Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/8z166PmMluGUtq4LMYoCmQWbrpw.roa
File: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (raw, json)
Hash identifier: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=
Subject key identifier: F3:3D:7A:E8:F9:8C:96:E1:94:B6:AE:0B:31:8A:02:99:05:9B:AE:9C
Certificate issuer: /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial: 019424454FBF7C78A6607F24B93BB8C43476
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/8z166PmMluGUtq4LMYoCmQWbrpw.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8400
IP address blocks: 212.115.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4f:bf:7c:78:a6:60:7f:24:b9:3b:b8:c4:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f33d7ae8f98c96e194b6ae0b318a0299059bae9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:91:43:61:5d:e3:e4:72:b2:a0:f1:ac:e3:
ae:57:1d:1d:0c:b5:10:f3:a0:f8:de:63:12:19:cb:
45:9e:d2:8d:33:a7:0f:1b:73:c8:2e:a3:ff:1b:88:
24:2b:fc:ee:41:2e:73:d5:25:27:15:df:f3:5a:cc:
f7:70:b6:bc:7d:c1:86:6c:ef:dc:cc:85:d6:17:76:
b2:d0:c2:9e:c6:da:3c:8f:0e:95:4c:61:dd:0b:b0:
63:8d:b8:b7:38:ad:93:b3:c4:29:f9:9f:ab:86:ce:
23:95:20:75:a9:41:d8:49:3d:9c:b0:90:89:5a:23:
bb:94:f4:6b:f9:5f:d7:f8:c7:48:1e:a3:c3:3c:24:
3d:22:89:15:dc:0d:cd:80:6f:b3:2e:35:27:9a:cc:
fd:47:2d:3f:bb:6a:63:0b:fa:b3:f3:f3:26:9f:86:
1d:cd:f8:75:d5:78:9f:0f:be:00:0d:35:46:a5:ea:
30:ac:e2:d9:5d:e4:22:cf:7b:a1:95:12:4d:82:80:
c5:93:ca:a9:96:cc:2b:64:a6:be:e0:05:0d:19:3a:
3d:25:48:37:92:38:c7:33:82:c3:50:66:fe:65:be:
28:18:e6:4e:78:95:94:c5:d1:e2:cb:d3:17:d9:f2:
ba:eb:58:6f:b3:77:dd:40:f6:c6:cd:f7:33:e0:87:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:7A:E8:F9:8C:96:E1:94:B6:AE:0B:31:8A:02:99:05:9B:AE:9C
X509v3 Authority Key Identifier:
keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/8z166PmMluGUtq4LMYoCmQWbrpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:34:34:cc:e4:79:41:0a:ae:23:64:28:57:3e:a4:20:b0:8a:
20:51:14:a5:43:c4:fa:a2:28:da:31:83:64:91:29:07:c2:49:
a8:bc:89:fc:e1:24:e6:9e:10:85:2b:7d:71:c0:f2:41:6a:4e:
77:23:53:76:43:18:be:c5:09:27:59:1c:bb:a2:13:51:69:b3:
56:3f:21:6e:ea:3f:4e:5d:e0:a4:2e:cb:9c:e7:3e:98:2f:1f:
af:15:bf:75:0a:08:bd:73:d6:1b:d5:9f:98:e6:20:0d:11:f9:
be:c7:01:a1:7b:ce:10:50:f5:ed:6f:51:e6:8b:e0:d6:1e:8c:
0f:f8:b0:35:0f:2d:9d:6a:5d:cd:ee:57:14:db:02:21:95:0e:
4b:59:4d:8b:66:f5:6b:f2:1d:02:10:a7:f1:45:34:23:21:4f:
11:f9:17:21:94:b6:21:7a:54:77:ea:15:8d:7f:b4:e8:d1:62:
b8:a5:15:61:ce:fa:82:53:eb:c2:e1:7f:bb:f8:87:69:8e:5a:
9c:70:38:4c:b9:8b:97:58:4f:c4:52:94:f8:52:ce:4c:f3:d3:
42:90:72:bb:a4:e1:8c:61:89:88:fc:1f:96:a3:11:ff:63:e9:
47:c8:72:f6:30:ff:51:4f:c1:98:2b:6b:e0:4f:bd:79:5f:50:
be:a9:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:53:36 2025 by rpki-client