Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/V8Dfs8eEJcHNGVzAknNNIstObrk.roa
File: V8Dfs8eEJcHNGVzAknNNIstObrk.roa (raw, json)
Hash identifier: vZ08rQR7W/CFK8SEObIXpjmpE2NNJtZpcZvl055oiV0=
Subject key identifier: 57:C0:DF:B3:C7:84:25:C1:CD:19:5C:C0:92:73:4D:22:CB:4E:6E:B9
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01941FFA5F1319C0953B999791367F7319F2
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/V8Dfs8eEJcHNGVzAknNNIstObrk.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214780
IP address blocks: 94.127.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5f:13:19:c0:95:3b:99:97:91:36:7f:73:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57c0dfb3c78425c1cd195cc092734d22cb4e6eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:ec:1e:35:0c:46:c6:5e:d0:6a:ad:1f:48:
4d:b8:f6:0e:17:26:8f:4a:20:8c:f5:a5:f7:4c:aa:
1f:a3:2f:78:ed:5a:78:61:26:3e:9f:db:33:7d:e7:
13:98:4a:74:b1:55:98:db:cb:04:41:e7:cd:90:48:
cd:6c:16:b1:9b:7e:70:68:1b:ca:e8:72:2b:98:a9:
aa:f4:be:0b:92:d9:5b:87:75:ab:cd:db:3d:6c:ea:
cc:80:11:0e:90:0c:c3:ab:e8:67:5b:ad:f4:39:0c:
db:45:74:43:8b:c5:51:f2:2f:0a:ba:3e:40:a6:78:
e8:0d:c2:ac:5d:49:ee:0e:bb:2b:59:f5:c9:ce:2f:
26:20:ba:66:58:74:16:8d:35:27:b7:f7:9e:93:de:
20:b4:20:fb:06:1d:3e:b1:03:4c:73:6a:84:be:08:
0f:53:0c:6f:45:ce:ad:98:79:eb:a1:1c:dc:07:0c:
a2:3d:84:6b:40:b7:44:58:ea:30:92:35:29:68:a6:
11:98:8a:27:82:d5:51:88:bb:6d:9c:80:8b:e4:e4:
9c:7e:a3:fc:18:27:1c:c0:6f:4b:f2:07:61:af:ba:
6b:89:db:19:7a:7f:bc:d1:ea:04:63:a4:b2:f7:54:
62:d4:3c:00:5f:09:6b:03:ba:c5:4d:a0:f1:8a:94:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:DF:B3:C7:84:25:C1:CD:19:5C:C0:92:73:4D:22:CB:4E:6E:B9
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/V8Dfs8eEJcHNGVzAknNNIstObrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.88.0/22
Signature Algorithm: sha256WithRSAEncryption
20:01:96:d0:c3:14:55:40:14:e9:80:a8:ef:73:9e:fc:48:6f:
e1:29:af:57:6d:93:11:cd:5e:92:f3:f3:ad:e7:77:c9:b1:df:
87:72:61:f1:a4:e1:1e:4c:bb:2b:55:2e:fe:1b:a8:6e:b5:1b:
06:ce:00:28:a9:08:1d:80:87:35:10:de:a5:26:b0:97:64:51:
73:aa:b7:33:d7:bb:4a:c2:a3:60:5c:99:63:06:01:f2:98:49:
fb:3e:3d:a4:8e:a1:d3:d4:3c:1a:67:88:41:27:84:41:58:2e:
31:16:10:2d:b8:97:e9:30:3e:c7:96:dd:71:9f:f9:b5:5b:6e:
99:57:e9:2a:92:a6:e0:b0:78:3b:b7:d2:3e:9a:4d:74:45:38:
4d:6b:d7:62:7a:ff:89:b0:10:95:66:ff:99:cc:95:02:dd:55:
a4:27:9b:74:62:8e:1d:b8:a2:1e:c8:5d:aa:73:33:81:a9:6f:
3a:ab:47:b9:e1:c3:3a:2a:d5:63:ab:f1:3a:b5:63:69:9a:87:
88:98:c4:4a:1d:17:4a:e0:8a:f4:df:df:76:30:a6:c9:87:5c:
fa:aa:d5:7a:e5:bd:2a:d8:01:aa:dd:4e:35:01:bb:b5:6e:ca:
cc:51:4e:2a:cd:2c:b7:40:2d:74:58:5a:a2:46:3c:08:3c:53:
d7:c7:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:34 2025 by rpki-client