Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/8H6vwz49R0kM-gbNtDLGiXSOgWE.roa
File: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (raw, json)
Hash identifier: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=
Subject key identifier: F0:7E:AF:C3:3E:3D:47:49:0C:FA:06:CD:B4:32:C6:89:74:8E:81:61
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 0194206843169E685801C54214EED178B9BB
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/8H6vwz49R0kM-gbNtDLGiXSOgWE.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39781
IP address blocks: 79.98.56.0/21 maxlen: 24
185.106.216.0/22 maxlen: 24
193.227.107.0/24 maxlen: 24
2a02:1758::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:43:16:9e:68:58:01:c5:42:14:ee:d1:78:b9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f07eafc33e3d47490cfa06cdb432c689748e8161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:a4:c1:a0:71:12:e4:70:bf:37:2b:2a:57:
80:28:8d:c8:39:9c:ec:ea:8f:73:24:7a:51:ec:77:
7d:7a:6f:ea:b0:da:1f:f6:aa:69:52:ef:06:fc:60:
1e:44:1a:6d:18:a6:11:d3:e8:9a:9d:7c:16:d1:37:
13:be:2b:83:eb:30:6f:03:12:e5:63:f3:e4:bb:49:
6b:a2:3e:30:f9:6a:22:0b:7d:9d:1c:f5:c2:4a:b4:
75:0a:e7:b7:da:1e:8f:4a:f7:ea:8d:ca:e0:66:25:
8a:44:f7:fc:df:c2:02:2d:be:63:9e:ce:9a:8a:23:
4e:91:99:c8:d0:0b:24:80:13:ca:b9:9e:b6:b5:d6:
49:bf:73:f5:3a:bf:2b:84:7b:06:da:1d:94:c6:4d:
93:38:20:ff:e4:44:eb:7b:cc:31:58:dd:36:01:8e:
58:fd:95:71:d6:f0:09:f3:fb:5a:6e:c0:75:fe:d7:
33:e0:2a:6c:33:f5:39:eb:70:86:a0:a4:33:8c:c2:
ca:ca:9f:07:85:52:34:bc:93:5c:d9:b6:a6:ef:c7:
cb:48:23:ba:79:7b:19:0e:c0:cb:e8:f8:29:a1:45:
29:34:a8:c7:e6:25:e6:01:4a:ca:7e:14:fc:bc:9f:
9c:db:23:b9:c2:74:af:56:a6:2d:d3:24:76:b8:b9:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:AF:C3:3E:3D:47:49:0C:FA:06:CD:B4:32:C6:89:74:8E:81:61
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/8H6vwz49R0kM-gbNtDLGiXSOgWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.56.0/21
185.106.216.0/22
193.227.107.0/24
IPv6:
2a02:1758::/29
Signature Algorithm: sha256WithRSAEncryption
2c:fe:66:83:82:c2:17:54:4e:3e:f1:bf:69:86:33:62:9f:30:
e3:e4:76:e7:16:1c:52:94:1b:79:f8:20:df:9d:53:31:e3:d1:
d1:e6:0a:92:1f:62:07:f3:c4:41:ce:ff:f3:37:52:59:a8:a0:
09:3c:43:b9:ab:e1:56:d9:29:97:93:df:4e:e0:61:bd:3c:8e:
1e:16:37:af:c8:6d:e9:b2:50:a2:2f:67:b5:f7:56:8d:88:a9:
e9:54:7b:2c:36:3a:fb:3d:45:94:a5:ad:cd:5b:44:02:f5:2c:
89:9e:1a:4d:2a:d8:e0:08:af:b8:57:73:dc:16:08:db:29:1a:
8a:e0:d0:25:1d:56:ae:9e:af:45:6d:31:f7:4f:94:7d:b3:fc:
06:65:6e:31:54:88:b3:de:7d:88:c2:08:54:3c:93:0c:1f:af:
22:36:88:89:cc:1d:ed:d6:3d:3a:db:16:7a:41:6d:fc:c6:b7:
c2:45:01:98:58:fd:e3:7c:b1:2d:89:28:6a:2c:e0:d4:3f:82:
cf:52:d3:30:e2:93:7a:d1:1b:46:75:bf:cf:bb:63:07:fb:e6:
ae:11:72:be:bf:51:64:f8:57:1f:8c:83:69:fa:ac:51:9a:b5:
d3:fb:ae:3e:f4:99:c2:54:3d:ca:6e:3a:45:3d:d2:64:ad:13:
05:66:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:19 2025 by rpki-client