Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/xby6qjt0unPBaXjG7WI-Peg-jiE.roa
File: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (raw, json)
Hash identifier: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=
Subject key identifier: C5:BC:BA:AA:3B:74:BA:73:C1:69:78:C6:ED:62:3E:3D:E8:3E:8E:21
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B64E8292B28CD5443F1E23BBF3C5F0
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/xby6qjt0unPBaXjG7WI-Peg-jiE.roa
Signing time: Thu 02 Jan 2025 15:50:46 +0000
ROA not before: Thu 02 Jan 2025 15:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61157
IP address blocks: 85.93.65.0/24 maxlen: 24
85.93.66.0/24 maxlen: 24
85.93.67.0/24 maxlen: 24
85.93.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4e:82:92:b2:8c:d5:44:3f:1e:23:bb:f3:c5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5bcbaaa3b74ba73c16978c6ed623e3de83e8e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:19:fa:e9:8b:fb:ab:70:04:62:8d:ef:1d:
23:67:a1:23:b6:40:8e:59:dc:3c:eb:66:b2:5b:b8:
af:c1:80:6f:16:5a:d1:be:5a:be:8f:99:0f:d2:72:
e1:c7:c1:55:e4:3c:b9:db:0b:ec:19:f1:cb:18:3f:
e7:cd:17:84:f4:a8:56:26:8f:fd:ec:10:87:88:34:
83:d1:a0:4a:69:86:15:a8:15:09:b0:8f:32:05:18:
0a:26:98:a9:9b:23:53:23:fe:b2:df:76:6e:b1:95:
71:63:cf:7d:72:0a:29:ea:57:1b:7c:57:8a:4c:3e:
80:9c:b4:c3:36:69:78:61:d9:1f:c8:03:2e:f6:66:
6a:72:2a:e1:55:b3:6e:a9:66:33:a2:ed:27:7e:66:
30:16:21:eb:97:85:70:41:71:38:f3:a9:d2:d8:83:
da:17:99:72:75:94:8f:16:be:ee:2a:2a:87:d0:02:
2d:f0:c9:51:ad:bb:86:54:82:b8:df:bb:0d:ac:73:
86:1c:dc:cc:51:88:c4:46:35:58:be:01:64:6e:10:
92:cb:e1:de:47:56:a0:bd:91:9e:a9:be:7b:89:3e:
af:70:29:e8:a9:e8:45:c9:86:cb:57:9e:bf:44:01:
51:61:b9:82:cf:07:6b:22:6b:3e:b6:f3:9e:f7:bd:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:BA:AA:3B:74:BA:73:C1:69:78:C6:ED:62:3E:3D:E8:3E:8E:21
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/xby6qjt0unPBaXjG7WI-Peg-jiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.65.0-85.93.67.255
85.93.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7b:1e:a7:8a:c5:95:24:25:51:3b:1a:f6:04:ac:fb:4b:68:
0d:fe:34:1a:32:1d:b0:9e:b3:4a:a7:38:8d:82:31:d1:19:1a:
6a:a7:fe:01:ec:a0:9e:e1:3c:a7:c7:cf:4b:c6:5a:78:c2:34:
94:ff:0f:62:98:ca:8c:15:6d:b9:83:0d:f2:ce:d1:30:7b:67:
2e:b7:88:3d:0f:d4:f9:da:0e:55:ce:d2:91:ea:73:4b:cc:00:
56:b9:34:33:48:2e:b9:55:51:ce:d8:15:53:ec:51:b5:52:9f:
e9:8b:25:02:49:86:21:c9:7a:34:fb:68:da:e3:70:fb:da:75:
07:d2:a8:eb:86:1e:37:6b:47:ca:43:ad:f6:9a:57:1a:9d:df:
17:f6:2b:cd:10:2a:b1:1c:9f:62:76:92:9b:e6:5b:ad:0a:51:
7d:1d:91:26:a6:3d:2e:a4:b5:26:04:bb:d5:ae:be:76:43:fe:
e1:b7:65:42:d9:85:a2:bb:cd:79:a2:29:bb:1c:13:c4:ee:43:
44:29:85:ce:17:15:d3:0c:48:03:b9:a6:eb:c7:a1:b2:68:4c:
10:e0:ee:5c:87:93:f4:64:55:26:76:10:77:55:51:e1:19:11:
40:cf:a4:e6:9b:17:b1:8c:0e:b3:be:64:fd:2b:66:cd:b6:00:
17:00:4d:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:57 2025 by rpki-client