Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/N5-TkAOuaiP9KvNg3LpQ4gyBO6Y.roa
File: N5-TkAOuaiP9KvNg3LpQ4gyBO6Y.roa (raw, json)
Hash identifier: OQ5xz5XHa0q3A+uIf5ruS2QbZbCQXzJyGObzIJu7P/0=
Subject key identifier: 37:9F:93:90:03:AE:6A:23:FD:2A:F3:60:DC:BA:50:E2:0C:81:3B:A6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019127C850D83A20C607ABA8C693BDE02A65
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/N5-TkAOuaiP9KvNg3LpQ4gyBO6Y.roa
Signing time: Tue 06 Aug 2024 13:02:04 +0000
ROA not before: Tue 06 Aug 2024 13:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 85.254.8.0/21 maxlen: 21
85.254.13.0/24 maxlen: 24
85.254.63.0/24 maxlen: 24
85.254.117.0/24 maxlen: 24
85.254.118.0/23 maxlen: 23
85.254.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:c8:50:d8:3a:20:c6:07:ab:a8:c6:93:bd:e0:2a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 6 13:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=379f939003ae6a23fd2af360dcba50e20c813ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e7:09:7a:95:37:94:d1:d9:36:e8:5d:a0:71:
a1:37:0a:4c:1c:f8:ac:30:92:8e:95:d3:49:1a:3c:
b6:08:43:9f:7f:d4:82:44:5f:54:31:82:82:12:cf:
28:ae:d5:79:8c:0a:16:1f:cc:72:0e:ee:5d:eb:3f:
05:8c:0f:27:df:52:d1:52:8b:37:23:09:ed:43:02:
73:db:e0:f3:7c:36:80:4c:a0:d4:ea:69:89:32:62:
82:0a:24:e1:8c:69:60:41:d0:ec:a9:47:4c:ba:b5:
23:70:ea:b5:81:ff:d6:69:25:76:69:77:26:4a:09:
da:2a:c0:de:7a:e9:29:97:b4:d8:0a:cc:1e:00:9e:
f8:d5:1d:c0:2d:16:84:9f:60:60:ec:7a:e7:ec:93:
ed:f9:c2:5c:1e:7e:1d:07:51:e1:f6:79:67:e5:a7:
50:0c:6a:16:73:a9:cc:80:8c:7e:1e:63:21:06:66:
6e:3c:0d:16:4e:8d:d3:fc:42:0f:d4:f1:17:1f:50:
ca:f1:d1:c9:6f:ac:8d:9e:fe:dc:af:c1:e7:fc:b8:
11:1d:65:a4:fb:11:eb:cd:1f:0c:b5:19:1a:1c:57:
6e:3c:ce:b4:d9:01:2f:3c:cf:09:a1:82:5f:6e:d3:
23:35:a1:9b:bb:29:ab:f8:24:0e:32:66:6a:07:83:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:93:90:03:AE:6A:23:FD:2A:F3:60:DC:BA:50:E2:0C:81:3B:A6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/N5-TkAOuaiP9KvNg3LpQ4gyBO6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.8.0/21
85.254.63.0/24
85.254.117.0-85.254.119.255
85.254.123.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7e:d1:af:0d:51:92:18:51:7c:a1:3f:df:98:4e:a9:ed:3d:
fb:ff:e5:65:6a:36:94:e9:f9:81:bc:5a:bd:ee:fd:57:19:4c:
29:08:83:2f:b0:9f:67:2f:f0:e2:b3:0d:50:1b:0d:c8:f2:b1:
14:fe:4f:fd:66:76:59:44:07:e1:54:8d:6f:8d:1e:24:58:cc:
ce:3f:7d:55:9c:16:f7:62:e5:a8:2c:3b:3b:bb:f2:38:b9:ae:
73:37:1d:aa:45:44:43:c6:72:65:d2:5f:4c:0b:28:97:6e:51:
2a:01:73:9a:67:6f:95:8f:9b:ac:d1:3e:de:51:38:bf:11:f5:
55:c6:32:76:ae:9e:93:9e:3f:b6:87:98:82:25:c4:24:b9:02:
c5:e6:17:c4:10:d1:48:cd:18:2c:c2:b3:d3:20:a3:ca:5d:2b:
cf:b6:85:cc:3a:c2:6b:a5:04:2e:86:80:5a:d6:71:8d:75:6b:
0a:c0:c6:4e:a5:8f:a0:45:3e:7e:82:0b:07:85:e0:d0:90:e9:
db:51:28:d0:d0:ac:22:8b:f6:90:39:56:45:59:01:ba:e7:c2:
49:2b:9f:82:8a:e9:86:0b:40:64:ae:e9:14:81:8a:d6:29:da:
e7:1e:b8:1e:d4:11:c5:25:45:85:1f:51:6a:7c:96:e3:70:c4:
20:08:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:04 2025 by rpki-client