Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/8P3kpdGdKwEUQsuLfkKmZNaUR3U.roa
File: 8P3kpdGdKwEUQsuLfkKmZNaUR3U.roa (raw, json)
Hash identifier: aB0eNVZpyiXnlwgMsNPtMVgqeZYTwppVrn7r7PiQLIE=
Subject key identifier: F0:FD:E4:A5:D1:9D:2B:01:14:42:CB:8B:7E:42:A6:64:D6:94:47:75
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187BEB146679A4469130E1AFC8B3355ED62
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/8P3kpdGdKwEUQsuLfkKmZNaUR3U.roa
Signing time: Wed 26 Apr 2023 17:51:41 +0000
ROA not before: Wed 26 Apr 2023 17:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8903
IP address blocks: 185.66.60.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
185.66.62.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
2001:ac0:30fd::/48 maxlen: 48
2001:ac0::/32 maxlen: 32
2001:ac0:c880::/44 maxlen: 44
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c040::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:b1:46:67:9a:44:69:13:0e:1a:fc:8b:33:55:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 26 17:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0fde4a5d19d2b011442cb8b7e42a664d6944775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:56:cc:17:87:9c:7b:0c:83:bc:64:4f:69:
9e:dd:cf:2f:58:2e:06:44:5f:b9:e7:56:c7:2f:ec:
08:04:16:b9:4e:6c:06:c1:55:9c:9d:00:5e:c8:8a:
ca:cc:dd:03:89:e2:37:cd:08:0a:41:9e:27:bb:d9:
a9:d3:75:b2:ff:90:d1:dc:76:c6:9b:cd:d8:7d:a7:
8d:c7:ad:20:4d:71:2d:0c:66:28:d5:82:3f:9b:7b:
04:ff:ce:92:06:dc:d5:47:99:d2:89:7e:9f:6f:dc:
63:6a:d3:5f:76:43:cf:d3:5e:0b:a8:74:36:ce:ab:
53:cb:bf:09:53:15:47:32:f0:ac:46:ee:2f:b8:f2:
80:ef:b4:45:5d:94:ca:92:38:bd:eb:db:a4:4a:ab:
57:d7:a4:51:34:3a:ab:1f:fb:ee:06:fc:e5:c5:6c:
b2:d5:c2:46:7f:f3:cb:b7:61:b1:e4:6c:8f:21:d8:
92:3e:1f:99:c2:69:40:56:a6:ee:b8:8c:53:fa:84:
a6:af:79:c5:c6:33:e7:ac:88:32:95:a3:73:6a:f3:
e8:ad:aa:ae:b2:e3:90:5e:1f:c3:7a:20:54:67:5a:
65:82:6b:46:9a:d9:bb:b2:7e:34:fb:7d:7b:c7:74:
e7:11:2b:20:ca:72:d4:12:1f:fa:0f:e0:06:27:46:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FD:E4:A5:D1:9D:2B:01:14:42:CB:8B:7E:42:A6:64:D6:94:47:75
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/8P3kpdGdKwEUQsuLfkKmZNaUR3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.60.0/22
IPv6:
2001:ac0::/32
Signature Algorithm: sha256WithRSAEncryption
17:3e:43:8e:4f:50:ee:b6:13:1f:39:23:f9:a9:6e:81:58:29:
cb:a6:c1:ad:ab:a8:5e:f6:47:fd:27:83:f9:65:02:41:d7:31:
8e:2c:b9:7a:5e:39:da:03:e6:d9:2f:49:95:1b:75:d0:64:c6:
f0:f2:63:74:0d:51:44:b7:e5:36:15:e6:d3:44:94:13:89:aa:
60:5d:b6:5f:24:a4:75:3d:6c:53:37:3a:f1:fd:5e:07:00:99:
3c:3b:1d:de:c0:4c:19:94:b8:a5:e0:cd:04:b1:6f:ae:46:3d:
28:3f:72:a9:46:3f:92:2e:bf:db:b2:8f:52:33:fc:2e:e3:77:
01:01:01:b2:a1:fe:ee:3e:c1:a2:fe:df:be:7f:72:9d:cc:84:
7d:a7:c3:e1:d9:2f:05:cf:74:7a:e6:07:15:82:7a:7b:4c:69:
96:f4:c1:c5:f6:f5:ff:11:c0:03:44:d1:bd:77:b9:73:db:b7:
3a:af:d4:e6:64:97:e7:78:92:d9:56:ed:24:2e:e1:cb:9b:83:
06:26:a9:39:dd:97:ae:3a:8c:e3:90:9d:09:3a:c0:7d:33:6f:
00:76:6c:4f:3e:c2:d5:86:ad:79:f0:91:68:ac:bc:f6:0c:00:
4d:72:b3:af:01:97:04:30:74:c1:d9:76:ef:3f:2e:41:d5:4f:
2d:65:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:12:31 2025 by rpki-client