Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/1B8mpuLd4l3xHa-BKm83njlTZ8Q.roa
File: 1B8mpuLd4l3xHa-BKm83njlTZ8Q.roa (raw, json)
Hash identifier: NFyRQKkVILIRdm2bXpnR0CQXfCBlG6eA/nhE2P0DdR8=
Subject key identifier: D4:1F:26:A6:E2:DD:E2:5D:F1:1D:AF:81:2A:6F:37:9E:39:53:67:C4
Certificate issuer: /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial: 019427B5698EB867E736AB4172FF87A8C179
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/1B8mpuLd4l3xHa-BKm83njlTZ8Q.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42184
IP address blocks: 185.153.140.0/22 maxlen: 24
2a0f:8880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:69:8e:b8:67:e7:36:ab:41:72:ff:87:a8:c1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d41f26a6e2dde25df11daf812a6f379e395367c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:45:28:24:c8:fd:80:d9:06:3e:38:8a:c4:
ea:83:be:16:9d:06:f7:56:7c:e4:b8:74:b3:37:ee:
ed:41:4e:c7:70:f9:fc:5e:9d:75:5c:43:15:56:3c:
98:b4:f9:b8:dd:73:b9:b3:63:21:0b:a3:cd:8a:3f:
82:5c:a7:96:59:ec:b1:67:ed:28:d6:da:a4:78:de:
ba:0f:b1:bb:a3:23:c4:35:13:ea:e1:89:02:04:51:
8c:76:c7:da:d8:14:6c:56:46:77:80:0d:35:3b:6a:
08:03:5d:60:77:c3:71:d5:08:e2:81:61:70:33:39:
e5:9f:cb:45:2e:f4:20:02:0c:f4:44:55:89:e8:f3:
c4:b3:7e:26:54:55:0a:9f:10:aa:79:97:ed:af:dc:
07:06:56:f4:1e:1a:a9:cf:83:49:9f:ae:ae:e0:74:
f8:80:7b:3d:cb:f3:16:06:5f:4e:72:40:bc:fd:3c:
b6:c6:8c:a0:c6:ea:9b:49:a8:a2:84:04:97:cd:0d:
ac:80:e9:c6:fb:52:d2:f1:09:c1:a2:11:82:80:15:
a2:b5:f5:61:35:75:44:d4:cd:44:ab:68:ad:4a:35:
76:90:e6:4c:ac:c2:50:75:89:c7:dc:12:ed:9b:58:
e1:16:b3:17:07:db:2d:a6:5d:31:75:80:0a:b1:30:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:26:A6:E2:DD:E2:5D:F1:1D:AF:81:2A:6F:37:9E:39:53:67:C4
X509v3 Authority Key Identifier:
keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/1B8mpuLd4l3xHa-BKm83njlTZ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.140.0/22
IPv6:
2a0f:8880::/29
Signature Algorithm: sha256WithRSAEncryption
7c:90:fe:8a:3d:b3:7d:cf:39:5d:8b:cb:80:b0:c6:14:95:02:
2f:04:dd:21:0c:ce:fd:2b:26:7f:a0:52:46:32:77:2b:d5:a8:
8d:54:fb:27:7b:90:a2:d1:ae:4e:9c:c3:03:48:bd:36:2c:1b:
f6:0f:95:c3:ce:74:7e:3d:c4:04:d4:b9:9e:3c:2a:16:a8:62:
91:93:29:41:7b:f5:6a:2b:59:37:a1:8f:0a:ea:d3:46:e8:41:
a4:a4:cc:57:13:c0:b5:1e:cd:dd:83:24:42:21:35:ca:5a:09:
2d:ee:ef:b2:c1:4e:94:75:88:76:b8:d7:72:ad:c0:a9:cc:08:
7c:a1:67:49:3b:5d:03:04:7d:a9:47:31:e6:38:35:f7:a9:da:
44:11:79:03:98:d3:51:2e:c4:13:59:5b:51:73:45:03:ba:c6:
a8:94:0e:9c:54:20:85:89:f2:c2:e3:bc:70:05:8a:0d:59:55:
6d:50:ba:3c:c5:7e:09:fe:c7:08:e0:08:d2:d4:39:04:8d:d6:
7f:77:97:22:96:55:27:47:8d:72:d8:50:3b:27:1f:c3:f9:a6:
f5:a1:1c:99:c3:5b:65:99:6d:a8:bd:52:50:10:d5:18:07:2e:
a2:d1:7c:45:67:46:d1:21:dc:bb:c5:d6:6b:8b:16:44:4d:65:
cb:2a:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:49 2025 by rpki-client