Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/t8F8AQFw9Sg48lwFee2Za5xm6eA.roa
File: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (raw, json)
Hash identifier: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=
Subject key identifier: B7:C1:7C:01:01:70:F5:28:38:F2:5C:05:79:ED:99:6B:9C:66:E9:E0
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 019426D97DBA1BEDFBE6C33B03EF056B7AC6
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/t8F8AQFw9Sg48lwFee2Za5xm6eA.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48084
IP address blocks: 185.214.244.0/22 maxlen: 24
185.214.244.0/24 maxlen: 24
185.214.245.0/24 maxlen: 24
185.214.246.0/24 maxlen: 24
185.214.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7d:ba:1b:ed:fb:e6:c3:3b:03:ef:05:6b:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c17c010170f52838f25c0579ed996b9c66e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fd:f0:e7:7e:ff:0d:9a:6d:2b:a9:47:e9:61:
37:8c:0e:99:b1:9b:ef:b8:50:a7:f5:46:e2:6c:c0:
25:e5:e5:54:7c:40:d8:a6:bd:4a:0c:4e:38:0d:98:
7e:e7:fb:fa:07:2d:ff:79:20:b2:b8:96:13:62:64:
2a:24:22:76:7c:b7:d7:aa:e0:10:cd:15:68:dc:c8:
22:f3:b6:8e:cb:c4:a4:b8:83:9d:db:52:68:3c:88:
0a:0f:b3:2f:61:cc:46:e8:ef:9f:dc:38:af:16:aa:
6a:df:50:e0:fe:f7:c4:18:87:30:cc:69:9a:56:7f:
a0:88:aa:b0:56:39:65:34:c0:05:54:0d:52:2d:f4:
8e:c2:63:42:81:eb:d5:e9:5c:a7:aa:8e:4f:08:da:
ee:4e:c6:c4:4e:20:69:00:96:b0:d2:ab:8c:a6:2c:
f7:93:4d:0b:62:1f:ff:11:69:ba:96:c0:7d:98:98:
c4:91:29:93:a8:fa:c2:22:a8:a4:18:62:e2:07:b0:
3a:39:6f:0e:1c:d0:7b:b7:48:e7:2c:c3:02:88:84:
d8:7e:c5:bf:99:7e:89:be:db:9f:9b:6e:ba:e7:55:
7e:92:72:5a:36:57:5c:1d:e5:47:11:3a:ae:11:4d:
db:e6:fa:9e:a6:21:ce:24:a7:4b:15:72:32:be:e6:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C1:7C:01:01:70:F5:28:38:F2:5C:05:79:ED:99:6B:9C:66:E9:E0
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/t8F8AQFw9Sg48lwFee2Za5xm6eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:32:4d:7e:66:5d:3a:0f:1f:e8:3c:eb:cc:0e:f0:bc:ae:5f:
f9:7c:61:2e:5b:00:87:29:3b:84:39:3d:93:7d:fe:6d:94:5b:
b1:16:9f:0b:13:fb:f8:8e:d8:d3:1b:9b:fa:7b:fc:b8:61:ff:
e9:6f:58:36:24:24:c4:26:86:f8:aa:d3:2b:7b:63:4d:f0:9d:
f7:a7:e8:8e:2b:31:27:b4:b5:07:35:4e:7a:60:a4:27:24:c0:
5f:3a:67:f1:ab:eb:65:09:87:b9:91:dd:9e:6d:cc:e0:62:49:
d1:ad:9b:5c:15:4a:87:89:83:14:78:7a:4f:e8:b5:b4:8a:f0:
75:83:12:9e:da:4f:d4:80:6e:84:0d:27:ef:3c:95:05:e8:34:
eb:22:26:13:34:45:85:04:ed:8a:e8:ca:ba:f8:12:79:8e:e8:
bb:1b:35:05:25:72:a6:6a:85:98:c7:00:8f:0e:11:1d:e9:38:
dc:ee:4b:47:2b:1b:08:e4:51:79:ca:97:d5:8f:5c:68:9a:4f:
91:94:3c:2b:56:25:0d:12:26:b4:a3:2f:db:ae:21:bb:6c:db:
b4:14:fb:0d:5d:d5:a3:d3:20:7a:2c:aa:17:d9:66:36:e2:06:
fd:b4:db:ae:8b:eb:d2:84:7f:e1:28:f9:19:e3:00:2e:d7:37:
68:6e:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:04 2025 by rpki-client