Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/8jfLOWrmGDDvWQJNnJgyiMC8iUk.roa
File: 8jfLOWrmGDDvWQJNnJgyiMC8iUk.roa (raw, json)
Hash identifier: 9ZylXMdQ8kCZ39z9f3QrUAyi00wBGTAAGALxBdEj8Cs=
Subject key identifier: F2:37:CB:39:6A:E6:18:30:EF:59:02:4D:9C:98:32:88:C0:BC:89:49
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019428233BEAE790BA063DF38A00F7EFE64F
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/8jfLOWrmGDDvWQJNnJgyiMC8iUk.roa
Signing time: Thu 02 Jan 2025 17:49:45 +0000
ROA not before: Thu 02 Jan 2025 17:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43885
IP address blocks: 188.215.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3b:ea:e7:90:ba:06:3d:f3:8a:00:f7:ef:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 2 17:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f237cb396ae61830ef59024d9c983288c0bc8949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:29:5a:76:1f:98:b1:39:67:a9:7a:8a:d6:
03:6d:fa:69:cb:c6:08:57:33:b2:eb:68:9b:e3:77:
c4:5a:f3:58:cc:5d:86:51:13:ab:ff:89:d6:d2:c4:
df:da:41:be:cd:ee:1e:87:c0:40:24:68:e4:27:39:
23:9f:82:e9:8d:92:09:53:a2:b6:f2:89:29:1c:5f:
8c:58:ad:bc:28:44:c3:28:0a:3f:00:1c:79:10:99:
56:ca:f4:09:fc:ad:28:81:fa:8e:6e:e7:88:9f:b4:
6d:0d:1e:22:e1:72:72:e9:58:48:06:99:bc:d2:5b:
c1:59:20:bf:6a:de:27:f7:14:d9:0e:36:a3:8a:d9:
56:dd:4b:4b:6e:8b:00:5e:3b:8b:bd:cd:af:32:8e:
a7:49:73:5d:dd:38:ca:e5:ee:22:0e:d8:fe:0e:7b:
4b:52:d9:9d:60:2d:72:53:c0:f3:4b:b9:c4:b6:78:
b8:a1:4b:f9:11:c2:27:b5:11:08:1b:b2:b4:d9:2e:
d6:cd:77:7f:31:59:6f:de:3d:1b:7d:3d:d3:7f:c8:
ea:66:a5:be:20:32:6f:45:26:b3:b6:53:2d:29:07:
8e:87:09:63:49:71:9b:5a:42:36:e0:9b:51:d0:0e:
2e:3f:e6:a3:73:64:b0:ba:b3:b6:8e:d9:f2:fd:ce:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:37:CB:39:6A:E6:18:30:EF:59:02:4D:9C:98:32:88:C0:BC:89:49
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/8jfLOWrmGDDvWQJNnJgyiMC8iUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.84.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c6:c0:ff:5f:a2:8f:9a:29:40:5d:9e:1d:80:02:26:56:45:
e6:1c:48:86:42:ae:03:32:39:76:1a:38:ea:f0:01:a2:f5:b7:
e5:3e:70:f6:be:55:df:54:d2:58:28:39:55:77:06:71:58:b8:
61:62:36:01:a8:ce:77:84:84:66:47:06:4a:56:dd:36:ab:63:
ab:cf:38:24:72:38:68:28:4a:83:6a:27:e6:d2:7a:e2:b6:71:
d2:8d:19:c5:bf:c8:19:fe:d1:7e:c5:2b:6f:e2:a7:56:34:2a:
75:37:28:1f:1c:82:e2:58:32:d5:ac:97:31:de:5b:67:e9:7f:
c4:0f:e9:e4:bd:58:31:54:97:3c:4f:7f:2e:cc:fd:67:6d:ff:
ae:04:af:47:bf:b3:61:95:27:8d:f2:9c:e4:87:4e:be:b8:ec:
83:5a:a0:28:56:62:76:85:6c:b2:be:5f:a8:1a:71:a3:21:ef:
d2:53:b0:53:c7:46:6c:fc:9b:b8:56:01:d2:db:b8:ac:ef:8b:
54:c8:f9:00:62:1c:dc:89:6b:98:3e:e6:87:87:73:f6:6c:be:
9b:64:a1:4a:cb:6d:92:2c:24:73:c2:c7:b5:09:46:3d:6d:1d:
17:45:89:0b:89:2f:63:29:db:45:81:ae:ce:36:e5:c9:cb:df:
ef:61:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:53 2025 by rpki-client