Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/8RAc371ukABbTWcTiK04QzcyelY.roa
File: 8RAc371ukABbTWcTiK04QzcyelY.roa (raw, json)
Hash identifier: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=
Subject key identifier: F1:10:1C:DF:BD:6E:90:00:5B:4D:67:13:88:AD:38:43:37:32:7A:56
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01942369E8C3B9DEBC1F1B20D8478D01EF25
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/8RAc371ukABbTWcTiK04QzcyelY.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29695
IP address blocks: 77.110.192.0/18 maxlen: 18
77.222.192.0/19 maxlen: 19
80.89.32.0/19 maxlen: 19
82.148.128.0/19 maxlen: 19
89.162.0.0/17 maxlen: 17
141.0.224.0/19 maxlen: 19
178.16.64.0/20 maxlen: 20
185.10.28.0/22 maxlen: 22
185.65.152.0/22 maxlen: 22
194.182.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e8:c3:b9:de:bc:1f:1b:20:d8:47:8d:01:ef:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1101cdfbd6e90005b4d671388ad384337327a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:9e:75:64:ce:eb:5b:bc:a6:ea:6e:a7:16:
24:3f:1b:10:0c:a4:38:74:9c:a0:a2:05:a3:45:34:
b9:2c:7a:c0:18:4e:e2:ea:5d:c9:3a:3d:6a:b9:01:
d4:db:17:60:a6:6e:82:8f:df:2a:ce:ce:57:0a:bf:
eb:58:79:88:03:05:5b:c7:e6:34:88:27:5e:53:f8:
0e:47:9b:83:bc:a9:9b:ea:58:94:ff:45:f2:bd:e1:
69:90:9a:5e:26:43:6f:9c:26:a7:05:b3:3a:41:80:
cf:9d:35:f6:65:59:ad:78:81:c9:58:f6:5e:6a:d7:
fc:e4:c5:c8:81:65:5e:2c:5b:90:78:1e:50:43:69:
d6:9b:11:2b:6f:2d:2f:05:49:84:d4:c4:b2:c1:74:
40:d3:94:1d:e3:1c:ef:6d:48:d0:80:33:f9:bb:da:
48:06:56:0c:e2:cf:99:41:94:67:1b:3d:2c:c0:f4:
f0:db:4a:80:eb:c1:5c:45:f0:9a:f3:09:99:2d:ed:
5c:a7:51:06:33:15:be:5f:df:40:35:12:03:55:3b:
f7:ac:6b:d6:29:f8:51:c7:c3:9d:de:9c:32:c8:c2:
0b:8c:49:f5:ac:e4:43:56:b4:70:da:e0:25:92:15:
38:53:03:e0:6a:bc:4f:9c:24:16:26:c4:f8:89:51:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:1C:DF:BD:6E:90:00:5B:4D:67:13:88:AD:38:43:37:32:7A:56
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/8RAc371ukABbTWcTiK04QzcyelY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.192.0/18
77.222.192.0/19
80.89.32.0/19
82.148.128.0/19
89.162.0.0/17
141.0.224.0/19
178.16.64.0/20
185.10.28.0/22
185.65.152.0/22
194.182.224.0/21
Signature Algorithm: sha256WithRSAEncryption
87:b5:7f:ba:18:64:23:c3:c2:a9:df:0a:f1:32:83:b7:21:28:
64:21:8a:af:47:92:61:b3:2a:fa:49:02:5d:28:91:a5:a6:43:
b3:16:0f:b8:4a:d3:ce:cc:a4:9a:1e:aa:b2:10:80:83:56:e1:
6b:98:94:17:f3:07:11:f4:c5:62:0a:4c:6b:ea:35:42:77:85:
a6:de:98:33:c9:63:61:1a:18:da:29:8a:a4:0c:b5:d2:d0:fd:
fe:c5:4f:e1:50:60:bc:90:9c:05:10:78:a0:82:f4:18:5e:31:
d4:8f:99:a0:15:c4:82:50:fd:da:6b:ac:c4:67:95:72:e5:1c:
fb:4a:e2:82:f5:48:78:34:61:b6:a8:65:69:69:1b:3d:c6:f3:
84:a3:ac:a8:f1:a8:54:71:fd:d2:d1:3c:67:f5:e9:31:75:17:
e3:89:0a:43:5c:91:2c:0c:20:7e:82:42:93:c2:3b:d3:10:f6:
38:64:a8:1d:bd:8e:3a:26:70:29:11:a6:ad:0f:4b:cd:a8:28:
82:eb:0f:87:b0:ca:18:fd:b0:00:2d:61:c5:4d:a6:48:11:13:
fb:cb:fa:1a:36:1d:5b:df:f3:3c:ed:70:2f:64:ba:24:53:60:
9c:ba:17:8e:d0:af:f5:42:70:ef:9e:5b:db:f7:5f:6e:c6:c8:
f6:c7:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:55 2025 by rpki-client