:a6:dd:f5:1e:ff:a3:92:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901f5019a970ba5be0c754d20f78671818f4a2e
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f14d80090cd83d23d5dcbe6c48490a0ac07ca410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:64:97:5b:ff:cf:54:44:8b:35:99:cf:45:
a5:55:15:8c:c9:10:73:12:eb:7b:e4:be:82:52:e9:
ae:c3:18:93:81:91:61:e3:ab:e2:3d:46:ae:b8:53:
2e:ad:0d:b8:78:b4:25:71:46:b0:1c:e3:b4:7b:5a:
24:5a:3d:bd:83:2d:64:33:e9:0c:32:fe:08:e9:08:
da:de:6a:8c:74:7e:fd:7d:05:a2:12:c3:6c:7e:77:
fa:6a:81:09:c1:47:8d:f2:8e:55:c7:40:e8:fc:a4:
cf:65:f9:00:16:08:1b:33:21:31:92:f9:c6:da:9f:
47:f9:a8:d3:13:f9:66:37:0e:b6:bf:bd:e0:3a:1f:
2c:95:4d:26:83:c7:34:34:f4:bd:3a:d4:dd:6c:3c:
34:41:ff:72:1d:40:00:74:5d:16:db:6e:b4:b2:ea:
49:22:43:09:57:07:ab:d7:b5:23:e7:d0:9d:a1:a5:
37:36:8a:21:32:9b:e6:e9:b1:5f:29:6b:48:09:03:
17:14:cf:62:aa:49:91:b4:59:5d:21:ed:01:c8:2b:
0f:f5:05:d7:44:3a:b9:50:b6:9a:25:ea:8d:22:49:
ed:5d:41:a4:08:2e:ff:af:a1:50:2d:d0:ac:1c:c9:
70:c0:c8:88:3d:4b:59:0d:a2:ad:db:cf:62:8f:b7:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:80:09:0C:D8:3D:23:D5:DC:BE:6C:48:49:0A:0A:C0:7C:A4:10
X509v3 Authority Key Identifier:
keyid:29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/8U2ACQzYPSPV3L5sSEkKCsB8pBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.136.0/24
Signature Algorithm: sha256WithRSAEncryption
85:75:98:c6:3a:56:1c:9d:c5:02:2e:87:08:f0:e3:78:17:0e:
48:19:9e:85:6a:a1:1d:e7:dd:d2:72:1c:fc:47:91:e8:a8:6b:
ed:6d:cc:63:28:7f:9b:a0:9a:11:11:5f:c3:37:6b:c7:a1:4c:
a7:59:2a:8c:19:19:06:f6:19:74:ad:76:79:5c:a4:98:c3:19:
32:bc:a9:ba:d1:3f:14:16:1c:16:62:71:45:7a:6b:6a:4c:6c:
58:20:5b:a1:66:01:00:f5:32:30:33:84:f7:42:68:07:03:a3:
46:22:90:dc:af:c8:14:9e:eb:49:ff:57:0a:e8:ae:82:a3:7d:
0a:05:59:28:56:88:8c:50:5c:ba:ad:81:2e:1d:43:14:ee:1c:
aa:d1:1e:4c:94:84:60:a9:5c:09:c2:8c:54:c0:ea:96:83:1e:
c3:70:5a:c3:81:05:fc:85:15:d2:3a:4d:54:98:27:6b:2d:db:
72:87:70:02:f1:99:b2:6f:49:23:fc:46:f4:e0:27:0e:a6:4d:
2f:1b:2a:bc:a9:a4:71:f3:65:54:09:c4:af:79:ee:d5:45:42:
ff:7a:0a:32:1c:4f:f4:43:ca:09:63:08:0a:a1:b8:52:26:33:
2a:63:bd:e8:53:65:ef:07:b3:5d:1e:9b:e6:ba:6e:0e:c1:4b:
6b:97:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:14 2025 by rpki-client