Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/u5f5QyZ_Hle9Xkfy8kX5VEnQTyI.roa
File: u5f5QyZ_Hle9Xkfy8kX5VEnQTyI.roa (raw, json)
Hash identifier: vQV+T16tVw7KRa+bYRI6ePipU0cafdNCWjHD9q8y4x4=
Subject key identifier: BB:97:F9:43:26:7F:1E:57:BD:5E:47:F2:F2:45:F9:54:49:D0:4F:22
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB27F7B6130E27546EC8513D8D433
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/u5f5QyZ_Hle9Xkfy8kX5VEnQTyI.roa
Signing time: Thu 02 Jan 2025 07:48:25 +0000
ROA not before: Thu 02 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198262
IP address blocks: 85.232.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b2:7f:7b:61:30:e2:75:46:ec:85:13:d8:d4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb97f943267f1e57bd5e47f2f245f95449d04f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:a2:fa:70:fa:83:33:29:a5:84:f0:04:2f:
59:7d:06:35:31:85:c8:b4:f6:67:96:43:71:05:57:
14:9c:25:89:eb:45:71:59:d4:71:41:ea:00:26:c1:
b7:48:77:7f:77:64:6e:d3:f0:66:e9:4e:63:d7:e0:
ed:cc:81:c0:3c:e6:a7:28:74:30:99:7e:3e:61:2d:
c8:b3:aa:7c:dc:52:8d:90:7a:a8:6e:a2:c0:20:a7:
ca:65:ec:29:44:7a:f4:a9:ba:d0:45:c3:3f:c6:59:
f9:6f:37:66:a5:3c:18:54:7c:07:fd:f6:40:5c:72:
9f:be:91:ce:32:bd:01:f9:b2:8b:60:c2:71:a4:e3:
1d:4b:75:d1:42:99:c3:41:fb:7e:bc:68:25:f2:c8:
09:eb:82:7f:82:20:89:0f:df:26:d3:63:86:5a:42:
e4:65:79:3f:5f:de:86:33:11:d8:c3:2e:f5:50:d4:
dc:d3:7e:f8:5c:ba:3d:b0:79:ae:d9:d1:e6:ac:b4:
e1:84:e8:35:de:2e:f5:06:09:d0:83:1c:1b:c3:b9:
17:11:ae:30:04:23:46:66:38:60:eb:eb:62:77:ac:
48:bd:43:5f:4f:d6:a3:ca:65:4f:22:a3:4c:1a:9c:
00:ab:e9:f2:76:62:c2:d7:f3:24:e7:f9:f0:c2:45:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:F9:43:26:7F:1E:57:BD:5E:47:F2:F2:45:F9:54:49:D0:4F:22
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/u5f5QyZ_Hle9Xkfy8kX5VEnQTyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:14:79:05:48:4a:56:f6:1b:4b:1a:8f:5d:26:f6:7a:f7:71:
1a:0f:ba:f0:0b:58:98:1a:6d:88:96:48:ce:38:28:10:99:8d:
34:3a:7a:60:29:5d:68:7f:7f:59:eb:c2:0e:fc:08:99:c0:93:
eb:7f:23:a7:8b:fb:08:e8:22:8b:91:1f:00:49:2b:f6:f5:d9:
d2:72:7b:02:17:f5:17:ce:5c:ae:da:f9:59:47:b8:72:97:5a:
2f:19:8a:43:72:e8:b7:a8:d2:ac:8a:41:e2:5a:6f:48:23:30:
b5:ee:a4:b9:f4:59:f4:a3:d3:63:d4:11:cc:ee:1d:e4:48:1a:
1f:46:18:e6:3f:0c:ed:43:e2:cd:6b:75:f8:89:47:c1:81:6a:
14:8a:39:e0:31:81:d6:64:02:e9:93:d0:8d:00:0f:45:94:a9:
04:64:18:1c:e9:c6:d5:5e:34:b7:ff:85:cd:75:48:85:5a:45:
29:9f:73:df:a4:23:ca:2d:0d:5e:1c:1e:d8:d4:ce:f2:d2:08:
de:be:e5:bd:b2:d5:56:38:49:7c:4a:d6:a3:08:3f:c4:1e:9f:
6a:58:27:f3:18:6f:95:2c:5a:6d:d7:17:23:ee:3e:2a:5f:da:
11:3a:1e:0a:bd:f0:5b:7b:81:c5:7a:aa:b7:dc:19:64:60:23:
2e:44:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:43 2025 by rpki-client