Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Ix_4XWsw8Hd8ejpxRkPIQ05rBbc.roa
File: Ix_4XWsw8Hd8ejpxRkPIQ05rBbc.roa (raw, json)
Hash identifier: iIWQFGInlaL4va2Acw22Th410HwOuLCv0oi7b52npZM=
Subject key identifier: 23:1F:F8:5D:6B:30:F0:77:7C:7A:3A:71:46:43:C8:43:4E:6B:05:B7
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBD2372F36FA8E4D8D36A6C82DEF52
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Ix_4XWsw8Hd8ejpxRkPIQ05rBbc.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215645
IP address blocks: 85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d2:37:2f:36:fa:8e:4d:8d:36:a6:c8:2d:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=231ff85d6b30f0777c7a3a714643c8434e6b05b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:12:3a:56:5c:8f:ca:b8:dc:8f:0f:90:4e:
3a:f7:7d:fd:48:87:fa:62:d8:87:52:c9:b0:4b:08:
10:a0:d5:7b:1d:20:10:53:a3:17:38:f9:03:b5:b7:
5e:7e:95:f7:4d:e4:05:92:9f:be:2d:a0:ac:e3:d2:
bb:65:fb:4d:2c:56:0f:5f:e7:bc:4d:03:91:2a:41:
1e:6d:62:4d:67:43:68:6b:bf:51:4a:61:c2:de:62:
73:6c:13:1c:bb:8a:68:91:21:14:2b:81:41:98:c7:
e0:01:71:e3:69:bd:da:7a:94:54:4e:2a:06:20:41:
7e:94:4d:6b:1e:61:e6:de:ba:a5:63:1f:b5:9c:bf:
88:88:d5:fa:0f:e5:c2:10:7e:b5:f3:63:1d:d4:c7:
56:ea:a8:95:1d:03:6a:f5:dd:2d:a8:96:b9:fc:5a:
bb:71:9b:39:63:66:83:d3:f2:f3:d0:f3:28:47:ed:
ce:c7:f2:9f:70:83:0f:16:97:f3:21:cb:9b:5a:e0:
ac:cd:56:b3:f8:14:9a:1b:b6:f6:f8:82:86:29:cf:
13:7a:34:ef:e4:4b:9c:d8:c4:52:14:33:3f:c6:c7:
eb:80:0b:6c:98:29:77:a9:ba:a5:ec:bf:07:4f:a5:
d6:e8:52:ad:a4:fc:b5:e6:6f:68:a5:7e:b8:9f:ce:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:F8:5D:6B:30:F0:77:7C:7A:3A:71:46:43:C8:43:4E:6B:05:B7
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Ix_4XWsw8Hd8ejpxRkPIQ05rBbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.74.0/24
93.190.8.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:86:e6:7c:57:ab:77:ed:99:b1:0c:de:c1:75:86:24:89:aa:
73:4d:c0:13:17:5d:ab:8b:75:34:4e:0b:01:76:79:b7:2f:29:
59:64:c5:aa:53:71:b7:1d:70:97:7a:40:da:0f:7d:c2:8d:f3:
b7:45:09:29:28:f3:e6:a5:20:6c:0d:29:c3:e2:41:26:8f:e0:
f1:05:91:83:a4:1e:e0:54:cb:04:5b:79:c7:bb:32:47:73:8e:
79:aa:46:9b:b9:c9:b7:cc:62:4f:c8:49:0b:8f:d6:ad:fb:02:
25:76:b9:b5:c6:21:50:62:57:ac:fa:08:a2:a2:d7:4a:f1:b4:
b3:5a:6f:96:3b:99:3b:b5:3a:1c:9e:a4:68:ee:79:70:ab:32:
16:bf:f3:dd:c4:e3:4d:c1:8c:e9:e5:78:bd:55:45:0a:f9:83:
6b:ad:70:34:9b:2c:94:f3:c0:ca:b8:f9:65:de:a3:bd:96:5b:
45:f8:81:e7:cf:63:6a:49:01:da:af:92:d8:6a:2e:1b:43:20:
3a:18:d3:33:0e:d9:ec:a1:ba:11:c1:5d:8c:7f:1c:71:c5:21:
2e:9b:d8:73:55:18:2e:9a:70:4a:f0:1e:a8:ee:18:0f:1b:26:
14:e5:1f:92:20:5f:c3:f4:86:c6:b5:9c:d7:d4:b3:91:4d:5b:
4f:ee:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:44 2025 by rpki-client