Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Z_zFXKRhJseVWvrZoSappjBN6D0.roa
File: Z_zFXKRhJseVWvrZoSappjBN6D0.roa (raw, json)
Hash identifier: bb2yz8XWS31LBpzsP4mi3S0CKhPh+9tvqiYeMXkaSv4=
Subject key identifier: 67:FC:C5:5C:A4:61:26:C7:95:5A:FA:D9:A1:26:A9:A6:30:4D:E8:3D
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01941809217B80C0A6CD357AB6E4CFA49503
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Z_zFXKRhJseVWvrZoSappjBN6D0.roa
Signing time: Mon 30 Dec 2024 14:47:19 +0000
ROA not before: Mon 30 Dec 2024 14:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 85.8.144.0/23 maxlen: 23
85.8.146.0/23 maxlen: 23
85.8.160.0/23 maxlen: 23
85.8.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:09:21:7b:80:c0:a6:cd:35:7a:b6:e4:cf:a4:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 30 14:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67fcc55ca46126c7955afad9a126a9a6304de83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:e9:4b:c3:49:39:41:8f:0b:a8:49:c8:2a:
e8:f7:80:46:41:cb:bc:c6:e3:7e:f6:9c:09:ee:36:
02:4d:8b:af:8c:d3:db:04:6c:81:96:1c:04:c1:f2:
fb:0e:a6:68:f3:a0:f3:bb:4a:3c:52:90:18:c2:96:
39:a0:01:da:f7:30:84:46:49:da:28:f1:e7:67:31:
f4:05:bf:eb:2a:a5:6d:ab:87:3d:a6:f9:ac:68:36:
1b:44:15:7f:03:b6:6f:9b:11:9c:4f:f1:2b:59:99:
06:2a:c2:bc:40:bc:f3:d8:2b:7b:cb:e5:16:8b:a8:
c0:b6:3c:8e:14:d5:db:4f:05:2e:e0:1b:38:20:fc:
2a:7c:ea:68:92:5b:97:47:eb:83:82:da:db:b7:67:
f1:1e:20:53:83:77:e9:5f:56:8b:c0:b8:e6:38:35:
36:2a:19:4f:05:90:4c:59:3d:c4:fa:c8:6f:63:85:
d2:04:75:54:ed:03:15:72:26:33:94:c0:eb:8c:e8:
48:a3:1d:ee:de:f3:54:c4:6f:cb:1c:72:d7:a5:29:
ec:17:cd:0f:27:9e:5d:ed:35:bd:52:48:0f:bb:d2:
d8:d5:e1:7d:c2:c3:0e:f5:65:27:ee:8c:1c:30:ff:
eb:f1:fd:f0:e7:78:19:ce:17:3f:cf:dc:9e:ab:20:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:C5:5C:A4:61:26:C7:95:5A:FA:D9:A1:26:A9:A6:30:4D:E8:3D
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Z_zFXKRhJseVWvrZoSappjBN6D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
85.8.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:ce:82:f7:f9:22:e2:9e:7b:de:d8:d3:3e:32:04:86:76:df:
90:20:04:8c:ef:be:c1:01:e4:d6:cb:6b:9d:6d:70:58:48:15:
ca:12:bc:f7:56:26:f5:a0:a5:2c:91:3d:36:8e:82:35:74:9f:
0f:2f:40:ec:86:f9:ea:bf:64:39:0f:7d:78:b9:90:15:3f:45:
2e:3b:19:61:77:64:b7:cf:fc:c6:15:1c:5d:6e:3b:ac:df:a3:
66:2f:ae:68:0c:af:54:fa:8d:e7:ff:46:94:bd:9c:ae:c1:f0:
e7:0e:76:2b:ce:94:93:0f:db:09:15:be:04:31:3a:ff:44:9e:
2a:12:f5:06:95:bb:85:48:ce:7c:31:ae:e2:4d:10:b6:39:0c:
62:e5:74:a2:b5:59:db:fe:d3:0d:84:26:1c:92:41:f6:75:23:
95:3b:f9:fb:d8:af:62:f1:79:f3:5d:7d:06:90:d3:24:4d:ab:
09:43:7a:34:82:d4:0b:ca:c4:20:0b:5e:c2:48:4e:e6:4e:85:
79:d4:61:0a:d5:da:fb:64:c8:d3:ca:42:0f:5d:79:66:3d:88:
6d:ba:97:3b:c5:ef:73:d9:37:c6:63:22:00:08:8c:66:23:34:
df:c4:8a:91:8f:1e:33:82:32:d8:ad:97:cc:e8:5a:4a:a3:16:
d7:04:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:21 2025 by rpki-client