Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa
File: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (raw, json)
Hash identifier: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=
Subject key identifier: 07:C7:3E:2A:28:AE:59:56:CA:75:DE:84:CA:BF:30:01:E3:D4:11:66
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 01941F8C6CD0E45D49DBCCFFBE8DE3DF49EA
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201246
IP address blocks: 103.58.8.0/22 maxlen: 24
185.80.19.0/24 maxlen: 24
188.114.120.0/24 maxlen: 24
188.114.121.0/24 maxlen: 24
2a05:7980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6c:d0:e4:5d:49:db:cc:ff:be:8d:e3:df:49:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07c73e2a28ae5956ca75de84cabf3001e3d41166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:ce:89:67:d9:c7:1b:c5:7e:da:64:d4:8d:
c6:9a:f4:73:15:47:5c:5e:56:22:b2:51:96:cd:f4:
25:68:0f:fd:91:eb:2c:ac:7c:3f:48:fe:bc:5d:4e:
e2:0c:e8:5e:db:ad:2a:d1:ba:e9:9d:f9:f6:6d:a5:
53:b6:46:c4:9e:d1:46:c6:d4:6e:ea:8f:2c:96:d9:
ad:d4:86:f6:8d:59:e7:fe:a7:0b:24:42:fc:6d:f1:
cb:8f:d8:0c:9a:ef:4a:b4:0b:90:60:f0:d0:c4:b5:
fb:79:74:0c:f3:bc:66:60:43:af:f5:41:10:5e:c7:
d2:d4:64:36:ca:d5:43:a7:00:15:02:20:02:6f:08:
7f:a9:b5:46:a1:38:46:78:c2:2e:6a:d4:2a:99:59:
66:bf:09:e0:58:bf:8b:f2:8b:f0:dd:ff:86:70:1f:
cc:14:1a:77:49:58:b0:5f:87:b3:5b:d0:40:6a:c3:
1d:66:0f:db:7e:7c:ab:f5:53:02:45:60:02:b4:f0:
d5:ba:17:37:03:92:a8:67:d6:04:4a:fa:45:28:4b:
3c:11:48:8d:f9:e0:6e:0b:9f:4a:05:a8:02:5e:b2:
21:9d:96:37:61:bc:20:03:52:1f:70:f4:41:61:d5:
de:5d:57:f9:94:04:9a:a6:d0:3b:9d:37:6b:84:d3:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:3E:2A:28:AE:59:56:CA:75:DE:84:CA:BF:30:01:E3:D4:11:66
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.8.0/22
185.80.19.0/24
188.114.120.0/23
IPv6:
2a05:7980::/29
Signature Algorithm: sha256WithRSAEncryption
63:a1:b6:8a:69:3a:4e:b3:a8:86:8e:af:a3:63:28:9a:ff:4b:
40:b2:51:4b:d2:9f:a9:03:73:56:8e:ea:6a:d6:3d:1d:5b:ac:
fc:0d:b5:06:19:4d:95:6f:51:bb:72:cd:7a:35:53:b5:45:ad:
17:57:bd:0c:70:4b:73:af:ba:38:2e:1d:f9:37:3f:b5:90:6e:
b9:b1:7e:8b:fe:8b:f1:05:e5:7c:1e:4b:55:77:0f:98:e2:b9:
f5:03:10:7b:9a:c0:71:77:60:c6:ca:49:aa:f8:d9:88:c3:66:
e4:c2:c8:20:54:a9:7f:f0:4c:49:70:27:26:35:9e:c9:d3:b0:
8a:81:8c:64:c4:77:6d:74:e3:6c:e5:55:49:89:f1:3b:44:76:
96:9f:c0:87:26:7f:b3:6a:66:6c:0f:ed:79:0b:15:db:ee:87:
24:d8:78:2d:12:43:cd:70:c7:94:7a:d8:49:72:6b:32:a3:52:
6e:1c:89:54:80:94:39:95:30:e7:c7:a1:dd:1a:a5:52:20:2c:
a8:46:67:3d:c4:80:de:1c:ea:ba:4f:80:43:09:9e:cf:82:80:
d9:af:5f:32:a3:4f:b6:6d:a7:83:e4:e0:1a:da:bc:38:e5:04:
3f:d2:71:da:9f:08:c1:fb:24:3d:c7:3f:11:e5:54:72:5b:bd:
f8:9d:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:19 2025 by rpki-client