Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/8Rf0japIE05N1Y5vujyR2Dd0trI.roa
File: 8Rf0japIE05N1Y5vujyR2Dd0trI.roa (raw, json)
Hash identifier: vcw9nl/fiRctjOwbBV/JrvSfRaMn3/hHGpzoyXDaC8w=
Subject key identifier: F1:17:F4:8D:AA:48:13:4E:4D:D5:8E:6F:BA:3C:91:D8:37:74:B6:B2
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA7638ADEF7DF52C6E8BCC9A0AA419
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/8Rf0japIE05N1Y5vujyR2Dd0trI.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199891
IP address blocks: 82.160.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:38:ad:ef:7d:f5:2c:6e:8b:cc:9a:0a:a4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f117f48daa48134e4dd58e6fba3c91d83774b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:da:4a:e0:f4:02:f3:ee:4f:0e:bf:a0:54:
57:cd:cb:b5:99:45:54:77:e8:ae:ce:c2:2c:72:bb:
55:bb:65:a5:c2:b3:e5:34:d6:ba:a3:33:8e:15:97:
7f:8b:1d:91:de:91:bc:e5:31:b4:ed:b5:0c:0e:3f:
30:08:c6:29:19:d2:2a:e1:60:4f:93:8a:df:b6:0b:
77:91:f5:f2:14:58:f8:9e:ac:77:c1:25:34:4f:cb:
d5:55:b0:0a:bd:5e:a7:4c:a6:92:c0:8e:6c:61:72:
ad:b9:a5:63:27:c5:80:a5:99:01:c7:37:40:6d:e5:
d8:89:52:43:7e:ac:3c:24:37:df:31:9f:88:ba:0d:
04:83:33:64:5d:af:59:07:09:f0:99:80:f8:5d:41:
3e:be:d3:0a:3c:de:f5:3c:0c:76:1b:c2:c4:9f:49:
c0:b9:6f:ed:16:15:a6:cd:9f:e7:c4:e8:2e:f6:6a:
bd:b6:e0:23:9a:3d:13:ce:71:0a:f7:8d:fc:66:57:
b8:e6:c5:ea:7b:84:48:ab:3c:30:09:d8:7d:92:84:
f8:f3:a2:c7:42:04:d7:76:4e:2b:9a:cc:c4:56:04:
7a:17:25:27:73:3d:55:b2:34:cc:e7:a2:e3:6b:c5:
7b:57:48:f4:8d:a3:67:90:59:9c:89:4c:c6:4b:c3:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:F4:8D:AA:48:13:4E:4D:D5:8E:6F:BA:3C:91:D8:37:74:B6:B2
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/8Rf0japIE05N1Y5vujyR2Dd0trI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.220.0/24
Signature Algorithm: sha256WithRSAEncryption
22:32:e5:65:a6:e0:c9:e5:9a:6c:ff:c9:70:27:a2:81:c8:0d:
f4:83:96:6c:69:ed:c1:bf:40:57:fe:2b:4f:4c:5f:33:f8:f9:
58:fb:ff:87:4b:7a:6b:6d:b6:c3:48:ef:34:2a:7b:a1:bc:84:
bd:8a:8a:ac:5d:e2:bf:70:32:80:bb:2a:26:67:42:45:f1:97:
a9:ef:d8:90:08:a0:96:79:ec:27:b6:15:11:73:fc:e8:ba:b9:
92:af:f7:a9:3a:f0:25:c1:07:8c:ea:2c:29:17:30:eb:42:26:
94:ea:dd:72:fe:bb:7f:bd:78:39:d8:32:5b:b9:cd:b6:6a:27:
05:36:4c:3a:43:f7:67:36:f6:85:1e:df:ef:b5:a4:86:38:cf:
ed:7c:61:3d:cb:77:ad:8e:0d:9c:62:0c:de:a7:86:14:cf:4d:
b9:62:e7:cb:9e:98:e3:d2:7c:c1:f5:a1:f4:7e:18:3d:e8:f7:
ed:4c:fd:98:ef:51:16:d1:ae:07:9e:c1:7a:52:a1:bb:fe:d8:
18:7e:50:b8:f4:ba:4f:a2:ee:da:64:72:44:d5:f9:d0:04:05:
cc:6a:30:5e:f8:50:ca:14:84:8f:f9:c4:f1:82:82:55:10:70:
02:0d:e0:ef:b4:81:b4:84:64:db:fa:8c:57:47:8d:42:59:8c:
2a:be:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:20 2025 by rpki-client