Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/Tj6608f-1a6fYqa_z-5d8FeCzjM.roa
File: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (raw, json)
Hash identifier: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=
Subject key identifier: 4E:3E:BA:D3:C7:FE:D5:AE:9F:62:A6:BF:CF:EE:5D:F0:57:82:CE:33
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0194EE3E30AEF7B9101A8A79ACA15F5C14CE
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/Tj6608f-1a6fYqa_z-5d8FeCzjM.roa
Signing time: Mon 10 Feb 2025 05:04:00 +0000
ROA not before: Mon 10 Feb 2025 05:04:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31643
IP address blocks: 85.28.0.0/20 maxlen: 20
85.28.0.0/21 maxlen: 21
85.28.8.0/21 maxlen: 21
85.28.16.0/20 maxlen: 20
85.28.16.0/21 maxlen: 21
85.28.24.0/21 maxlen: 21
85.28.32.0/20 maxlen: 20
217.151.16.0/20 maxlen: 20
217.151.16.0/21 maxlen: 21
217.151.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:3e:30:ae:f7:b9:10:1a:8a:79:ac:a1:5f:5c:14:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Feb 10 05:04:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3ebad3c7fed5ae9f62a6bfcfee5df05782ce33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:d2:80:48:53:48:61:9f:ed:34:ab:d4:eb:
81:16:97:7b:df:c9:ac:b2:6a:48:71:1e:b5:af:fa:
68:25:cf:a6:30:1a:4c:ae:e5:bb:b7:91:9e:ce:f5:
57:d3:34:cc:53:99:da:93:53:53:86:d7:4d:79:e5:
11:5c:83:e1:f5:8f:f0:a0:8c:be:bd:77:5e:43:4d:
be:30:8c:47:7b:27:95:cc:82:dc:2d:af:83:8c:e6:
c8:c5:17:99:58:a7:31:41:19:34:f8:6e:55:78:f6:
30:1d:f9:6e:e2:cb:09:76:db:98:4c:5c:d0:a7:ef:
c3:1c:24:18:78:01:38:3c:d4:8a:59:59:13:60:e4:
9f:96:9e:36:ac:b5:19:1f:d3:c5:d8:cc:18:0b:4a:
3d:53:47:d6:be:50:bd:7c:58:4a:88:f1:c1:ee:01:
de:7f:bc:d4:60:ff:8a:d5:6c:a7:e1:0a:a5:db:1b:
f7:e1:84:35:be:e8:8e:8a:3f:1e:12:74:7f:73:5a:
e2:04:71:93:a9:2f:c2:24:35:d3:70:81:6d:de:7e:
2b:ea:25:fc:f8:0b:47:17:01:3f:a2:72:10:48:47:
6d:e4:e6:8a:e7:28:02:9b:9c:af:2a:a4:fa:05:ca:
96:d1:40:94:e8:98:31:cd:d8:0d:c9:d6:ca:dc:06:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:BA:D3:C7:FE:D5:AE:9F:62:A6:BF:CF:EE:5D:F0:57:82:CE:33
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/Tj6608f-1a6fYqa_z-5d8FeCzjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.0.0-85.28.47.255
217.151.16.0/20
Signature Algorithm: sha256WithRSAEncryption
35:f1:27:28:c9:64:33:9d:af:a7:50:d0:a6:cc:bf:10:7e:72:
26:de:65:80:3b:7a:89:4e:48:9e:e0:22:97:c2:7e:0c:6f:0f:
66:9f:2c:1c:44:d1:95:3c:39:bb:6d:20:d1:b3:3c:ad:a3:74:
67:ee:37:92:5f:1e:e8:21:f6:4c:4c:c0:6f:26:14:bb:c8:93:
e9:66:cf:64:39:5f:96:15:02:9a:3d:2f:af:66:fa:78:9f:f8:
95:d6:46:a1:12:c2:0e:49:9c:ea:11:74:aa:d0:b5:5b:26:2e:
d2:5e:1c:61:4f:5f:b0:9e:df:b0:8d:b2:c9:82:93:3e:5c:8e:
95:85:02:6e:f4:93:c8:19:4f:f6:77:d8:d2:fe:5d:1e:ec:bc:
13:e0:77:61:8c:0d:2b:7d:a6:17:76:9a:c1:ea:6c:54:12:0b:
37:40:0e:df:01:11:09:0e:21:25:de:ed:55:1c:6c:c5:4a:db:
94:8e:5d:89:11:3b:cc:0d:0c:0c:ab:65:51:a8:84:43:c3:41:
d0:cd:d6:6a:15:d8:ad:57:e6:39:0a:b9:4b:c5:82:e0:ef:f7:
fb:08:da:bb:83:33:4a:ff:06:65:d8:f7:20:6a:b1:c8:37:1f:
17:02:e1:f4:92:7a:4f:38:9a:53:22:bc:6a:0d:ce:eb:1d:5c:
93:63:90:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:34 2025 by rpki-client