Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g-hyvbXKtW0KJxLMllBIbnXmjG4.roa
File: g-hyvbXKtW0KJxLMllBIbnXmjG4.roa (raw, json)
Hash identifier: 9DyfWXdvcZf54ccwoCzJE9buKpjua2uuY+D3B2jv0Bk=
Subject key identifier: 83:E8:72:BD:B5:CA:B5:6D:0A:27:12:CC:96:50:48:6E:75:E6:8C:6E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0195149B15AE00B51D91611293BC31EBDA00
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g-hyvbXKtW0KJxLMllBIbnXmjG4.roa
Signing time: Mon 17 Feb 2025 15:51:02 +0000
ROA not before: Mon 17 Feb 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 85.120.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:9b:15:ae:00:b5:1d:91:61:12:93:bc:31:eb:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 17 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83e872bdb5cab56d0a2712cc9650486e75e68c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:56:26:fd:bf:10:ac:d0:87:c1:b9:4e:e2:
2b:8c:ea:b9:fb:5e:78:b1:8c:ac:6d:02:f3:77:67:
3d:11:81:bd:d8:74:38:30:f6:9d:c8:17:bd:fd:be:
34:c1:ee:9f:b2:77:d1:c8:f2:95:71:1a:80:6e:7d:
2f:ee:51:13:01:2c:82:47:27:51:06:59:ba:24:ce:
9c:fa:77:3c:bb:b0:8e:be:73:cc:92:91:0d:e5:44:
bf:a0:70:48:1a:c7:a3:5e:46:06:33:61:cd:0c:63:
9c:73:a0:7c:75:04:3a:d4:36:4d:db:82:51:69:80:
e2:91:fe:6e:e8:8d:90:8d:0f:9d:4d:82:a2:07:3a:
83:6f:e8:1a:a1:c1:34:af:f7:a3:14:c9:e6:7b:91:
6e:51:0d:1a:77:c8:49:ed:04:d1:6b:f3:58:7b:8e:
36:cb:46:ef:29:b6:76:6f:91:d7:44:fb:f1:e3:d3:
da:49:8c:07:c8:c6:d5:8e:a4:eb:43:32:12:73:57:
0d:82:1c:e8:d7:df:58:3a:cd:34:d2:f4:d0:a0:c6:
10:24:f8:95:95:10:8f:fb:70:68:ae:f7:fe:16:17:
00:51:f0:db:bd:3c:71:f3:9b:89:61:86:14:18:00:
57:a2:13:39:e1:44:a7:7f:36:7e:e0:bd:77:08:ac:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:72:BD:B5:CA:B5:6D:0A:27:12:CC:96:50:48:6E:75:E6:8C:6E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g-hyvbXKtW0KJxLMllBIbnXmjG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.74.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2c:02:b6:46:74:b3:33:89:f5:54:12:45:72:1c:3e:d7:dc:
be:86:24:fb:ca:97:8e:31:93:27:e9:17:e7:ef:d7:46:c3:3c:
d1:e7:b0:b2:4d:a6:7c:f4:8a:b6:70:3c:c2:a9:4a:22:e7:10:
cf:55:7c:4a:f4:99:c4:74:d4:27:d6:cb:90:d4:55:d9:0f:a9:
48:85:3a:5f:88:df:60:86:a3:d3:fc:5b:2d:e2:83:29:bd:d5:
e7:fd:c9:bf:1e:31:7d:01:96:cb:57:8a:d0:8c:e9:23:61:57:
ad:1e:22:8f:8e:9d:f4:d6:4f:af:04:ba:51:ae:65:17:24:18:
64:20:b3:dc:44:97:4d:bc:e4:72:2a:b3:d1:da:b5:14:73:a2:
a2:68:c1:6c:04:ff:73:3d:35:15:54:20:c5:68:28:ef:89:fd:
69:ef:b2:f4:93:42:2b:17:5a:41:5f:b1:8c:e3:72:7c:d9:b1:
44:69:ea:d2:88:3f:ff:ed:95:40:94:59:23:6a:f0:6d:ab:8f:
44:59:f3:6e:9d:cd:22:d9:9a:c9:c1:9e:d3:79:f0:f2:4e:bb:
d8:1f:fb:6f:d7:54:0f:ce:57:c4:16:79:13:bf:b1:12:ef:a5:
09:16:67:4e:8b:32:62:89:67:00:93:f5:34:a4:83:9f:bc:40:
bc:04:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:59:58 2025 by rpki-client