Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/8YIAR5sWr0I8DxBlTYWLr-wehd4.roa
File: 8YIAR5sWr0I8DxBlTYWLr-wehd4.roa (raw, json)
Hash identifier: 2GhhwLBXrsl+hdUevrhZ5dBt1jzrfau++jD+6VRkn7o=
Subject key identifier: F1:82:00:47:9B:16:AF:42:3C:0F:10:65:4D:85:8B:AF:EC:1E:85:DE
Certificate issuer: /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial: 019427B626B03FBF336375DC77394B81867E
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/8YIAR5sWr0I8DxBlTYWLr-wehd4.roa
Signing time: Thu 02 Jan 2025 15:50:36 +0000
ROA not before: Thu 02 Jan 2025 15:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.69.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:26:b0:3f:bf:33:63:75:dc:77:39:4b:81:86:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f18200479b16af423c0f10654d858bafec1e85de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:3a:e1:26:ed:2c:15:15:5c:30:75:49:d5:
ef:e5:fe:99:b5:a7:99:4a:c2:47:6f:8b:fd:3d:d1:
76:28:69:16:00:69:7e:b6:2e:a7:f5:db:6a:de:83:
35:e2:26:2a:2b:93:0b:d0:5f:96:48:85:93:85:19:
a1:d8:46:ac:e0:60:11:87:fa:72:65:56:2b:01:54:
fb:ea:0a:e1:4c:66:30:3e:a7:2d:f7:39:b5:ad:12:
7f:0f:6f:f9:ef:74:eb:9a:e6:f5:27:c5:69:1a:ee:
65:fe:67:9e:97:95:bc:c6:3d:a4:94:f7:f3:6c:15:
71:f6:c1:93:4e:05:e7:75:9d:ff:9e:60:f1:7c:e7:
c5:c0:15:39:b7:bf:31:b7:96:61:9b:36:31:0f:b6:
ae:d1:f1:47:16:88:c5:15:ca:77:ed:08:08:a0:db:
96:e2:3c:40:2c:4d:b4:c1:a3:76:eb:3d:0a:ec:ad:
8b:5d:04:fb:7e:3c:2a:47:2c:db:a6:96:d8:2e:e5:
ca:5d:26:a2:1c:1f:75:54:19:43:12:98:cd:72:e6:
3e:36:93:e1:85:96:1c:ec:af:2a:7f:47:df:ef:54:
c1:5c:7e:68:72:93:a8:a7:f4:d2:7a:1b:7e:8f:3a:
ea:d7:70:1c:d9:af:0e:e5:44:21:00:3d:c0:86:61:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:00:47:9B:16:AF:42:3C:0F:10:65:4D:85:8B:AF:EC:1E:85:DE
X509v3 Authority Key Identifier:
keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/8YIAR5sWr0I8DxBlTYWLr-wehd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
57:80:6e:66:66:d6:c7:41:19:ef:c3:ab:5b:1b:f9:d9:be:6d:
dc:37:42:0c:b5:80:49:82:76:be:7f:9b:66:0d:7a:2f:f9:b3:
ba:9c:b2:1a:c6:fa:37:e2:a0:03:cd:64:59:11:0f:8f:9a:ea:
58:c1:39:8b:dc:64:96:fb:14:5d:da:81:f6:1e:a1:5b:40:79:
90:de:5d:60:2c:e9:91:f2:33:5c:66:6c:8c:a2:05:05:22:e7:
fb:21:95:59:52:8c:cf:d2:c0:e0:45:9a:b4:3e:66:b5:2f:f9:
aa:f1:a1:a7:e7:67:57:10:ee:33:10:56:33:04:9c:f7:d8:a8:
95:3a:d5:52:e0:da:c4:94:e3:75:43:29:1b:a0:46:66:6e:c3:
ef:08:f6:25:3c:ad:12:6f:13:0e:9e:6e:2e:c5:34:cf:ac:6b:
61:24:d6:5e:02:6e:2a:ca:9a:4b:98:0c:ba:35:d7:8f:f4:36:
1e:d6:78:4c:26:a2:3e:ef:78:20:7d:f1:46:06:b3:48:32:47:
00:ea:21:f3:f4:07:51:64:21:ff:c6:ae:6f:fe:53:e9:05:c0:
3a:db:cd:4f:83:9f:fd:c7:b6:86:e1:b1:c7:dd:f6:f0:35:d8:
82:da:41:ae:19:af:4e:80:49:78:43:2f:71:51:3e:74:97:f9:
60:81:db:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:37 2025 by rpki-client