Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PaZckJ79bYHRDIcg6j2wfehvPHM.roa
File: PaZckJ79bYHRDIcg6j2wfehvPHM.roa (raw, json)
Hash identifier: kVVhIKfAHByw3/DLlPcL7d133eP7EBJNSZqTFz2ueVY=
Subject key identifier: 3D:A6:5C:90:9E:FD:6D:81:D1:0C:87:20:EA:3D:B0:7D:E8:6F:3C:73
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01935F9C2A314F93AFB8F16A1F6189354F01
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PaZckJ79bYHRDIcg6j2wfehvPHM.roa
Signing time: Sun 24 Nov 2024 19:18:10 +0000
ROA not before: Sun 24 Nov 2024 19:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
217.18.210.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:9c:2a:31:4f:93:af:b8:f1:6a:1f:61:89:35:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 24 19:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3da65c909efd6d81d10c8720ea3db07de86f3c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:bd:60:26:fc:21:10:86:35:bf:15:c4:32:
d3:b3:51:da:59:bd:3e:c6:de:af:e8:4c:03:e9:46:
71:66:27:42:47:8e:39:da:c6:b2:53:75:7a:a9:fe:
f0:e3:a7:d4:ff:38:f3:c4:2d:d2:d9:4b:1c:37:ee:
01:02:11:1d:a1:4b:e3:db:82:45:dd:1d:74:bd:25:
90:9e:e4:9f:ed:4a:66:a5:f9:f6:e5:a5:9f:6d:6a:
1e:46:5a:c5:f8:cc:55:34:21:94:4d:fa:8f:14:76:
76:96:19:56:a0:09:8c:e9:19:3f:cd:39:78:7f:11:
f1:67:2f:8d:47:d5:0a:96:67:8a:b5:a1:0d:a5:3d:
62:eb:61:2c:76:1f:ec:0c:59:11:33:23:a3:d2:78:
ca:da:10:81:21:50:11:de:97:2a:1e:fe:c9:e7:f5:
5c:10:6f:65:d1:b5:e2:08:3b:cb:82:65:41:04:19:
7e:db:09:bd:b3:0f:a5:31:74:3c:ae:30:c7:52:ab:
5d:92:bd:bc:9a:be:1d:b6:80:ea:b7:69:7d:a2:75:
e0:54:f9:a6:b2:bc:1e:9d:fe:ab:1e:bf:ad:fc:30:
00:8e:56:f7:7d:1f:d2:f2:0e:12:de:98:63:82:5c:
42:45:40:86:1c:51:70:75:52:6b:74:91:a0:28:8f:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:5C:90:9E:FD:6D:81:D1:0C:87:20:EA:3D:B0:7D:E8:6F:3C:73
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PaZckJ79bYHRDIcg6j2wfehvPHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.72.0-85.235.74.255
93.190.8.0/24
193.17.5.0/24
193.111.76.0/24
193.111.78.0/24
217.18.208.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:3d:9b:f9:64:81:bc:86:b7:ce:d7:d7:7c:85:f6:ed:a9:88:
32:07:38:32:30:32:04:74:d0:c5:9c:25:5f:95:68:bf:47:04:
1a:47:e8:38:5c:1c:49:5f:92:4a:42:fc:84:fa:31:0f:6e:61:
a8:9b:3c:03:5f:1e:1f:3c:18:55:41:0e:13:34:e2:7a:93:3e:
83:59:85:14:4b:da:56:52:68:ee:3d:ba:7b:73:00:6a:5d:0a:
8f:ae:ec:a2:bb:c2:94:80:e6:58:24:ef:16:a5:13:f6:01:2b:
82:ce:d1:76:3c:65:c5:bb:a3:a5:d4:03:bb:4c:2a:87:bb:fb:
4d:e3:84:75:8e:b7:88:61:b6:7e:a5:54:d9:97:5b:b4:fb:86:
5a:ec:3b:5c:99:95:04:33:d0:34:1f:0d:06:2c:00:08:8a:76:
b5:b5:df:b6:32:22:fc:15:28:73:36:a5:07:75:15:3e:5a:f1:
7c:1e:4c:77:20:17:8a:41:e2:e8:fe:78:04:48:03:61:28:8b:
90:d1:e9:7e:86:62:05:fd:ea:e4:61:5b:80:6a:2d:18:2e:76:
28:f3:ca:ef:d4:f4:96:ee:18:ca:55:f3:5b:56:20:32:6a:61:
d6:73:01:ae:0e:c4:81:21:44:d5:60:de:e3:f6:e8:87:75:4a:
7c:14:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:10 2025 by rpki-client