Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa
File: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (raw, json)
Hash identifier: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=
Subject key identifier: B9:0F:75:36:AC:74:C0:9D:21:9E:EE:FE:2A:4C:C0:40:BF:D5:F9:CB
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 019425FDEBC3C984523012D617FD3EDCCE10
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211631
IP address blocks: 85.112.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:eb:c3:c9:84:52:30:12:d6:17:fd:3e:dc:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90f7536ac74c09d219eeefe2a4cc040bfd5f9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:fb:f4:6c:b9:b3:15:b9:f1:96:92:3b:22:
ca:ce:ab:3e:82:b2:f0:3c:e7:3f:46:d9:0a:e4:15:
da:1e:c2:76:bf:bb:6f:64:53:c5:e3:05:79:d8:dd:
e8:4a:76:fe:fe:c7:3b:38:fa:40:67:d5:1a:e1:fd:
f0:4d:17:39:15:92:68:94:ed:15:05:b9:ae:fa:50:
45:0a:6d:88:65:ec:be:b1:f8:02:4d:61:4c:95:7d:
85:ff:3a:ff:0b:4e:47:86:81:2a:57:05:a9:a8:0a:
ba:3a:75:23:54:70:84:ee:74:a0:56:0f:6c:a7:ca:
d3:b8:37:eb:01:a3:1b:31:b5:e9:e5:5d:c6:6b:64:
c8:36:21:3d:71:9f:5c:ae:80:aa:b2:7d:01:43:ff:
dd:4f:0e:86:02:74:0d:b2:4e:6a:1e:98:45:82:e8:
fa:af:38:63:38:7e:a2:f5:c3:cf:a8:a3:80:d9:90:
ca:a2:c7:a1:d1:1e:73:3a:ca:12:4d:d1:37:a8:df:
f4:ff:7c:15:02:f2:d3:a0:1a:2a:f1:d6:ef:be:56:
7f:74:d7:07:d5:9d:74:17:5f:3b:dd:95:c7:70:47:
0c:1a:0b:3d:22:8f:85:db:e8:df:62:d1:a9:f4:30:
37:31:6e:74:4a:df:78:96:08:be:0c:ab:b0:58:db:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:75:36:AC:74:C0:9D:21:9E:EE:FE:2A:4C:C0:40:BF:D5:F9:CB
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.98.0/24
Signature Algorithm: sha256WithRSAEncryption
97:37:5e:93:95:78:28:79:a8:65:53:7d:68:c6:fb:64:34:02:
c6:71:e1:d3:a1:92:f1:10:9b:66:5c:dc:36:84:69:c8:e7:ed:
09:79:88:80:7f:bd:c5:ce:9c:56:87:55:ff:f0:94:0e:ae:1a:
f2:0c:eb:7b:c2:0e:ee:b5:3a:fb:23:4c:ed:ff:f6:f2:12:83:
63:f1:46:0e:a6:21:49:15:e1:a9:49:ce:98:cf:51:7d:79:e5:
d9:9c:9b:2f:ba:ce:e7:36:06:a2:bb:ca:76:96:f6:d4:ad:34:
42:6c:92:dc:f1:2c:1c:ab:17:10:69:12:7f:db:9b:03:e3:80:
c3:23:cb:30:99:b8:9c:14:a2:e3:7c:15:b0:3b:f8:70:a5:20:
4c:dd:1c:58:4b:a3:64:0b:81:81:fc:fa:ee:11:07:58:c2:58:
7f:ad:bd:9a:19:be:e3:0c:80:74:d5:fd:0e:1b:34:b5:d4:4f:
bd:81:ef:4b:81:e5:30:73:f7:af:0a:c7:f1:62:86:45:b6:fe:
60:7d:87:44:28:d8:0d:e6:f1:91:c2:4c:48:e5:95:70:63:2b:
57:cd:80:0b:f0:cc:e0:56:cb:68:ac:10:71:75:1b:59:94:3f:
22:57:53:ea:4b:f9:bc:37:b3:09:19:d8:f7:9d:4b:c9:6a:5c:
ec:61:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:36:44 2025 by rpki-client