Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/NBTd6QujxD8vAm2y0tIory9u3RA.roa
File: NBTd6QujxD8vAm2y0tIory9u3RA.roa (raw, json)
Hash identifier: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=
Subject key identifier: 34:14:DD:E9:0B:A3:C4:3F:2F:02:6D:B2:D2:D2:28:AF:2F:6E:DD:10
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C26DF5CE1AA3EAE9ECA107F4FE2A
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/NBTd6QujxD8vAm2y0tIory9u3RA.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39444
IP address blocks: 85.31.211.0/24 maxlen: 24
85.31.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c2:6d:f5:ce:1a:a3:ea:e9:ec:a1:07:f4:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3414dde90ba3c43f2f026db2d2d228af2f6edd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:54:66:d9:ee:25:c0:f8:5a:51:2b:df:fe:
3b:26:ab:72:93:64:43:f3:fd:89:28:86:e3:65:31:
b9:01:44:16:ee:aa:62:8c:86:de:3e:e8:8e:56:5a:
19:fe:50:16:64:12:75:fc:b9:00:f7:0b:02:8d:06:
95:fa:66:6a:18:ba:9f:68:eb:a1:dd:fe:4f:05:2b:
53:34:be:7d:63:b9:dd:01:45:28:53:3a:27:b2:d9:
52:86:a3:bc:67:fc:3f:a4:be:b7:ad:73:3b:3b:e6:
00:0a:96:09:0c:53:68:9d:66:f8:ed:5f:4b:da:13:
4c:73:f2:f2:d9:51:8e:99:0f:58:c1:da:15:8c:e1:
78:9d:96:87:a9:c6:bb:bf:7c:33:04:c4:ba:d1:57:
12:a9:ef:b3:37:ca:e7:25:b3:ef:30:8d:e1:f4:d4:
08:28:a6:8a:ea:c0:bf:c8:4e:48:1b:b3:17:df:dd:
18:1e:68:58:6d:37:ba:e3:bd:d3:41:0c:dd:2c:b7:
e2:c3:58:c4:ae:11:e6:a8:e2:25:c6:96:a5:d0:5b:
3f:7e:47:5d:02:02:9a:7d:2c:50:b0:46:e6:a1:b8:
74:7e:14:a7:23:85:3a:b5:e1:52:2e:7e:1f:73:b8:
20:cb:ec:f7:e4:35:f3:8d:e9:11:7c:97:f0:9c:35:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:DD:E9:0B:A3:C4:3F:2F:02:6D:B2:D2:D2:28:AF:2F:6E:DD:10
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/NBTd6QujxD8vAm2y0tIory9u3RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.211.0-85.31.212.255
Signature Algorithm: sha256WithRSAEncryption
3d:47:05:c2:16:ec:a8:7f:a4:b7:01:72:66:78:d5:ce:d8:db:
a9:a5:86:23:6b:7c:30:85:c8:35:23:62:53:29:6f:93:97:4c:
8c:af:2f:c6:fb:70:68:e7:96:55:d3:f4:87:a6:a1:b3:b1:ad:
67:61:bb:ed:93:f7:81:fc:76:7a:af:3c:db:dc:c1:1f:7a:f8:
a7:b8:d6:8b:0e:a6:9f:ed:cc:96:fc:ca:96:75:3d:53:ad:e5:
d7:e3:66:56:ac:c9:77:fa:c6:a9:ab:e5:55:8d:70:18:dd:05:
14:36:a0:73:77:e2:fa:85:b1:f4:1a:9e:79:47:0b:1e:97:21:
33:50:f0:9e:3b:76:55:ff:1c:27:2e:43:7f:08:7d:2f:c3:b5:
b7:f9:97:43:af:ad:65:6d:b3:65:be:b6:6a:b2:f8:19:d1:20:
ae:9a:c4:7c:ec:d0:af:d2:24:a9:73:c6:3b:dd:54:51:3a:4a:
57:67:a4:b7:ac:a3:40:17:a2:f1:68:e0:1a:58:61:01:30:ec:
33:60:7d:37:30:fe:dc:ea:1f:43:ff:5d:e1:4b:a4:9c:57:e7:
aa:05:c7:b7:99:2d:81:cc:d7:d7:cd:be:a5:ce:91:cc:96:4f:
c5:8f:1c:bd:86:94:ec:8d:dc:ed:31:8b:39:de:9e:19:b0:4a:
08:0c:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:56 2025 by rpki-client