Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/6Lj-QpuiG-OxqUZuje1E8uzTNJM.roa
File: 6Lj-QpuiG-OxqUZuje1E8uzTNJM.roa (raw, json)
Hash identifier: aX8wK4D+GJ3Frsq219JqRuf7Mv1U4fWDfSGWKYJrK34=
Subject key identifier: E8:B8:FE:42:9B:A2:1B:E3:B1:A9:46:6E:8D:ED:44:F2:EC:D3:34:93
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E4989F46A96086E6CCF0DD7C2E642
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/6Lj-QpuiG-OxqUZuje1E8uzTNJM.roa
Signing time: Wed 01 Jan 2025 15:48:57 +0000
ROA not before: Wed 01 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 85.115.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:49:89:f4:6a:96:08:6e:6c:cf:0d:d7:c2:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b8fe429ba21be3b1a9466e8ded44f2ecd33493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:16:fd:a0:f1:d8:d6:92:55:c6:83:45:70:
23:ca:e5:2a:75:71:31:03:73:f6:bf:bc:99:02:ee:
60:a7:01:43:b2:9f:c7:1c:c8:3c:ad:39:4b:88:53:
ec:6a:60:1b:ee:02:40:ed:b7:9c:41:76:53:34:3c:
d5:79:bb:e9:99:da:f9:25:c9:86:94:62:e8:f8:6c:
bc:05:83:8d:99:df:db:12:db:7e:f9:4b:19:37:de:
9c:10:5e:f1:d2:a7:84:8e:9d:f9:76:f7:b3:42:42:
cc:23:27:c3:f6:4b:98:57:6d:8d:e4:c1:d1:26:c6:
3a:08:ab:55:c6:61:6b:a2:43:50:29:a8:d9:f5:61:
82:d1:c6:9f:ad:8e:d4:9d:29:b9:01:3f:e6:94:8a:
b4:97:21:d3:3c:fe:c2:e4:9a:da:16:a8:a4:37:26:
a5:72:5e:a7:ae:e5:ff:80:28:6a:2c:b3:44:d9:63:
28:da:02:8e:be:6e:45:75:b3:e1:36:47:09:18:b7:
e1:54:c8:16:45:ab:37:14:95:45:e2:f3:21:7d:65:
f9:69:e1:34:0c:4c:a3:8a:72:b9:5e:c0:ef:08:0c:
5e:f6:22:36:dc:2d:11:e7:15:b5:c7:01:63:bd:db:
81:dc:6d:82:10:72:8f:58:fb:8f:2b:73:df:9e:e6:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B8:FE:42:9B:A2:1B:E3:B1:A9:46:6E:8D:ED:44:F2:EC:D3:34:93
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/6Lj-QpuiG-OxqUZuje1E8uzTNJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.211.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e6:c5:0d:72:04:bb:70:bb:22:13:50:ff:74:e4:7b:f2:b5:
8e:de:c1:07:55:0f:48:8c:79:5e:cb:1f:fb:28:7b:b3:9c:20:
0a:c2:09:88:bb:c8:24:8a:35:29:6d:cb:44:84:24:21:3b:a5:
23:08:a4:33:e8:15:45:da:b9:e4:e6:4a:d9:cd:19:bf:52:51:
6f:fc:3b:07:26:4c:a6:05:e3:75:4e:94:b6:cb:2b:78:6a:b0:
21:08:62:87:02:36:5f:c9:c3:d2:57:94:e7:19:a9:55:c3:18:
22:94:e5:ff:47:c2:e3:62:c4:49:80:dc:d6:c6:95:ce:40:c5:
14:5f:cf:5f:f9:24:8d:69:bf:3d:e3:91:93:f2:9d:b0:c7:09:
31:d6:bb:b6:5e:18:22:5e:ee:b1:a3:a6:b3:ce:eb:eb:be:ec:
a0:d6:4b:94:d7:b2:3b:86:50:17:2d:ad:67:c1:98:eb:cf:cb:
eb:8e:ed:fc:a8:14:31:c2:80:7f:f5:78:0b:30:a4:4d:8d:54:
67:42:2a:a9:f9:01:5a:e7:ba:91:b8:c0:4b:6e:47:7f:4e:c2:
ab:cc:62:76:e7:c6:52:f3:14:2f:7e:7f:59:7e:72:f7:d9:e9:
a4:f1:5a:8c:f6:57:82:a1:d0:33:1b:6d:c4:82:a5:0d:0e:df:
9f:49:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:29 2025 by rpki-client