Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/k45M8B18zZq30kOscm_b2rNT_ps.roa
File: k45M8B18zZq30kOscm_b2rNT_ps.roa (raw, json)
Hash identifier: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=
Subject key identifier: 93:8E:4C:F0:1D:7C:CD:9A:B7:D2:43:AC:72:6F:DB:DA:B3:53:FE:9B
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C218A26E3641D67D59BCBCBA4773
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/k45M8B18zZq30kOscm_b2rNT_ps.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35334
IP address blocks: 85.31.210.0/24 maxlen: 24
85.31.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c2:18:a2:6e:36:41:d6:7d:59:bc:bc:ba:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=938e4cf01d7ccd9ab7d243ac726fdbdab353fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:01:db:4d:9f:68:f0:99:ca:d0:d2:37:96:
13:19:db:ef:cb:1a:a1:69:ee:24:c4:be:e9:a5:ad:
d3:e4:0b:50:09:16:75:6d:20:34:2a:50:a8:4f:b4:
ca:5e:ed:cc:ed:76:f8:9f:f7:a5:66:a5:bb:de:fa:
88:cd:a5:81:70:fd:33:35:98:5d:4d:70:64:2a:95:
eb:cb:1f:7b:8c:61:ce:6a:ff:9b:84:9a:4a:cf:78:
61:77:cd:bd:b6:0a:0a:2f:6f:12:44:be:a5:15:39:
a4:cc:a0:ba:6d:56:22:c8:a6:4c:e6:40:ec:b1:1a:
c7:f5:e1:fe:28:09:4c:74:e3:8d:b2:ae:78:a1:38:
0b:9c:65:d8:e9:85:6f:f5:61:07:2b:d1:28:89:c9:
7e:9a:d4:04:55:ab:80:89:75:62:4a:9b:92:c9:d4:
2c:4b:99:9d:9e:56:76:40:37:76:48:18:3a:75:f2:
e7:e1:c8:60:0c:32:1a:3e:27:36:1f:fb:08:db:7f:
0a:b6:dd:8a:28:21:f8:2e:e5:3e:b1:21:04:49:7f:
df:2f:d1:ed:90:14:5f:9b:20:26:01:d0:04:00:24:
1d:f9:50:20:92:dd:ec:70:e0:09:56:9a:19:69:92:
a5:de:91:81:df:27:b4:84:d1:1b:d4:53:13:7c:53:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:4C:F0:1D:7C:CD:9A:B7:D2:43:AC:72:6F:DB:DA:B3:53:FE:9B
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/k45M8B18zZq30kOscm_b2rNT_ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.210.0/24
85.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a0:1e:71:9d:d7:25:0d:0b:9d:60:81:62:af:40:48:a8:ff:
4e:cd:a7:8f:70:fb:95:e6:f6:69:f5:c5:6f:a3:d1:c3:62:db:
a8:a1:e6:ba:d9:ae:d8:a9:2d:01:bc:0a:6b:9b:08:fb:8f:dc:
8b:21:74:6e:90:89:04:f4:ae:5b:79:7e:4f:e6:c0:b5:b8:96:
d0:04:7c:1e:61:ea:6b:79:a8:94:99:10:ca:a0:bb:32:d1:22:
c0:22:4a:0e:50:25:59:a5:91:bb:de:c5:3d:69:4c:0e:12:a0:
98:f8:ce:f5:00:7f:eb:fd:8e:79:22:5a:70:c6:9f:c3:ae:e5:
96:d9:87:c8:1e:90:f1:ea:4e:58:a5:94:a9:18:79:dd:55:ac:
db:5f:39:33:a0:09:fc:f4:69:92:78:6e:48:12:73:cc:ba:5d:
b3:66:16:9f:8d:8a:93:fb:9f:c8:01:c6:62:22:da:f9:2f:67:
bd:5e:34:ab:77:dc:88:86:13:7a:2f:61:e2:43:e9:ce:f4:e9:
26:64:9c:c3:c5:4f:de:e6:36:26:e8:22:cf:ae:36:09:34:17:
42:65:fa:a0:04:24:41:e2:71:f0:41:bf:11:bf:8e:50:38:1a:
f6:29:9c:e2:0e:a4:c3:8b:57:06:bb:24:ca:13:d6:14:1d:91:
e9:d8:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:25 2025 by rpki-client