Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/rS4RgydKxGdwOWf1j4StfouO-tE.roa
File: rS4RgydKxGdwOWf1j4StfouO-tE.roa (raw, json)
Hash identifier: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=
Subject key identifier: AD:2E:11:83:27:4A:C4:67:70:39:67:F5:8F:84:AD:7E:8B:8E:FA:D1
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 01942521C9BE6E7E3F25FA61DE3B96FB9C62
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/rS4RgydKxGdwOWf1j4StfouO-tE.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6739
IP address blocks: 185.86.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c9:be:6e:7e:3f:25:fa:61:de:3b:96:fb:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2e1183274ac467703967f58f84ad7e8b8efad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:2b:ed:12:e4:39:cf:8d:96:c4:0b:ad:39:
3f:46:de:ab:9b:6a:27:4f:22:ae:a0:e5:52:3f:77:
80:d1:2d:f4:82:80:37:6f:d5:7a:60:d1:9f:10:40:
42:82:1f:cb:d0:4d:c0:23:cd:e8:b3:70:00:43:da:
dd:27:9a:5a:2d:2a:9c:cc:94:21:0a:0b:bb:d3:16:
9a:1d:37:13:f7:bf:41:95:20:3c:37:b1:54:66:75:
af:a3:74:c5:de:75:78:7d:f1:ed:79:59:79:bf:c2:
4a:77:63:02:6c:8c:c0:d8:a8:b4:8c:11:ea:e9:24:
1b:d1:9d:ed:8b:0f:ba:1b:ce:5f:f8:57:1d:55:18:
80:1d:1d:ce:c1:f5:62:88:82:26:93:bf:0e:dd:a2:
80:fa:41:bf:27:da:58:04:6e:cc:b1:2f:9d:0a:1e:
76:ed:90:73:51:c5:60:17:84:f5:ad:2f:11:16:04:
a6:db:40:cd:33:e3:4d:6b:86:3b:46:21:9e:f2:34:
ee:89:60:28:66:69:20:02:ea:9d:eb:46:a7:66:99:
cb:a5:31:62:b0:bc:68:b5:57:fd:6d:ed:51:9d:5a:
25:dd:89:4a:65:a6:90:4f:50:d4:90:31:88:89:f1:
70:ea:2b:26:18:90:52:98:1f:df:0c:f8:95:06:4d:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2E:11:83:27:4A:C4:67:70:39:67:F5:8F:84:AD:7E:8B:8E:FA:D1
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/rS4RgydKxGdwOWf1j4StfouO-tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:84:b4:6b:85:0a:a0:e3:dd:66:e4:6c:14:f1:8b:89:48:62:
ba:83:61:bd:dc:3f:08:57:19:be:13:95:23:f8:7c:7d:6c:48:
f3:ff:c4:b6:30:f3:ca:2d:1a:6c:4f:0e:a1:ce:05:b3:10:f1:
10:ec:8f:d0:b3:0e:f1:05:c7:15:e3:a4:ba:21:38:fd:d8:dd:
34:72:d5:ef:46:94:98:07:f0:0d:91:fe:7f:6b:2e:30:9f:4b:
46:11:00:d0:83:e3:41:be:10:34:d7:8d:0e:bd:16:8a:ff:02:
b6:2e:2b:fd:a9:22:99:a6:9a:18:d9:d2:a4:55:12:e6:ac:24:
28:25:db:54:6a:85:e3:5f:77:ee:0c:9b:a0:9e:2a:0b:5d:b6:
b5:96:46:03:60:e4:7f:de:a2:60:66:3c:fb:a2:4c:a9:e8:4e:
07:61:7d:a0:4d:4b:40:a9:68:1d:76:35:a7:91:15:a9:33:79:
4a:c7:f4:e3:e2:9e:a0:d2:7a:d9:0d:78:20:ee:32:1c:6a:98:
46:4f:5c:87:d4:96:23:27:5b:36:d3:d6:02:4d:54:68:14:76:
90:e1:82:a6:03:df:fa:0b:c2:55:96:ed:d2:e6:6b:d7:b7:03:
24:4b:5e:9a:74:50:09:fc:f6:c5:e2:16:3b:51:b6:eb:7b:f6:
42:83:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:16 2025 by rpki-client