Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/8XxbJK1GWPrtjat_Lpe2HKly_9k.roa
File: 8XxbJK1GWPrtjat_Lpe2HKly_9k.roa (raw, json)
Hash identifier: 1REGOqOGYIsLrmhSt5pZG4EmBpaR7Cf++uPRynahll8=
Subject key identifier: F1:7C:5B:24:AD:46:58:FA:ED:8D:AB:7F:2E:97:B6:1C:A9:72:FF:D9
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 019423D6F216AC9E5FC39AB9AD69C6B7F081
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/8XxbJK1GWPrtjat_Lpe2HKly_9k.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41182
IP address blocks: 195.248.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f2:16:ac:9e:5f:c3:9a:b9:ad:69:c6:b7:f0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f17c5b24ad4658faed8dab7f2e97b61ca972ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:c4:f7:ea:9e:7c:88:15:eb:10:8f:00:02:
04:43:de:2d:19:3f:3b:ac:b0:6d:ec:27:80:b2:a2:
e1:33:f4:47:1c:31:e8:11:4f:df:21:84:a6:1d:2f:
1e:71:6a:43:7f:84:a8:ca:f8:c8:be:e6:54:2b:de:
e3:15:0f:6e:18:cb:63:34:ad:05:59:25:91:62:4e:
88:69:6b:54:57:00:68:ff:51:d2:10:18:c6:db:08:
92:46:1b:1b:76:c3:12:11:80:0b:0d:4e:cc:2c:6a:
0d:4c:77:8d:2a:2a:bf:11:9f:1d:df:5e:4e:e3:22:
71:75:54:50:72:be:6d:92:fb:8d:78:e0:21:72:ef:
56:66:6e:ce:61:d1:43:6f:46:68:ba:d0:cb:60:44:
5d:25:c7:5f:06:47:80:6b:ad:c8:b1:83:18:c0:c4:
97:8d:d0:67:04:22:26:c8:e1:b6:3e:74:b7:94:d4:
d8:c8:a3:48:77:56:d5:b3:d9:35:ec:52:53:4a:c7:
50:e7:fb:29:63:a9:e4:b7:1d:be:44:e4:34:ec:d3:
e2:52:38:1b:d1:83:66:85:72:9b:40:b2:a3:70:88:
38:59:26:6d:6a:d2:ab:86:9e:00:05:ac:26:7d:d6:
d2:f6:68:2e:16:e1:b3:a4:62:61:af:3d:5a:34:ff:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:5B:24:AD:46:58:FA:ED:8D:AB:7F:2E:97:B6:1C:A9:72:FF:D9
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/8XxbJK1GWPrtjat_Lpe2HKly_9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e5:83:e0:1a:9b:fd:7b:18:43:c5:d9:ec:92:e4:4f:53:1e:
20:a4:17:65:87:38:53:53:a9:ef:e2:be:9f:f0:c3:e2:94:30:
63:eb:b7:b0:11:1b:ff:d4:5d:64:8d:60:7f:e8:97:17:74:b2:
36:37:db:6b:d3:85:9f:a0:4c:12:b7:e2:b3:69:c0:97:15:a8:
c7:c6:98:31:7d:47:c3:6c:08:65:eb:2b:44:71:bb:29:b2:6a:
0b:26:49:41:d6:46:a3:d5:bc:eb:95:83:8e:5c:0e:d3:6c:68:
fc:04:77:6c:8b:d4:44:5a:4b:1d:cc:8c:7a:db:bb:2a:76:1b:
cf:66:9b:e1:52:27:e2:d9:b7:02:5a:8d:bd:ce:c3:2a:8f:48:
cf:a7:28:ab:15:6b:10:ef:6f:f6:75:f6:a9:74:96:47:74:00:
5b:3a:71:78:dd:18:d9:69:48:9f:34:da:3c:34:64:f6:08:c2:
f2:7b:01:b6:07:70:60:d6:bb:f1:c8:ec:09:4b:4b:10:c8:6a:
08:a6:d1:36:23:1c:17:8d:f6:b4:51:c4:4e:f6:e4:b3:4d:5d:
06:d9:0d:32:7c:ed:57:b9:9a:0f:5c:4b:54:1d:ba:d5:c7:a1:
63:5d:95:17:19:b2:1e:d4:4c:f8:ca:c9:8d:c3:7e:b0:82:91:
73:d1:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:54 2025 by rpki-client