Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/8tGhbhMGN_POJ7YSYEPEigGTSlM.roa
File: 8tGhbhMGN_POJ7YSYEPEigGTSlM.roa (raw, json)
Hash identifier: AyZWf3gcGZsZqBrGbd7j+e4CICThgNWqmUZZB2Q39TY=
Subject key identifier: F2:D1:A1:6E:13:06:37:F3:CE:27:B6:12:60:43:C4:8A:01:93:4A:53
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 0194258FBA787A2964B025F6169FAB55B7D8
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/8tGhbhMGN_POJ7YSYEPEigGTSlM.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60651
IP address blocks: 194.38.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ba:78:7a:29:64:b0:25:f6:16:9f:ab:55:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d1a16e130637f3ce27b6126043c48a01934a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:83:f4:db:f4:5b:f8:96:ff:90:e6:df:23:
d1:b0:be:da:1c:af:d4:91:92:24:84:e1:01:bf:89:
39:39:20:cd:1a:23:41:1b:38:14:de:33:b7:f1:10:
09:37:f6:9f:79:67:0e:3e:ab:6f:04:23:74:a1:20:
62:71:b1:f9:70:0c:10:af:f6:fd:83:31:a3:69:9c:
a0:24:64:0c:a5:21:30:80:9f:b1:41:8b:57:86:eb:
53:d6:34:20:ca:fe:e3:9f:5b:9f:d7:e2:5e:7e:5d:
79:3c:6d:44:d0:fa:e2:8b:17:03:52:1e:f1:74:07:
55:e3:c8:0c:bd:fc:2a:dd:71:d1:71:0d:f1:ed:4b:
61:17:1b:a8:ee:67:6a:e2:76:da:86:e9:c3:34:53:
5d:84:5e:e4:c0:c7:27:4b:89:89:0c:a2:f7:ba:3c:
e8:4d:d0:e7:e4:fd:f2:12:78:19:92:38:25:82:45:
5a:13:d4:60:f3:70:c7:88:3d:46:1c:04:ce:90:51:
00:6b:97:09:4a:b0:ba:f1:be:34:4e:b9:41:69:83:
c9:23:2c:21:68:c1:49:f6:82:4e:18:dc:d9:af:a5:
5f:b4:00:fb:d8:8d:be:ad:df:c1:7c:16:65:e4:0d:
56:74:7f:f4:7e:6e:e5:69:37:04:82:16:c3:de:d7:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:A1:6E:13:06:37:F3:CE:27:B6:12:60:43:C4:8A:01:93:4A:53
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/8tGhbhMGN_POJ7YSYEPEigGTSlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.8.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a7:ee:0b:de:75:f7:91:d2:3b:4d:5b:46:98:00:d7:07:45:
bb:81:1b:9e:7c:74:46:99:1c:15:98:b7:98:68:5f:2b:45:1d:
c8:99:75:f3:37:77:91:38:e1:b6:d0:4e:ff:c2:a5:0d:e5:c3:
0f:29:3b:8c:8d:ae:f4:d6:c1:7e:31:84:4c:a4:28:f8:f4:6b:
93:de:7f:21:91:01:1a:b7:82:30:4d:cf:75:65:40:4e:86:f0:
18:fa:1b:a1:c4:9b:bd:38:0b:17:52:bf:ea:0a:04:ba:14:81:
4f:3d:2f:5b:bb:b4:a3:6a:6b:61:bf:09:6c:2c:de:1c:4c:51:
f7:e3:99:ab:f6:2b:06:ee:df:3b:63:00:c1:17:e6:ff:2b:f2:
27:28:b5:08:9e:5b:e1:44:bd:6a:73:2f:bb:83:23:74:3f:2b:
fc:b8:f5:bc:26:0a:06:0c:b3:c6:73:03:80:5f:9c:02:34:bf:
9b:86:67:1c:10:d2:f8:f6:32:5b:92:26:39:72:ed:64:e2:1f:
43:67:df:8f:7c:d0:48:48:1d:92:d4:1e:9e:63:1f:c5:ff:98:
7b:c3:04:1c:8b:69:62:3d:5a:ca:66:22:b4:5c:ec:fa:59:01:
2d:90:9f:d1:30:fd:86:b0:c3:5e:9e:ff:2c:92:b5:fb:6b:a0:
f8:86:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net