Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AIH_vZy0JSL32NstpNRAzdF2Y8U.roa
File: AIH_vZy0JSL32NstpNRAzdF2Y8U.roa (raw, json)
Hash identifier: uU/GNlXAOjWcBOElXCQjL0q1yXAw4NXk7XxlYdZQnOY=
Subject key identifier: 00:81:FF:BD:9C:B4:25:22:F7:D8:DB:2D:A4:D4:40:CD:D1:76:63:C5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01958B1CB8306AA8FCAFFA9B4087C9D31D12
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AIH_vZy0JSL32NstpNRAzdF2Y8U.roa
Signing time: Wed 12 Mar 2025 16:07:50 +0000
ROA not before: Wed 12 Mar 2025 16:07:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33911
IP address blocks: 85.120.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:1c:b8:30:6a:a8:fc:af:fa:9b:40:87:c9:d3:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 12 16:07:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0081ffbd9cb42522f7d8db2da4d440cdd17663c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:82:90:0a:ef:7d:6a:dc:11:3d:7e:39:ce:
f6:51:b6:b9:b4:21:42:ef:3e:98:e0:50:69:5d:e6:
6c:61:c5:07:4c:74:10:80:84:00:49:91:47:ee:77:
d6:80:03:c3:bc:e1:4b:04:57:e5:13:93:0b:03:bb:
19:56:bb:d3:ae:4f:0a:29:ed:ec:14:69:cb:4e:20:
07:8a:38:f1:e8:d0:86:50:85:8c:11:55:46:09:89:
75:c3:ba:e2:f5:63:55:86:13:83:17:e9:1c:cd:a1:
f8:de:7f:86:81:83:11:89:34:22:94:f5:26:90:f9:
dc:6a:5e:01:80:2d:48:e0:64:73:3c:b3:b9:39:60:
f1:11:82:43:5d:d0:e8:41:53:ed:5c:2b:6c:63:41:
4f:0f:2c:0f:4e:15:2d:43:7f:75:9b:b4:76:53:85:
c4:a8:03:ca:0e:a7:b9:ed:03:d0:33:38:84:2c:80:
e5:41:fe:93:58:03:95:75:2d:2f:16:a5:a6:38:2c:
87:56:dd:56:e8:dc:43:6b:73:8c:98:78:6a:2b:d6:
e3:9b:c5:28:9f:53:4f:24:2c:19:88:f8:4b:25:d3:
69:cf:28:b6:58:1f:ce:a4:dd:07:1e:5b:c2:cb:54:
34:86:9f:51:be:1c:79:ef:29:d5:eb:f7:e0:be:fd:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:FF:BD:9C:B4:25:22:F7:D8:DB:2D:A4:D4:40:CD:D1:76:63:C5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/AIH_vZy0JSL32NstpNRAzdF2Y8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.50.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:9c:06:f2:12:09:7f:2b:d5:c9:f2:86:fe:6e:39:b7:5e:22:
df:bd:dc:20:5a:71:be:bf:de:08:1a:d9:e6:01:4b:9c:69:38:
83:29:33:32:66:c9:93:7e:4f:cb:ec:d7:26:b5:d5:20:c8:4f:
89:40:5a:1b:40:2a:93:58:91:45:0f:31:c2:84:a6:f2:a2:e6:
8a:ae:b2:5d:34:83:d1:fd:fa:7b:de:7e:dc:71:b7:0c:18:d8:
c0:76:c2:66:7a:71:35:d8:29:21:41:71:f1:ed:a4:45:6b:73:
9e:c0:77:3f:53:dc:8d:c8:11:40:17:cc:c6:69:0b:3b:12:ba:
0b:e8:ca:fd:3a:38:a1:d3:94:67:d5:49:ec:50:41:2f:27:51:
66:dd:03:de:12:e9:13:b6:9d:be:1a:71:65:79:da:e2:8d:f5:
51:c4:f0:b8:b9:db:f4:b4:c9:f7:b3:69:e4:2e:38:8f:78:3f:
2e:a6:11:10:16:ae:56:6b:00:ef:f1:62:61:bf:57:2f:e6:dc:
f9:24:b7:a9:a9:ba:53:a8:91:4b:db:67:f3:00:a2:50:b1:2c:
09:90:87:ab:e1:f2:ae:26:31:6e:04:ad:3a:87:8f:d1:e1:db:
f3:4e:2a:3c:0d:3c:80:c3:c5:13:c7:00:a3:69:3e:64:98:66:
7b:88:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:33:19 2025 by rpki-client