Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/xPKyUQxnFJPn35VkW81yaSXinzU.roa
File: xPKyUQxnFJPn35VkW81yaSXinzU.roa (raw, json)
Hash identifier: R4ayWuE/UsnD9lO9OVMzRuqy5T/YDsR2aN3YFY+2mVI=
Subject key identifier: C4:F2:B2:51:0C:67:14:93:E7:DF:95:64:5B:CD:72:69:25:E2:9F:35
Certificate issuer: /CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Certificate serial: 018345CCC6D9D1ADFB090224AFC0064D6C89
Authority key identifier: 62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/xPKyUQxnFJPn35VkW81yaSXinzU.roa
Signing time: Fri 16 Sep 2022 10:16:31 +0000
ROA not before: Fri 16 Sep 2022 10:16:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 85.208.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:cc:c6:d9:d1:ad:fb:09:02:24:af:c0:06:4d:6c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Validity
Not Before: Sep 16 10:16:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4f2b2510c671493e7df95645bcd726925e29f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:82:97:10:b2:1e:ff:c5:a0:76:8c:30:11:
2f:65:29:2e:90:80:f2:74:dd:2c:2a:58:ac:8a:2d:
b8:c8:ca:d9:ca:b5:55:c7:f6:fd:df:f6:0f:0f:42:
94:dc:24:39:c6:2d:c3:11:9c:ad:bf:3a:34:71:5b:
93:c5:f6:2f:d3:9f:83:45:3c:3d:0a:3d:23:37:e5:
f3:61:8b:9f:b5:8f:3b:77:9a:18:87:3b:ab:82:65:
1b:b2:3a:6d:ea:30:35:34:81:a5:e3:c2:8f:5d:be:
97:66:07:b9:87:9c:0d:e4:9b:f6:9f:67:12:f2:a7:
10:69:50:d4:93:76:c1:79:bb:94:f1:fc:3f:ce:92:
ff:53:2e:3a:ce:3b:43:da:e1:c4:34:56:10:98:2e:
ff:79:90:f4:e9:a6:a0:29:a6:a6:b3:50:77:4f:00:
6e:1a:12:f4:bc:b7:21:0c:58:3d:b8:2d:b8:a5:37:
3f:cc:f5:be:8d:5e:f4:9f:f7:1c:8d:33:34:24:a9:
fb:47:1d:4f:15:33:11:95:43:02:77:47:64:99:15:
2a:08:9f:d6:60:14:6c:a8:ad:71:3a:f0:d7:54:4e:
5c:d6:47:c9:21:c1:5a:3f:e6:ed:fe:89:d6:73:09:
a5:43:27:11:60:d0:cf:63:46:5e:08:b2:7c:bf:67:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F2:B2:51:0C:67:14:93:E7:DF:95:64:5B:CD:72:69:25:E2:9F:35
X509v3 Authority Key Identifier:
keyid:62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/xPKyUQxnFJPn35VkW81yaSXinzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/YsQwDsNNbI31CxgZbm_KWLE5MSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:58:b7:9a:37:4e:cc:66:20:ec:de:95:4d:e3:a2:50:6f:15:
f1:99:5c:4f:cd:cb:cd:d8:ef:a9:5d:2e:10:78:c4:d3:10:a4:
30:58:c6:20:49:37:dc:fc:b2:8d:bc:77:5c:b2:a4:4e:3d:24:
bb:13:fa:b8:1a:57:cc:44:99:90:70:2b:c6:90:12:a8:74:32:
80:a2:1c:ca:19:3d:34:66:a9:68:9d:a0:94:bb:57:e5:ef:fa:
1c:49:75:51:b6:0d:f8:6d:1e:f7:d6:6c:8a:f8:45:25:0e:16:
ec:96:a5:29:61:b9:db:99:e5:b6:a8:08:ba:ab:91:52:0e:95:
ac:de:12:98:1b:e3:56:61:f5:3c:22:64:31:61:74:41:76:66:
f8:53:39:87:60:be:26:7c:a3:27:95:ab:da:c0:23:f3:ab:c5:
af:43:91:6d:fc:93:c7:6e:cb:52:b8:93:2c:a1:57:93:0c:1e:
95:75:27:20:74:a2:5e:49:af:16:44:3b:92:45:4f:bc:d2:d0:
e0:a4:59:9a:c3:ce:d1:8a:bb:f1:af:be:31:8d:f4:ba:03:93:
73:66:e0:26:89:ad:85:cc:b4:9a:7c:60:d3:d2:8b:9c:bd:86:
7a:b3:fa:6b:69:2b:9f:5e:7b:a9:05:ae:c6:3d:45:08:e6:e3:
07:48:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:21 2025 by rpki-client