Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/leqJjE9Isx2Wv1xbvnncCpjqXlg.roa
File: leqJjE9Isx2Wv1xbvnncCpjqXlg.roa (raw, json)
Hash identifier: d1wlru3RWEI32XVI0+zwi17jb9HoOHo6SjNFH1F5q6g=
Subject key identifier: 95:EA:89:8C:4F:48:B3:1D:96:BF:5C:5B:BE:79:DC:0A:98:EA:5E:58
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 052C3C03
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/leqJjE9Isx2Wv1xbvnncCpjqXlg.roa
Signing time: Tue 10 May 2022 10:57:01 +0000
ROA not before: Tue 10 May 2022 10:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.148.0/24 maxlen: 24
85.239.149.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86785027 (0x52c3c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 10 10:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95ea898c4f48b31d96bf5c5bbe79dc0a98ea5e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:6a:d5:9e:29:ee:df:97:33:02:2c:41:09:
36:bb:b4:91:75:81:30:3d:34:b8:77:f7:cb:e4:05:
3d:d9:ee:9e:62:3b:0a:31:b5:68:a0:6f:6a:74:47:
24:5d:b1:ac:a6:e0:3c:6f:13:02:4e:ae:2e:5d:05:
05:e3:cd:06:39:ed:fb:b6:fc:f8:e6:65:d1:7d:fb:
ed:bb:d2:ec:ef:79:09:88:eb:68:96:bb:08:45:0a:
85:7b:70:45:b0:64:27:34:1f:8b:9a:2e:64:8b:1d:
ed:a4:78:c9:01:06:63:15:b4:03:61:19:ce:d1:38:
ce:0f:ec:b7:47:9c:e9:21:f2:f0:db:71:9e:63:75:
21:30:da:a1:af:07:6e:27:ce:44:f9:2a:1e:2d:01:
cd:73:d2:67:3c:f0:39:e5:84:7d:97:da:27:88:a8:
c2:ea:d4:cf:38:9d:61:aa:aa:f8:73:00:ad:97:38:
bc:ad:d4:73:13:c0:bb:d7:e8:aa:b8:85:de:3c:c0:
a7:2b:c2:5e:a9:a9:57:35:26:ed:dd:87:eb:f8:bd:
13:51:4d:3d:36:07:b1:b7:02:3e:22:65:28:8b:ea:
94:2e:bc:fb:30:c3:02:22:ea:84:3f:ff:c7:be:5c:
58:da:61:bc:38:4a:0a:31:64:30:c6:b6:16:38:bb:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:89:8C:4F:48:B3:1D:96:BF:5C:5B:BE:79:DC:0A:98:EA:5E:58
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/leqJjE9Isx2Wv1xbvnncCpjqXlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0-85.239.150.255
185.95.156.0/23
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:88:a1:bf:ec:97:34:57:28:92:5f:86:7e:82:14:da:25:36:
71:d0:8d:00:2f:04:a3:b2:b6:9b:7b:e4:3c:e2:c3:b9:28:b6:
fb:c5:34:d0:16:52:17:25:ae:73:de:33:02:31:c5:4d:21:c6:
29:b3:6d:54:df:ff:1e:82:a1:46:87:5c:da:3c:db:49:72:57:
80:60:88:9e:de:13:bd:3e:3a:9e:15:c2:70:19:a6:b1:1d:c4:
01:8e:84:d6:fb:ae:81:88:c2:03:cd:d9:dd:ed:f9:84:94:44:
d3:06:74:77:5b:95:a7:ea:bb:18:55:bc:ef:d6:51:5b:11:c4:
1a:a2:36:82:be:ad:89:22:20:6d:b4:9e:5a:ed:36:0a:65:a9:
51:e6:c8:e1:e2:19:8c:71:87:cd:90:21:b2:30:e5:2b:e6:b8:
dd:f0:98:f2:61:cc:56:6a:ec:fa:e0:72:4e:1b:fd:57:a4:8c:
82:75:14:b8:23:54:c9:d7:b9:b6:26:2d:ff:77:5f:aa:97:2b:
61:57:82:b2:5e:9d:d7:aa:61:e8:2e:0b:a8:bb:8a:cf:78:6d:
36:a7:95:e8:8b:81:46:d8:b0:fe:18:be:d9:af:82:fd:f3:31:
89:68:eb:fc:cd:9e:8d:72:c6:fb:d4:e0:de:08:6a:e1:5f:12:
ca:d6:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:43 2025 by rpki-client