Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/mLAnaHzhhl7bJEtLrVfvHdIfm3g.roa
File: mLAnaHzhhl7bJEtLrVfvHdIfm3g.roa (raw, json)
Hash identifier: EfGWgpXzd6nJCxp8YEASqs8ttnBfjEJmrH7m80ZV3K0=
Subject key identifier: 98:B0:27:68:7C:E1:86:5E:DB:24:4B:4B:AD:57:EF:1D:D2:1F:9B:78
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194E6F5426968E5048DFBEF5FE68FA85B76
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/mLAnaHzhhl7bJEtLrVfvHdIfm3g.roa
Signing time: Sat 08 Feb 2025 19:07:00 +0000
ROA not before: Sat 08 Feb 2025 19:07:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 85.239.156.0/24 maxlen: 24
92.62.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e6:f5:42:69:68:e5:04:8d:fb:ef:5f:e6:8f:a8:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 8 19:07:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98b027687ce1865edb244b4bad57ef1dd21f9b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:11:61:cc:3b:88:fc:8d:a5:74:8f:5b:83:
78:25:ea:7a:43:3c:08:51:50:12:85:65:35:7d:f5:
60:3a:af:f9:3c:af:8e:01:01:9f:fb:05:37:46:5f:
93:62:f3:44:aa:30:2d:05:ab:c0:29:31:d1:57:ed:
62:d3:0e:a4:0a:dc:46:00:7e:41:65:a3:85:04:65:
12:19:af:2f:42:e7:c6:1e:b5:f5:cb:98:76:b9:24:
b3:03:91:35:3f:99:ca:21:1a:26:23:ca:63:34:f6:
7e:ed:2a:89:82:9e:f4:d0:3d:4a:81:e0:bc:0a:09:
92:ba:fa:91:76:a5:78:9a:29:50:f0:03:5f:1d:5a:
68:dc:53:50:60:8e:00:d1:68:76:ef:ea:24:4e:fb:
c5:ea:30:01:ce:96:92:8f:62:66:99:5f:1f:9c:e7:
6a:b4:9c:57:db:9d:3d:ee:fe:06:f2:f0:37:6f:b3:
87:a1:53:47:a2:0b:be:e1:9a:1a:16:74:d3:bb:bb:
81:86:f6:c5:86:9b:77:aa:19:65:fe:a8:58:90:84:
cf:c0:a0:70:79:80:19:a1:12:e8:f4:be:d5:aa:bc:
75:34:a7:57:83:57:bf:9d:33:8a:e0:0a:2f:39:9f:
4c:8e:fd:57:62:16:df:f3:21:09:3b:31:b1:97:d2:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B0:27:68:7C:E1:86:5E:DB:24:4B:4B:AD:57:EF:1D:D2:1F:9B:78
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/mLAnaHzhhl7bJEtLrVfvHdIfm3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.156.0/24
92.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fc:31:61:9a:27:77:c5:6b:bf:0e:87:b5:ae:ab:14:de:04:
02:d9:60:d1:9a:6c:2e:c9:fc:6c:3b:69:b2:1e:67:df:14:6f:
79:85:fb:49:21:d9:e5:64:ef:ce:4f:d9:c5:92:63:c9:5a:e9:
15:c0:8c:45:f2:37:a6:27:8b:a4:46:06:a2:b8:41:e7:89:95:
9d:e8:2e:8d:d9:d7:19:93:5f:b5:ae:75:45:7a:bc:04:44:f1:
fd:40:65:f3:57:1e:8a:77:b5:69:af:2f:26:3f:4d:92:09:5f:
e1:5f:ea:d8:fc:11:ce:c8:da:36:bd:bf:55:e3:f2:06:c0:3c:
22:63:5a:26:4f:6b:e8:c7:33:87:9e:b5:17:09:42:17:a0:3c:
bc:b8:51:bd:0f:c8:f6:2a:e1:73:05:d4:42:f9:3e:a4:9d:86:
1f:5d:9a:94:cc:00:3a:6e:6e:7a:3e:26:dc:b0:48:3d:b6:15:
cc:f0:64:ab:97:7a:c0:1f:1f:56:95:3b:fa:8c:4f:f7:b1:ab:
c7:36:6c:c9:b0:23:b3:2a:08:b2:ab:fc:13:a9:1c:b1:7b:3f:
6d:bc:a9:8c:b8:e8:a0:b1:7b:1b:e1:27:8e:f7:08:23:89:76:
77:a0:99:4c:a1:fd:84:88:f0:c1:19:8c:b9:29:ea:c3:94:b9:
cb:2b:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:26 2025 by rpki-client