Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ixOwYcRfzzjsLpQsVG6xnZnxDyg.roa
File: ixOwYcRfzzjsLpQsVG6xnZnxDyg.roa (raw, json)
Hash identifier: nZZ4Vydv05k13mzLAtqO/hyjuvg4Xm3zcmQ07efekAE=
Subject key identifier: 8B:13:B0:61:C4:5F:CF:38:EC:2E:94:2C:54:6E:B1:9D:99:F1:0F:28
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C39B9F9A4A68BF6A00F03BF423BB4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ixOwYcRfzzjsLpQsVG6xnZnxDyg.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203809
IP address blocks: 85.120.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:39:b9:f9:a4:a6:8b:f6:a0:0f:03:bf:42:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b13b061c45fcf38ec2e942c546eb19d99f10f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:8b:e1:2c:cd:18:f0:7b:12:79:40:22:0a:
6c:f5:ba:da:bd:11:6a:4a:60:1a:49:f5:dc:24:cc:
02:96:12:b6:5e:1e:b8:bc:58:65:d1:d2:8c:41:b7:
f3:59:33:96:28:b3:a5:a3:b1:74:f4:f5:bc:1c:37:
e2:27:9f:e5:ac:94:0b:a7:b3:df:df:15:4a:e0:da:
d3:5a:6b:54:7f:e2:2a:6b:7e:e5:15:94:4a:77:96:
98:af:99:d3:a7:43:52:39:76:7f:57:7a:8e:dc:f5:
4f:b5:b4:5a:ef:7d:6b:42:f0:4b:fe:1b:2c:2e:38:
92:e3:15:18:bd:40:63:09:c6:ef:96:b9:76:0e:42:
15:29:72:24:cc:7a:8e:f3:fe:a3:96:99:7e:e6:a1:
8a:46:4a:aa:f8:3b:a5:9d:b0:74:be:c7:ee:d0:30:
bc:21:c7:59:cc:b8:72:69:7f:9e:9d:1d:d2:2a:9e:
00:4e:ec:c7:db:fc:38:9a:5f:69:ce:24:06:f0:4a:
55:87:f4:51:80:9e:fc:1c:0e:7b:b7:54:75:b4:a1:
04:69:1d:15:8a:f2:dc:10:20:71:5d:2a:c7:9e:84:
8a:58:ea:94:7f:e3:21:72:c0:a6:88:c2:01:8b:d0:
16:55:50:39:9b:23:25:0e:57:2c:40:ef:40:11:f0:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:13:B0:61:C4:5F:CF:38:EC:2E:94:2C:54:6E:B1:9D:99:F1:0F:28
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ixOwYcRfzzjsLpQsVG6xnZnxDyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.43.0/24
Signature Algorithm: sha256WithRSAEncryption
69:33:82:e5:53:bd:44:5e:86:a7:8e:87:a3:47:61:d8:f5:56:
a4:ed:47:93:ea:c8:82:46:1b:ba:98:5b:ca:58:b8:57:1e:be:
79:0c:82:b1:ef:70:fa:23:84:55:4f:dc:b1:8a:a3:bf:f5:c5:
71:00:57:90:27:eb:7d:04:f2:93:01:b0:ec:4b:94:f6:54:f9:
81:97:cc:7f:e0:45:ee:df:01:ec:29:72:48:ba:77:20:f5:9f:
6f:9f:c4:6d:b1:0a:d2:bf:72:d7:20:80:10:8d:3e:f5:8b:48:
5a:f5:7e:b3:8d:01:cc:eb:c4:3a:94:b5:00:30:b3:2e:d5:4d:
75:9b:b9:49:b5:e8:5a:a0:d5:1a:cd:60:b9:b0:5b:c6:16:e2:
82:a6:fe:46:fe:bd:54:71:bf:6a:7e:f1:df:49:5c:e1:7e:a3:
bd:6a:5b:32:89:9f:92:bd:dc:eb:e3:70:e1:0c:7e:bd:7f:f0:
95:04:6b:23:02:02:d2:04:f7:74:e4:75:15:c9:2b:d0:d9:89:
91:66:02:03:17:b6:e6:e3:10:45:4f:58:b0:3b:11:bb:bd:5f:
79:c7:00:4c:29:00:96:af:07:bd:cf:d1:0a:9a:40:7b:2a:3c:
71:a7:3f:ee:a8:fe:7b:78:fa:55:c8:fd:d3:52:a1:85:2d:ff:
70:fa:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:37:41 2025 by rpki-client