Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7gfQbRAO-deirsyPSltnTDwDO7E.roa
File: 7gfQbRAO-deirsyPSltnTDwDO7E.roa (raw, json)
Hash identifier: YZ6tB5eH1YPvmpiW1ff4O/+pxqKbqT6wpC8s5ltAsOg=
Subject key identifier: EE:07:D0:6D:10:0E:F9:D7:A2:AE:CC:8F:4A:5B:67:4C:3C:03:3B:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195AF99D8AE48BC3F49BCDBBB0869D59281
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7gfQbRAO-deirsyPSltnTDwDO7E.roa
Signing time: Wed 19 Mar 2025 18:10:50 +0000
ROA not before: Wed 19 Mar 2025 18:10:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201133
IP address blocks: 85.217.222.0/24 maxlen: 24
85.217.223.0/24 maxlen: 24
93.123.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:99:d8:ae:48:bc:3f:49:bc:db:bb:08:69:d5:92:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 18:10:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee07d06d100ef9d7a2aecc8f4a5b674c3c033bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:10:8c:1b:dc:ab:26:a5:90:88:f9:61:61:
97:ef:bd:4f:00:c6:83:23:92:23:c9:4a:64:9e:16:
7b:e2:31:6f:1a:62:63:b0:87:aa:50:c2:0d:53:ba:
c3:e6:25:e3:74:0f:bd:73:3b:96:b0:de:05:96:f0:
da:32:95:a9:54:55:34:c1:01:df:11:79:c3:b1:61:
ac:b4:f1:3e:70:19:9c:99:6c:20:86:70:1e:01:ec:
30:25:1d:2f:20:90:84:8b:71:72:92:dc:9b:d6:5a:
0f:4c:fb:ea:ed:1d:60:fb:59:6b:00:c3:0d:33:51:
a3:75:b0:8e:e2:1a:a9:7b:c3:b9:24:18:f0:07:89:
a3:e0:81:5c:6d:b2:8d:a2:03:fa:ef:c7:ae:60:b8:
5b:87:79:ff:58:7e:e3:d5:1c:ff:65:a9:3f:50:98:
83:ca:37:ce:d4:12:15:18:dc:2b:76:0a:b2:ac:0b:
37:2f:bb:ca:37:e0:ba:fd:4a:66:dc:28:fd:cf:84:
73:10:8e:6b:24:08:84:e1:33:90:bd:98:d9:e0:7b:
35:53:4c:57:c5:5c:67:d0:1b:77:74:de:79:00:a4:
be:7a:8e:17:a1:62:9e:8c:62:ee:a6:06:90:09:b3:
4c:da:00:83:68:5c:c3:07:7f:63:02:1e:a5:9d:9e:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:07:D0:6D:10:0E:F9:D7:A2:AE:CC:8F:4A:5B:67:4C:3C:03:3B:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7gfQbRAO-deirsyPSltnTDwDO7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.222.0/23
93.123.10.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8c:1b:b0:25:7d:0e:8f:58:e0:97:3e:30:5b:d7:52:92:6f:
e6:84:4c:94:b1:83:ab:76:0c:fe:a3:4b:e0:3f:06:bb:8d:24:
00:84:33:1c:b0:8a:2f:e8:5d:9a:43:28:5f:42:31:21:69:f4:
39:4d:fb:95:6d:24:b0:16:13:14:41:6b:fe:d1:ff:8c:27:67:
22:7c:7d:04:be:d7:12:f3:b5:38:d1:45:7e:fe:8b:52:46:aa:
7e:d7:f6:76:20:70:8a:81:09:2c:9c:4a:50:31:5d:b8:a6:8b:
09:3a:60:68:6a:2a:03:b8:70:61:a4:96:21:49:92:0f:54:d2:
8f:ac:0f:33:fc:77:51:f3:a9:62:e4:88:15:97:b0:7f:51:8f:
f8:68:72:c9:1b:34:92:97:4d:6f:1b:f0:67:e6:d8:c8:b7:30:
dd:03:3b:ab:18:72:55:3c:a1:1d:c1:98:19:4d:27:1f:c4:93:
bb:e7:28:c0:6a:5a:f0:71:8c:b0:f8:1a:f4:43:46:a7:bc:1e:
ae:f6:75:54:26:68:ba:d5:7b:02:cb:3f:07:47:aa:ed:13:be:
61:95:60:2a:d0:97:c9:ac:b5:41:36:0c:cd:50:b8:b7:fd:7d:
fd:0a:e1:8b:33:8a:8e:2b:c0:f4:34:9b:39:1c:0a:ac:8d:45:
3c:8e:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:40 2025 by rpki-client