Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/1-_88t3hetlFBanVHA2DU4QOnOb4.roa
File: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (raw, json)
Hash identifier: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=
Subject key identifier: FB:FF:3C:B7:78:5E:B6:51:41:6A:75:47:03:60:D4:E1:03:A7:39:BE
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019426D9D3D54E87ACB05717EDF213D0C909
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/1-_88t3hetlFBanVHA2DU4QOnOb4.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208591
IP address blocks: 45.84.208.0/22 maxlen: 24
2a0e:a180::/29 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d3:d5:4e:87:ac:b0:57:17:ed:f2:13:d0:c9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbff3cb7785eb651416a75470360d4e103a739be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:f1:81:96:0a:a7:cb:3d:7a:79:19:e4:33:
7d:93:3e:09:42:b4:4b:85:02:e2:50:a6:15:1d:31:
c0:c5:bc:c6:26:26:33:fe:e0:88:23:40:23:c8:42:
b1:fa:f2:99:ca:44:66:13:a2:4c:0d:ad:98:d1:f5:
d9:bf:c9:6b:10:7d:36:b8:77:0e:6d:05:6d:da:37:
32:57:ef:80:17:67:7e:87:f2:55:28:55:8d:18:71:
a0:4f:e8:19:28:f7:56:f0:b8:04:51:fd:d1:15:29:
4e:0a:cc:e1:c4:d5:63:ad:5d:66:c8:88:58:46:93:
b3:11:4e:30:77:17:f1:02:f6:35:06:83:f6:7f:f8:
6f:90:b3:4e:96:6e:a3:21:83:1b:1b:3c:42:19:4d:
a7:42:6a:31:1c:97:ea:0f:85:a1:79:3d:b2:ca:0c:
25:ef:52:5b:88:c5:38:f2:e1:c0:93:c6:97:63:bf:
74:b3:44:6b:56:38:b2:c0:af:41:37:1a:43:cd:26:
8c:53:77:67:8c:72:22:04:ea:84:9c:83:47:ec:4a:
25:ff:1b:be:3f:03:ae:3a:76:67:b2:d5:09:69:28:
20:66:91:6e:a4:3b:8e:63:6d:27:16:38:41:19:7b:
a7:bc:8f:4c:b6:97:b4:09:e7:8e:6f:8f:53:7e:a2:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:3C:B7:78:5E:B6:51:41:6A:75:47:03:60:D4:E1:03:A7:39:BE
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/1-_88t3hetlFBanVHA2DU4QOnOb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.208.0/22
IPv6:
2a0e:a180::/29
Signature Algorithm: sha256WithRSAEncryption
9f:cd:7c:c3:e7:83:f0:8d:c7:90:05:73:c5:42:74:09:62:0b:
12:f5:2d:62:5a:f1:08:68:03:87:37:a5:f3:e0:8d:4d:6f:0f:
2d:32:a8:6f:71:b1:e3:80:2b:76:12:3d:40:58:6c:ae:0e:d6:
ae:f5:06:02:c9:f4:8f:68:bd:e2:2c:3f:81:68:b9:6e:ee:0b:
55:6c:02:a2:6f:7e:75:2a:fd:f6:27:7e:bc:c0:0a:88:f4:da:
a2:1a:80:7d:d6:56:3d:d3:b8:d8:bd:1a:bb:06:13:a7:80:2e:
f4:b6:f2:a1:ad:19:dd:76:b7:f2:4e:a0:f3:cb:90:72:47:23:
b4:81:ab:ff:f1:84:f3:32:22:52:5f:d7:75:d3:88:72:39:87:
3e:f6:2f:52:3b:96:84:0d:0b:63:49:90:13:2b:42:5d:11:0a:
6f:b3:df:3c:fb:f9:ba:b4:d2:2d:5b:05:ab:81:c5:df:76:95:
85:7c:63:d3:b2:d5:9e:6e:f7:4e:71:d1:df:d0:60:0e:87:51:
88:37:c6:d0:e5:3d:03:8b:ea:1b:78:b1:2d:19:49:41:6d:34:
de:94:64:cf:50:3a:ab:f1:e2:24:35:01:88:2d:0e:16:e9:57:
a3:73:df:23:b8:b3:a2:8d:19:29:b6:ca:ec:63:91:81:1a:15:
61:b3:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:56 2025 by rpki-client