Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/R5-GHqRBHzIlV6jvvlNH_lb4TF0.roa
File: R5-GHqRBHzIlV6jvvlNH_lb4TF0.roa (raw, json)
Hash identifier: QoUA5NVOXR6cetAGOVSPUBE4V+751DLtLc9qYLhblvU=
Subject key identifier: 47:9F:86:1E:A4:41:1F:32:25:57:A8:EF:BE:53:47:FE:56:F8:4C:5D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B231665C9A9E6DA7D980A72A572D54
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/R5-GHqRBHzIlV6jvvlNH_lb4TF0.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.208.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:31:66:5c:9a:9e:6d:a7:d9:80:a7:2a:57:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=479f861ea4411f322557a8efbe5347fe56f84c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:d3:93:38:b8:cc:2b:cc:11:55:7f:76:f1:
29:74:52:d8:a3:cb:ad:ab:92:3e:29:c9:be:bb:ad:
20:0a:ae:5a:ee:1e:1a:ce:ee:12:c8:37:62:69:61:
cf:62:a0:b9:a6:e4:3a:4d:2c:9e:1b:d0:6d:63:76:
ea:66:09:f4:f5:3f:fe:fb:e8:93:27:d2:53:67:eb:
81:70:2f:a2:ff:15:2c:de:c8:fe:fe:48:43:f9:70:
06:d4:9b:7c:ce:36:47:1f:ff:eb:6e:d4:c6:b4:fc:
8c:b9:50:b8:84:b1:1e:fd:c6:16:e1:9b:ca:cc:94:
9b:f0:2e:3f:c8:b3:e4:4e:52:74:ff:a0:ec:52:f1:
99:df:ef:8b:ff:25:71:8a:2a:f6:f3:4e:1a:32:d8:
25:34:52:91:7c:f8:34:46:b1:77:7f:ae:eb:8b:80:
72:b6:b2:43:e1:17:91:2c:54:80:8e:ff:92:86:ff:
5f:dc:3f:5b:c8:a0:14:08:09:08:15:62:4c:c2:5c:
a2:37:f9:29:65:d9:22:d8:76:11:cd:c5:98:52:72:
90:07:9d:bc:09:fb:62:fa:be:3d:d9:60:39:d6:0d:
52:a0:b8:1d:fd:09:30:b7:a5:25:51:01:6b:83:bb:
87:89:a4:bd:e7:b5:dd:21:42:ea:60:31:f6:6d:24:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:86:1E:A4:41:1F:32:25:57:A8:EF:BE:53:47:FE:56:F8:4C:5D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/R5-GHqRBHzIlV6jvvlNH_lb4TF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:41:35:57:54:94:26:3f:4a:bc:38:0e:30:6d:1e:38:6c:aa:
b6:48:db:c4:dc:44:74:67:f2:42:d4:a7:d4:d7:bb:51:92:58:
ac:a4:37:98:c6:b1:d2:3e:b4:fd:f0:0a:45:0c:d6:76:9e:4f:
0d:07:88:32:9e:fc:b7:90:eb:59:d8:d3:95:5e:21:ff:da:62:
f9:0c:7e:53:89:9c:10:0a:f7:73:0c:be:ee:10:d0:d0:34:ce:
3f:3b:c5:65:77:be:82:d6:b5:a2:60:b8:8d:2e:2c:dc:1a:46:
44:f7:90:7c:72:79:e9:f8:4c:78:11:a5:62:61:18:cf:56:0e:
cd:b0:44:eb:b6:86:28:20:6f:00:b1:33:77:2b:46:ef:61:ef:
53:11:8f:d0:7f:be:e6:b8:3a:f4:8f:ae:a1:4d:a7:fe:61:7c:
97:7f:01:05:ea:99:b7:a0:85:88:ac:1e:0a:93:d9:5a:61:2b:
63:a0:ae:84:47:26:d9:76:f8:ad:c2:0c:0b:c1:ba:eb:0a:9a:
15:24:86:3a:87:d6:61:59:0d:d3:33:67:3c:65:0d:d0:5b:4d:
8e:db:20:ca:8f:7d:29:1c:07:a8:f1:4b:f4:f0:00:04:25:7c:
72:29:ca:58:0b:49:d1:34:56:39:43:75:20:0d:8f:69:a6:e5:
36:d2:30:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:45 2025 by rpki-client