Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/58fbPOFYsvSvpunLR9rNMDG4HkA.roa
File: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (raw, json)
Hash identifier: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=
Subject key identifier: E7:C7:DB:3C:E1:58:B2:F4:AF:A6:E9:CB:47:DA:CD:30:31:B8:1E:40
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 019425FDEB294E5D2179D1AA59739D3B6998
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/58fbPOFYsvSvpunLR9rNMDG4HkA.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25478
IP address blocks: 85.112.96.0/19 maxlen: 24
2a00:1b30::/33 maxlen: 33
2a00:1b30:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:eb:29:4e:5d:21:79:d1:aa:59:73:9d:3b:69:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7c7db3ce158b2f4afa6e9cb47dacd3031b81e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:c0:93:56:c9:23:7d:7a:13:a2:c1:08:6a:
37:84:55:b5:0e:d4:a3:cc:0a:d0:0f:01:ec:c9:9d:
84:9e:9e:b0:bf:06:b0:2c:54:b8:10:8f:76:9d:15:
0b:d7:7c:31:e4:d9:b9:27:58:d4:ba:8b:72:4f:30:
66:36:37:ee:c7:9e:24:3b:91:39:88:94:9e:ff:29:
de:23:98:43:ae:4e:51:d5:11:0b:d5:14:3a:21:21:
00:17:dc:7c:3a:42:c6:1b:2c:48:90:66:a5:8c:3a:
e2:27:44:d3:b5:62:76:af:15:05:3a:8e:a4:43:13:
f8:f0:2f:4d:5f:ef:06:3d:02:1f:f5:3a:79:5a:51:
49:52:9e:b0:93:aa:47:06:67:2e:97:fb:ac:d1:60:
14:90:1d:ac:71:c1:a5:c7:49:32:a9:9b:6e:f1:c7:
07:08:8a:b5:4d:fb:34:d7:22:87:d1:6c:52:70:d1:
30:f2:83:c4:f5:25:cd:06:66:53:1c:3c:f4:5b:1d:
5f:dd:24:07:a2:78:2a:c6:18:3c:23:f5:ad:12:59:
ed:8b:6c:b1:d0:c6:60:da:c2:c1:a7:75:f3:7c:93:
87:a1:d0:60:52:51:17:9b:28:f3:a4:4f:67:c5:05:
92:8c:7a:07:a2:de:cc:6d:17:34:02:b6:3c:9d:f8:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:DB:3C:E1:58:B2:F4:AF:A6:E9:CB:47:DA:CD:30:31:B8:1E:40
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/58fbPOFYsvSvpunLR9rNMDG4HkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.96.0/19
IPv6:
2a00:1b30::/32
Signature Algorithm: sha256WithRSAEncryption
76:98:04:cc:44:a6:0a:d3:01:0d:1b:0c:f7:4e:50:fd:cc:9c:
fe:dd:a9:f0:be:39:fc:fe:69:43:e8:2d:2f:f0:31:d5:d2:de:
c1:e7:b0:86:1d:ea:77:fe:ee:8f:8a:b0:a9:31:4a:95:87:7b:
0b:52:42:9e:96:69:98:c5:0e:02:b4:ac:33:ac:49:34:e9:ca:
3d:f1:36:3e:52:92:66:5d:95:55:9d:46:d2:e4:f5:d5:90:4a:
d5:93:03:1a:c8:f8:ba:8d:8a:b6:d0:d7:12:49:e6:eb:38:ce:
15:48:96:73:ab:30:81:27:76:64:d3:7f:f2:7a:24:45:87:8b:
f3:cc:8b:d3:f3:30:eb:dc:b3:d2:6f:5c:86:07:c3:cf:f3:fb:
57:1b:07:8f:21:0a:6c:b0:63:ad:11:51:e0:e3:ec:0e:25:27:
b8:fe:7e:49:4f:da:00:8d:35:ea:d2:a6:86:4b:91:40:17:88:
97:83:61:9e:49:51:ad:9c:38:54:86:71:11:f0:d1:7c:3e:5d:
d7:31:48:e5:95:d3:4e:cf:06:3e:26:95:f1:bd:d5:b2:a4:4e:
f3:23:1f:2b:fb:36:90:a1:30:d8:34:2b:5d:ef:b9:33:5d:3e:
72:ce:90:0e:6f:ce:2a:60:14:c1:61:7e:6e:e1:ee:e0:95:bc:
1f:c3:72:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:18 2025 by rpki-client