Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa
File: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (raw, json)
Hash identifier: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=
Subject key identifier: 34:A2:48:A7:CA:CB:8D:3C:D4:1E:D7:3F:AB:B9:48:C4:5C:29:64:E4
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C38C5159BA33EBC5694FA298A51E
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50779
IP address blocks: 85.31.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c3:8c:51:59:ba:33:eb:c5:69:4f:a2:98:a5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34a248a7cacb8d3cd41ed73fabb948c45c2964e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:d1:28:ce:d7:b7:df:e6:74:98:39:73:21:
f1:84:48:6f:e2:38:a3:b7:12:28:a3:72:9e:b1:d2:
16:f2:5d:f2:66:ce:0d:8d:5a:9c:b1:cd:00:e9:6e:
3e:67:a5:2a:58:54:bb:df:4b:63:58:f9:be:e4:a9:
5e:4e:a4:34:20:e1:69:9d:10:be:1f:12:e0:af:2e:
c2:f2:dc:fd:0c:e7:89:5c:f9:29:44:83:a9:e4:d6:
71:1a:96:b7:a1:38:4a:dc:75:6d:d6:8e:14:88:de:
f6:ea:20:99:81:8c:b4:0a:42:46:b8:c1:f0:cb:f6:
02:62:63:b9:f4:b3:d0:17:55:f3:59:04:8f:05:aa:
80:d7:e7:d6:d5:ab:e0:be:64:45:66:72:d3:5f:35:
1d:d1:1d:74:55:41:11:38:80:9b:4c:c6:5f:09:4b:
3f:89:94:df:ca:f2:3e:3d:f9:ba:b8:22:a4:e0:61:
a3:9a:bd:c5:cf:04:dc:30:a3:5f:45:13:98:f4:da:
ea:b5:fd:82:5f:87:c3:fb:6e:7f:cf:af:3f:cb:ca:
f5:01:3d:11:8c:75:88:ba:45:61:41:01:0c:d1:0b:
38:b4:62:c1:f8:91:fd:fc:ad:62:86:e8:5d:6b:b8:
b5:e6:e9:ee:d4:23:56:12:d8:2a:68:dc:46:32:3c:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:48:A7:CA:CB:8D:3C:D4:1E:D7:3F:AB:B9:48:C4:5C:29:64:E4
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b1:b7:84:41:0b:c7:dc:8f:fc:65:9e:a4:af:3a:00:b6:3a:
e9:88:ac:a3:0b:9d:74:46:70:b8:15:50:17:21:88:83:5e:b6:
24:3c:0f:bb:5b:64:9b:c5:38:c8:0f:66:0b:c4:83:26:76:ce:
87:f9:ca:d6:36:ce:19:96:81:62:32:12:09:4f:a1:22:03:6d:
40:2a:3f:4e:1a:27:8a:6e:61:50:f3:71:57:35:7d:b6:2c:6c:
e1:db:74:41:d2:73:bb:f3:c2:3f:ca:c3:e7:fe:9e:3d:83:90:
42:e1:75:d9:42:41:c7:29:e7:b7:22:82:98:2e:b3:9e:9b:fa:
19:7b:5a:0a:98:55:5b:f2:99:dc:eb:26:33:46:54:91:a9:87:
9b:17:42:44:0a:63:1f:70:a2:ef:6b:f4:04:f7:dc:88:71:28:
89:05:f0:13:34:27:3e:a4:f0:ed:85:d5:55:c0:52:3c:f0:ff:
c9:1e:a5:f1:93:d5:83:38:74:9b:60:06:82:79:69:ad:ac:02:
c7:06:aa:1a:87:fd:5d:2f:15:7d:7f:56:67:bd:e3:23:55:eb:
7f:3c:50:cd:9d:84:19:8f:8d:96:b9:44:e9:4a:6f:cf:b4:d7:
e5:73:71:ab:64:66:3c:3c:b3:a2:b0:40:7a:56:ef:f5:9f:9f:
25:b6:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:21 2025 by rpki-client