Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/8GwFBjMlZs9zvniW53JhhsnvBso.roa
File: 8GwFBjMlZs9zvniW53JhhsnvBso.roa (raw, json)
Hash identifier: qTLnle1OUXCO2W6fCQcBbItxyYrDsAdEAQkBEhvJh1M=
Subject key identifier: F0:6C:05:06:33:25:66:CF:73:BE:78:96:E7:72:61:86:C9:EF:06:CA
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 0194221FDE43997C5ACBD553FEEC2700CECF
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/8GwFBjMlZs9zvniW53JhhsnvBso.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210236
IP address blocks: 194.110.160.0/22 maxlen: 24
2a05:3a40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:de:43:99:7c:5a:cb:d5:53:fe:ec:27:00:ce:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f06c0506332566cf73be7896e7726186c9ef06ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:df:3e:1f:f2:dc:6c:58:8d:a1:de:6f:ff:
5d:78:84:50:fc:f8:f7:0a:f1:f8:38:81:82:95:bd:
e8:70:70:c9:25:96:b1:11:7c:33:28:4c:2d:69:15:
42:41:36:0a:1e:03:a6:15:3f:08:9c:bd:fc:73:88:
3b:0b:4c:48:ea:0c:76:d9:10:9b:5b:d8:45:16:8c:
b2:2f:87:32:db:b1:97:c9:55:fa:19:ff:89:f0:7b:
b1:d8:6f:be:9d:f1:08:a0:fd:76:64:04:8a:56:e4:
88:d9:12:0e:58:4a:43:c9:37:e5:37:00:74:5e:0f:
82:6b:bc:04:4b:79:33:0c:04:6c:4f:79:ef:ff:a9:
48:c9:fa:e4:75:8d:43:e4:5c:45:63:db:72:bb:c6:
ab:07:fb:65:50:eb:48:c1:18:09:fe:d7:86:41:29:
aa:ce:11:85:a4:e0:eb:62:61:eb:25:14:6e:39:3c:
fb:ee:17:01:37:39:c5:1d:d8:a8:ab:08:13:df:1d:
62:b5:f7:9b:6b:ca:8b:7a:81:4b:1d:7a:3d:25:4a:
e9:5a:48:d5:b2:07:54:1a:53:13:14:ea:c3:73:96:
d5:3b:b8:4f:90:5a:94:06:06:3e:d3:ba:19:a0:8f:
d2:5b:bf:8f:3f:c0:b2:4b:44:f0:c5:d5:97:af:8e:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:05:06:33:25:66:CF:73:BE:78:96:E7:72:61:86:C9:EF:06:CA
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/8GwFBjMlZs9zvniW53JhhsnvBso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.160.0/22
IPv6:
2a05:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
72:c0:ce:79:f9:7a:41:3d:85:54:ea:c3:78:a6:27:71:37:92:
d1:5c:22:cd:99:23:7f:79:ef:59:3a:73:f2:45:15:7e:47:5c:
35:60:9a:a4:f5:29:8b:b2:5d:3d:a2:17:b8:76:51:b6:1b:a4:
c9:4d:85:dd:11:bd:cf:c5:ef:b5:1b:7a:40:13:60:7d:28:f2:
e7:21:15:a5:78:d8:dd:99:36:c1:64:d6:05:7c:8b:b9:23:15:
14:05:d7:06:8a:e3:4c:17:a3:98:dd:62:54:fc:70:61:bf:c6:
0d:e5:83:c3:24:ed:a7:c6:c5:1f:ed:57:90:f7:a3:78:bf:c9:
29:30:29:df:8b:33:be:17:f8:6c:c8:86:28:c7:23:a2:55:d6:
4e:4d:11:49:e1:42:d8:0b:1d:5f:95:36:76:aa:d4:97:86:6b:
b3:5a:aa:1d:f0:8e:17:f1:84:87:cc:5f:bb:6c:72:00:39:5a:
91:bb:81:ed:2f:7a:83:b3:b5:17:aa:4d:3f:e1:8d:cd:0a:09:
42:94:9d:14:f5:c4:11:83:7a:9f:46:f0:f3:e7:32:46:3a:fa:
aa:af:cb:f5:84:34:77:66:27:38:0b:f3:15:b8:99:df:78:6c:
e7:91:8f:85:6a:66:35:3e:00:64:2c:e4:f7:24:e6:ba:71:21:
a9:e7:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:10:58 2025 by rpki-client