Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/voV1pHSGjiHjmQ5rvvOxR7Je57c.roa
File: voV1pHSGjiHjmQ5rvvOxR7Je57c.roa (raw, json)
Hash identifier: vGBPYlDzvYjcVIBYHyOvwD8dXv9By2X73KVyoLfQW34=
Subject key identifier: BE:85:75:A4:74:86:8E:21:E3:99:0E:6B:BE:F3:B1:47:B2:5E:E7:B7
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194D0C741BE11256CCFB05B14086D2F915F
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/voV1pHSGjiHjmQ5rvvOxR7Je57c.roa
Signing time: Tue 04 Feb 2025 11:45:06 +0000
ROA not before: Tue 04 Feb 2025 11:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 85.239.159.0/24 maxlen: 24
92.62.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:c7:41:be:11:25:6c:cf:b0:5b:14:08:6d:2f:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 4 11:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be8575a474868e21e3990e6bbef3b147b25ee7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:51:96:39:5d:0d:9e:39:1d:dc:c8:5c:f1:
c0:e6:da:79:66:4f:1c:5d:02:74:d3:4f:f9:9c:c2:
c2:78:7c:49:72:0c:01:f8:26:0c:c0:69:b2:bc:e3:
83:b1:81:d6:ae:e9:ee:53:5b:13:1e:49:05:ae:9e:
07:b7:48:8c:41:cb:2a:02:f1:ac:e3:f1:9c:f3:dd:
b3:ff:a9:1f:f1:a9:c7:25:c0:cc:ef:5a:da:84:d1:
32:70:75:3a:3b:e7:0a:e7:97:4f:1f:60:04:d6:77:
fc:7c:d8:81:c1:ef:e1:7d:cf:2d:98:b1:24:c7:c9:
ea:2d:88:41:67:92:89:09:bf:a8:b9:c8:0b:f8:d8:
ca:a1:8b:06:dd:6c:f7:bb:6a:53:b4:0d:4a:fb:2a:
9b:02:e8:06:6b:cb:a4:2d:17:eb:43:76:84:73:2f:
4c:c9:28:87:ab:04:d0:fd:bd:ba:42:dd:87:9d:74:
0d:a1:63:40:79:66:ef:ce:3b:8d:2e:86:04:37:c1:
95:03:72:2e:b1:db:26:6b:da:88:f7:88:26:e8:9f:
58:a9:ce:92:d9:45:54:5b:d4:65:eb:7a:0b:cd:9c:
a1:57:10:f7:78:71:c2:3f:4a:e5:5a:c5:d3:6a:ea:
68:0b:14:18:a2:b1:b9:cd:92:fe:f7:5f:61:2a:71:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:75:A4:74:86:8E:21:E3:99:0E:6B:BE:F3:B1:47:B2:5E:E7:B7
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/voV1pHSGjiHjmQ5rvvOxR7Je57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.159.0/24
92.62.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:7d:93:71:f6:5e:b8:02:b7:ee:be:2c:b6:c7:33:65:e0:e7:
59:d5:bf:c3:66:b8:5b:79:20:76:1c:46:47:a4:e9:10:d7:60:
44:45:a5:ad:c4:64:d1:7e:78:ac:3f:8b:db:3f:ac:2b:e8:ee:
06:e8:91:61:21:a9:76:26:42:74:db:77:3e:28:9b:e7:90:d7:
03:bc:6d:71:d2:77:d6:4e:a5:8e:fa:cf:f5:68:57:fd:28:8f:
0d:58:33:86:6d:ef:93:c9:36:20:88:44:79:db:8e:83:ca:fe:
c2:a9:7d:c3:9c:2a:92:41:4b:ae:5b:5d:67:28:7f:45:69:74:
aa:f7:e7:5e:d3:03:03:a3:98:e0:4a:47:66:09:e1:29:41:a9:
31:5c:a3:b7:8f:e6:4d:e6:d4:d4:ce:bf:46:74:ce:a1:24:e4:
c7:d0:05:c5:15:a7:01:bd:1c:22:6b:c2:37:8e:e5:93:15:52:
34:d2:66:25:f2:2d:32:0e:b5:93:a4:a2:27:4c:1b:ec:2d:13:
2b:64:48:05:51:72:e6:6f:63:a0:8b:76:2c:7c:9f:a5:3c:3c:
a1:77:b3:e9:86:1c:3b:36:af:64:3e:11:ad:87:d8:34:05:5f:
6c:8f:60:f3:f3:09:32:72:0d:b2:0f:1f:91:da:8e:5d:78:2e:
b7:1d:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:54 2025 by rpki-client