Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1qE86vt5fiWoLnQfU7T3e3cQN0k.roa
File: 1qE86vt5fiWoLnQfU7T3e3cQN0k.roa (raw, json)
Hash identifier: fEbHOyyy+5qGfQmiji/XgKV2vOWglgEAxzg0WMSxWio=
Subject key identifier: D6:A1:3C:EA:FB:79:7E:25:A8:2E:74:1F:53:B4:F7:7B:77:10:37:49
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C36F643E51DDA2AB9C1FE0AB88392
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1qE86vt5fiWoLnQfU7T3e3cQN0k.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199513
IP address blocks: 85.120.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:f6:43:e5:1d:da:2a:b9:c1:fe:0a:b8:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6a13ceafb797e25a82e741f53b4f77b77103749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:d6:4a:6f:6d:9a:4c:82:2b:f4:3c:79:af:
36:2b:79:12:0a:f4:87:ad:9f:21:a2:4e:fe:51:67:
24:ef:f2:64:69:38:9f:e9:1e:de:99:f2:17:04:33:
1e:13:22:1f:a7:d9:dd:6b:9d:e8:56:51:64:5a:22:
9b:0e:e4:42:f2:de:24:18:d2:56:87:4b:44:bb:4a:
15:e1:27:32:ba:c0:cf:9d:89:5a:ea:f0:93:fb:f4:
3e:29:34:9c:14:54:1e:2f:d0:e5:a1:f2:30:52:8a:
dc:85:a1:62:8e:24:d1:6a:6e:c2:fa:bc:fd:e0:ae:
42:be:66:d9:5c:1d:d5:30:58:63:fa:7a:93:6f:a1:
e3:67:e4:56:b9:01:f3:35:f3:45:82:93:dc:22:14:
c9:a0:a9:dc:31:e0:a3:7c:39:9a:f4:76:40:ee:c2:
c8:ad:e0:1d:51:1a:ef:94:25:af:80:b5:39:48:36:
68:78:4c:a4:95:e7:45:74:35:b6:de:1b:98:9e:ed:
af:66:7c:f0:27:22:44:6e:b8:17:66:9a:66:54:de:
ae:b3:31:8a:61:c9:9d:ef:75:f1:3d:07:c9:eb:fb:
ab:9b:78:1d:34:19:98:93:a8:bd:9e:da:10:9c:fa:
34:29:51:25:41:6e:9d:e9:a1:f1:df:aa:df:74:57:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:3C:EA:FB:79:7E:25:A8:2E:74:1F:53:B4:F7:7B:77:10:37:49
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1qE86vt5fiWoLnQfU7T3e3cQN0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:97:97:a1:51:6d:76:6e:1c:77:0e:a8:70:78:cd:29:f9:ab:
a7:8e:eb:d1:1b:61:8f:02:52:17:9e:fe:40:6d:45:ac:59:d6:
01:b6:13:5a:31:33:05:20:f9:91:db:c3:af:29:a8:7b:1c:c5:
e1:59:60:2b:ce:09:bc:eb:7a:94:1c:a2:ea:32:ca:3b:61:0c:
f3:b9:d9:26:68:fe:66:bb:56:c2:f8:37:0a:c7:b8:af:fc:cf:
d2:e8:3f:3a:fb:86:cc:e6:e5:00:83:5b:96:a3:0b:ae:e7:75:
93:d5:1d:27:92:ef:43:ce:8b:db:9f:de:b6:04:72:10:4a:67:
7b:1a:d0:b0:c7:85:94:50:11:cd:52:39:09:d1:89:b9:ad:07:
2f:17:49:25:e0:33:8e:07:83:ef:f9:33:81:3f:fc:a1:5c:20:
0a:2a:4b:f9:db:56:76:21:39:a1:5f:94:85:42:7b:a9:86:c9:
04:55:e2:3e:bb:1f:4d:8e:ed:1a:7d:ee:92:7f:19:ae:17:02:
9f:c8:78:1f:19:25:35:01:2e:7b:2e:11:66:3f:21:d7:02:46:
24:59:bd:8e:4d:a2:96:4a:db:60:2a:58:fe:8d:7f:50:f8:ff:
86:a2:2c:84:5e:5c:54:17:19:c9:39:96:42:7d:9b:fe:19:ca:
91:6f:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:25 2025 by rpki-client