Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/8yCq7gWrNtSGUAwhbKMYXo5sVuM.roa
File: 8yCq7gWrNtSGUAwhbKMYXo5sVuM.roa (raw, json)
Hash identifier: 490w7F1y4o1yoJe8DWbaKwN62Kay5Tc/NkagYt79lV4=
Subject key identifier: F3:20:AA:EE:05:AB:36:D4:86:50:0C:21:6C:A3:18:5E:8E:6C:56:E3
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 01942747B6E7706A67A0737BC0AA4F2700DA
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/8yCq7gWrNtSGUAwhbKMYXo5sVuM.roa
Signing time: Thu 02 Jan 2025 13:49:58 +0000
ROA not before: Thu 02 Jan 2025 13:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206833
IP address blocks: 185.44.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b6:e7:70:6a:67:a0:73:7b:c0:aa:4f:27:00:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 2 13:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f320aaee05ab36d486500c216ca3185e8e6c56e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:68:5c:6c:44:48:53:b3:7d:ed:c9:d2:e2:
40:b7:51:07:78:88:23:e8:87:9c:3e:98:9a:07:b4:
46:a7:35:44:e0:cb:c1:e8:3f:26:bc:56:97:d1:56:
17:14:d8:e5:25:cd:af:e8:cb:ad:b7:a7:14:96:86:
65:05:8e:c8:8d:c8:5f:c9:58:53:a5:c8:f7:82:e9:
26:8d:2c:25:24:70:a0:7a:45:39:fe:31:87:fc:c8:
1b:85:44:f7:a8:b0:c2:e2:28:ec:d1:b4:70:e5:03:
fa:80:45:a4:04:c8:83:a7:cb:11:9d:8f:f8:8c:f3:
1b:f4:bc:17:1c:5b:16:8c:c1:28:e1:79:74:36:37:
5e:44:31:f3:54:35:76:8e:14:7e:c5:3a:be:5b:d7:
c7:f5:31:4b:0b:06:3e:fa:9b:f6:73:b7:16:21:44:
ac:91:ea:21:c4:08:ff:46:da:42:b6:cf:33:cc:b0:
45:2c:6f:50:90:3e:81:d5:f3:86:ee:9f:3c:2b:79:
ca:c6:c4:c1:74:d2:34:40:36:5d:ab:8b:69:9b:46:
ea:b8:29:42:aa:f5:db:81:7e:c7:7b:ba:d4:71:a4:
17:1b:0d:ed:89:e5:58:54:95:bc:4c:f4:57:be:89:
e7:d4:b9:a3:ec:b6:43:7b:84:cf:ff:b9:1c:4a:36:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:AA:EE:05:AB:36:D4:86:50:0C:21:6C:A3:18:5E:8E:6C:56:E3
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/8yCq7gWrNtSGUAwhbKMYXo5sVuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:27:03:69:cb:1f:39:c4:ef:42:30:b3:d4:a4:cc:fa:28:69:
c1:76:b5:de:da:2f:2a:16:ed:b7:c6:a4:59:60:c1:01:57:cb:
a0:24:73:12:11:9f:cd:83:52:e8:e5:a0:c0:f7:74:82:b1:73:
96:4a:a8:cf:42:cb:f3:7c:67:98:6f:72:a7:16:51:2b:93:b6:
d5:23:d6:93:fc:24:f7:93:76:02:c9:61:2a:b8:c9:a2:18:39:
39:ad:e5:46:33:c1:1d:96:ae:e3:18:10:dd:cd:55:9b:49:f2:
a0:2d:23:b6:be:e9:37:eb:f4:29:de:41:12:e6:c1:ce:e8:61:
72:59:50:3b:75:f4:e9:7b:e6:57:2e:9a:38:f4:2e:02:79:48:
35:a7:b8:7e:f7:a4:e4:81:10:90:9d:b4:c4:cc:a3:d6:01:0c:
49:53:85:94:28:03:5e:a4:31:af:4d:24:ce:78:91:3e:a8:33:
6f:ba:85:09:20:9e:ed:a4:90:fb:4f:10:2a:c2:fe:18:2d:de:
6f:3f:fb:01:fa:8f:f4:09:74:f8:8f:3f:59:c5:fc:48:86:76:
e6:0d:82:5b:b6:75:63:16:ad:2a:6a:bd:bc:cf:60:0e:f2:16:
60:7e:99:ae:c6:94:9c:d1:a6:01:6c:3e:ec:ce:d4:5e:c5:11:
ed:6e:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:12 2025 by rpki-client