Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/8x6SWTgZKaQldoz2iRV_QSdqbtg.roa
File: 8x6SWTgZKaQldoz2iRV_QSdqbtg.roa (raw, json)
Hash identifier: LzTLrE8ZLdriPR/s+lretToH9KQur6QiGymJnQCIGiw=
Subject key identifier: F3:1E:92:59:38:19:29:A4:25:76:8C:F6:89:15:7F:41:27:6A:6E:D8
Certificate issuer: /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial: 019420D5E4697EAB5479FF8E3191432F036D
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/8x6SWTgZKaQldoz2iRV_QSdqbtg.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16290
IP address blocks: 84.23.160.0/19 maxlen: 19
217.117.128.0/22 maxlen: 22
217.117.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e4:69:7e:ab:54:79:ff:8e:31:91:43:2f:03:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f31e9259381929a425768cf689157f41276a6ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:12:ad:0f:72:57:60:db:af:d4:8f:28:ca:
59:03:08:42:b8:e1:0d:40:0d:d2:80:a9:82:f3:3b:
07:0b:33:80:52:24:7d:1c:9f:2d:69:6e:a7:f0:77:
ed:6b:99:89:09:57:71:09:08:17:c9:5e:37:d0:e3:
65:31:48:43:39:fb:8e:2c:3a:8b:c1:00:53:97:6c:
43:5f:dd:f2:06:c4:0a:d1:56:93:fa:a5:87:11:98:
2d:85:64:42:0b:f2:81:cb:c2:7c:c8:1f:6e:67:9a:
d2:21:2e:66:03:b8:95:d7:f5:47:42:c6:13:ad:94:
09:4f:7f:a3:86:cb:05:77:27:5d:89:21:d1:92:51:
b2:f0:b7:41:ba:f0:57:3d:44:4c:39:f8:2e:73:75:
0b:2c:5b:f5:ba:12:f6:71:cf:ee:f4:5d:ce:49:09:
52:34:04:35:5c:2e:8b:d4:23:7d:b5:dc:db:df:47:
73:5a:58:9f:e0:59:3a:83:df:52:f0:ac:37:22:40:
86:51:a1:81:bf:67:b4:63:49:fc:bf:80:5e:b2:cb:
47:59:37:b2:62:c2:d6:2b:07:06:df:aa:47:c4:05:
c2:86:21:55:08:53:02:07:d4:c1:87:c9:8f:c4:a1:
54:e1:43:fe:7e:cb:44:d1:e3:16:d5:cc:df:4b:bf:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:92:59:38:19:29:A4:25:76:8C:F6:89:15:7F:41:27:6A:6E:D8
X509v3 Authority Key Identifier:
keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/8x6SWTgZKaQldoz2iRV_QSdqbtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.160.0/19
217.117.128.0/22
217.117.136.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:bd:47:f1:9c:c4:52:3e:89:76:8d:46:d8:75:41:7d:fd:5a:
37:e4:df:ef:0c:91:98:ed:c3:77:5c:52:db:9a:37:99:ea:38:
2d:92:a0:c1:e9:81:d2:01:69:08:2e:84:28:14:5c:0e:d6:a6:
ad:10:b9:e4:ed:bb:b0:9a:c7:6f:02:e4:e1:66:c4:ef:2e:22:
7c:35:d8:e3:e2:f8:3f:68:55:89:40:ff:db:e7:fc:03:6a:03:
e4:e1:f3:25:a2:ca:8d:2d:0c:37:13:48:91:a5:76:fd:67:c7:
05:26:72:97:9e:c4:9a:08:92:e1:30:96:7b:7e:88:7c:e3:82:
11:88:01:80:1e:92:2a:2c:c4:97:26:09:28:c1:ff:a7:42:a5:
41:20:5d:ab:27:bc:fc:c6:37:ee:8b:84:76:44:bb:f7:ec:22:
2a:a0:4e:65:a2:05:6d:5b:03:f7:34:3b:85:76:02:5b:b2:ce:
b5:04:02:9f:ca:22:5a:48:c0:6d:b0:2c:b9:cf:1e:5c:e9:2d:
87:29:73:36:ed:c5:97:72:1e:24:37:64:51:ae:b9:9a:02:27:
53:5e:fb:50:d1:c7:76:64:0f:29:5b:ab:aa:a4:13:65:62:0c:
06:71:00:f8:6c:93:95:61:83:98:91:33:f5:47:5c:ba:22:0c:
8e:0a:53:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:13:36 2025 by rpki-client