Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/k8vEKXW0KrpANqEdzqikO4p7E4Q.roa
File: k8vEKXW0KrpANqEdzqikO4p7E4Q.roa (raw, json)
Hash identifier: zqQTL/rso+ASU5IEe8oFlPbuK7jj0/sSuXUVZTun5pc=
Subject key identifier: 93:CB:C4:29:75:B4:2A:BA:40:36:A1:1D:CE:A8:A4:3B:8A:7B:13:84
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194D5594B890368EFBCD30562C229DCA733
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/k8vEKXW0KrpANqEdzqikO4p7E4Q.roa
Signing time: Wed 05 Feb 2025 09:03:06 +0000
ROA not before: Wed 05 Feb 2025 09:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199218
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:59:4b:89:03:68:ef:bc:d3:05:62:c2:29:dc:a7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 5 09:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93cbc42975b42aba4036a11dcea8a43b8a7b1384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:71:09:57:cb:e6:84:99:36:ce:ea:20:95:
5c:42:f4:59:43:c7:14:25:82:85:18:81:7c:74:57:
b8:9c:b4:03:35:0a:9b:69:95:5a:2e:f3:3c:d5:4f:
96:2f:4b:21:15:b6:31:f2:6f:22:80:b4:9b:d7:37:
cc:da:75:85:df:b5:f4:1e:58:7a:ae:c2:3f:89:16:
eb:f4:8b:e2:91:6f:72:41:cb:35:a0:19:6d:4c:33:
dd:65:ff:e4:91:5a:96:ee:02:db:89:2e:c1:5d:d0:
62:a0:24:24:8b:56:25:20:17:85:c0:02:9a:de:db:
aa:c0:7b:87:19:5f:8f:4e:de:c6:a5:0e:db:8a:48:
57:35:b0:21:b2:bd:64:b3:34:6c:a7:11:bb:9b:6c:
f7:11:2d:ff:ba:c8:4f:1f:00:e8:24:01:42:22:2b:
2f:53:e4:fb:29:02:2d:52:62:fc:1c:24:ba:60:2f:
62:f9:57:4e:9b:49:2a:31:68:31:cf:d3:48:81:29:
bd:38:ac:e9:33:66:e5:31:e6:49:d4:82:8e:ff:57:
91:13:4f:45:5a:65:ef:85:ef:5e:7f:eb:77:0d:dd:
10:43:47:85:b8:bb:fd:17:c9:af:53:68:40:72:c5:
61:4d:a3:5e:5f:f7:eb:2e:a8:f9:a7:ad:b4:c6:85:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:C4:29:75:B4:2A:BA:40:36:A1:1D:CE:A8:A4:3B:8A:7B:13:84
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/k8vEKXW0KrpANqEdzqikO4p7E4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0/24
85.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2b:df:f2:bf:84:6a:09:6e:05:02:54:32:c3:1e:d9:08:e1:
4f:57:2d:0f:68:b5:33:3b:ea:6d:10:27:d3:20:5c:a9:c6:5d:
a2:ec:eb:f9:df:fb:92:f3:df:53:07:59:9b:aa:36:05:7b:d1:
ea:09:ce:30:59:5f:bf:20:39:a2:84:68:3a:50:79:73:17:ba:
c8:d2:a3:4c:97:06:0f:e8:97:96:bc:c0:d4:b2:73:f8:cd:8c:
47:ec:20:d8:3c:14:ff:a9:9f:b4:d5:22:89:99:da:a6:2e:a1:
49:84:88:e6:5f:2f:fc:7b:8c:ef:5a:66:7d:32:c4:0e:bc:bb:
49:26:1e:59:21:be:3f:ea:c8:87:99:ff:37:8e:fd:e3:ca:e1:
5e:3b:02:24:0a:39:6b:59:93:39:d9:1f:63:75:94:52:20:04:
07:ff:16:05:52:39:2b:82:2b:a1:d3:d5:0b:a2:3d:b4:16:e1:
1d:5a:5d:b0:9b:25:97:34:b9:c6:85:4b:9d:58:1a:f3:8d:84:
1d:21:13:8e:8c:3f:b7:a9:59:2c:5b:05:85:13:f0:87:11:f7:
11:3c:4e:33:69:4b:cc:4f:16:37:4b:3e:e4:e5:e8:a2:35:96:
f6:2f:eb:ff:09:47:b2:4a:0b:d8:94:a5:7e:c1:ef:be:28:24:
f0:02:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:28 2025 by rpki-client