Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa
File: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (raw, json)
Hash identifier: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=
Subject key identifier: F1:43:C3:3D:9E:F3:AE:C6:86:C5:AB:64:35:F0:16:66:40:41:EE:60
Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial: 0194206855CCFF1FE3C2514DA9E652790BB6
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211528
IP address blocks: 84.234.126.0/24 maxlen: 24
185.251.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:55:cc:ff:1f:e3:c2:51:4d:a9:e6:52:79:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f143c33d9ef3aec686c5ab6435f016664041ee60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:6c:c5:4e:cb:29:49:31:0e:a3:a3:70:e4:
7d:ce:a1:01:6d:1d:00:84:3f:ec:d2:d4:52:75:1f:
69:98:f2:fe:12:b7:df:2e:b6:66:17:0f:b7:5b:20:
a2:4a:e2:d8:08:38:3c:90:1e:f6:4f:a6:9f:99:b9:
0f:50:b4:81:3f:c6:b6:64:68:2e:bf:c7:51:6f:ee:
c2:ca:02:ff:e2:b0:f7:a6:1c:55:4f:96:c3:15:5e:
3d:85:5f:05:0c:91:09:b7:f1:12:85:dc:f1:5a:be:
95:c9:69:60:0e:4c:7e:fa:cb:f0:ab:22:b5:89:5f:
bd:4f:bd:35:22:8c:12:8a:be:bf:ba:ee:b6:18:c6:
8a:e2:f5:d5:7d:45:89:c6:b1:e6:b7:ee:85:b9:7b:
f8:70:a6:33:28:af:82:79:73:b6:f6:f2:c6:1b:89:
84:a6:c5:96:71:9f:37:4b:01:09:80:79:d6:58:cd:
37:dd:bf:bb:f6:9b:94:a6:f2:e8:d6:2d:db:16:4a:
6d:33:5f:34:ce:47:ae:00:91:37:0c:3b:55:60:3a:
b0:c0:7d:9f:6e:dd:6f:dd:38:8e:de:d8:b9:85:0d:
ac:35:51:17:63:ee:b6:65:af:ea:63:43:ec:33:e3:
05:0f:33:17:0b:19:4f:c3:68:cb:74:e3:fa:0b:40:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:C3:3D:9E:F3:AE:C6:86:C5:AB:64:35:F0:16:66:40:41:EE:60
X509v3 Authority Key Identifier:
keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.126.0/24
185.251.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:63:2a:15:0c:70:b3:02:ba:d2:ac:77:13:82:0a:3d:60:d0:
bc:08:f2:8f:4a:f3:6a:11:bf:cf:15:90:19:1f:dc:03:3e:a9:
d7:c6:74:39:c0:78:13:1d:b0:75:c8:ce:b3:27:27:dc:15:a7:
88:57:86:ac:25:24:e8:4c:17:6c:81:23:24:54:e7:c1:31:00:
56:08:c2:72:d6:c9:b8:3a:4d:62:1d:f9:27:c7:6d:6d:4a:28:
a3:49:8d:b3:b7:94:cd:ce:6d:5b:b9:09:4d:94:a1:c9:52:ce:
b1:cd:1a:cf:ba:48:dd:61:1e:57:79:6b:07:dc:6f:2b:c2:30:
ca:1e:fc:03:48:20:6c:a6:42:5e:12:fa:b5:64:51:53:4d:f3:
7d:81:22:34:d8:2a:70:19:a3:15:18:0c:a3:64:1a:66:1a:2d:
7e:61:cc:74:f4:6e:43:90:59:3a:98:16:33:10:df:f8:89:8b:
64:41:0c:8c:13:46:bf:01:48:1d:38:a8:c9:60:93:64:00:67:
d2:cf:f3:f7:8d:c1:fd:14:95:16:35:dd:d7:1e:34:1a:11:ed:
9f:97:40:7f:38:c9:3d:26:ed:3d:5b:bb:d3:e8:40:fe:66:f9:
f8:74:26:55:7a:1d:08:3f:da:af:03:55:e6:62:a0:cb:b7:40:
96:98:c6:ce
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQgaFXM/x/jwlFNqeZSeQu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZWMxNDY4ZWUzMTAzZmU1M2IxY2Y1YTk4NzVhZWNkNGUy
OGFkNTEwHhcNMjUwMTAxMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTQzYzMzZDllZjNhZWM2ODZjNWFiNjQzNWYwMTY2NjQwNDFlZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+dsxU7LKUkxDqOjcOR9zqEBbR0A
hD/s0tRSdR9pmPL+ErffLrZmFw+3WyCiSuLYCDg8kB72T6afmbkPULSBP8a2ZGgu
v8dRb+7CygL/4rD3phxVT5bDFV49hV8FDJEJt/EShdzxWr6VyWlgDkx++svwqyK1
iV+9T701IowSir6/uu62GMaK4vXVfUWJxrHmt+6FuXv4cKYzKK+CeXO29vLGG4mE
psWWcZ83SwEJgHnWWM033b+79puUpvLo1i3bFkptM180zkeuAJE3DDtVYDqwwH2f
bt1v3TiO3ti5hQ2sNVEXY+62Za/qY0PsM+MFDzMXCxlPw2jLdOP6C0C66QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPFDwz2e867GhsWrZDXwFmZAQe5gMB8GA1UdIwQY
MBaAFPjsFGjuMQP+U7HPWph1rs1OKK1RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Pd1VhTzR4QV81VHNjOWFtSFd1elU0b3JWRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlh
LTU4NzhhODE3M2M0NC8xLzhVUERQWjd6cnNhR3hhdGtOZkFXWmtCQjdtQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlhLTU4NzhhODE3M2M0
NC8xLzEtT3dVYU80eEFfNVRzYzlhbUhXdXpVNG9yVkUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABU6n4D
BAC5+yUwDQYJKoZIhvcNAQELBQADggEBALFjKhUMcLMCutKsdxOCCj1g0LwI8o9K
82oRv88VkBkf3AM+qdfGdDnAeBMdsHXIzrMnJ9wVp4hXhqwlJOhMF2yBIyRU58Ex
AFYIwnLWybg6TWId+SfHbW1KKKNJjbO3lM3ObVu5CU2UoclSzrHNGs+6SN1hHld5
awfcbyvCMMoe/ANIIGymQl4S+rVkUVNN832BIjTYKnAZoxUYDKNkGmYaLX5hzHT0
bkOQWTqYFjMQ3/iJi2RBDIwTRr8BSB04qMlgk2QAZ9LP8/eNwf0UlRY13dceNBoR
7Z+XQH84yT0m7T1bu9PoQP5m+fh0JlV6HQg/2q8DVeZioMu3QJaYxs4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:53 2025 by rpki-client