Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa
File: XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa (raw, json)
Hash identifier: +zjYxmzbyrDsi/84TmeGw0sJagKFz4jpr++zLrhwtxo=
Subject key identifier: 5D:1F:29:94:CD:E2:40:23:09:E7:C3:09:42:79:50:FF:94:35:F3:EF
Certificate issuer: /CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
Certificate serial: 06C7BA41
Authority key identifier: C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa
Signing time: Sat 01 Jan 2022 10:55:13 +0000
ROA not before: Sat 01 Jan 2022 10:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205512
IP address blocks: 85.208.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113752641 (0x6c7ba41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
Validity
Not Before: Jan 1 10:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d1f2994cde2402309e7c309427950ff9435f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:b3:83:fe:3c:03:d4:5c:2a:c1:d4:f7:05:
3a:22:94:25:87:ea:4b:d4:be:a0:e1:f4:c5:f7:8a:
11:fd:ef:19:5d:36:0d:e0:b9:26:d1:3d:ce:34:22:
84:36:84:9a:d6:39:58:7a:d0:09:da:7e:4a:6a:20:
6e:1c:56:4a:69:c5:51:39:87:81:13:25:2b:c1:6f:
36:5c:85:e4:f4:af:19:7a:f9:1a:df:3d:e3:b5:e1:
ad:88:39:83:1e:bc:f5:51:b5:ae:1a:8a:ab:aa:48:
6a:3e:52:3b:ea:fc:d9:7c:2e:84:39:a2:b0:ff:ae:
a6:11:15:29:87:0e:b7:c3:de:d5:26:ac:96:39:21:
ff:b7:69:4e:17:44:65:74:62:90:9f:06:42:1c:05:
f1:62:8d:76:4d:d5:71:9d:9a:80:04:2c:ec:6d:f0:
c2:ca:19:69:53:a3:53:9e:51:9e:2f:95:67:52:60:
08:09:87:9d:60:33:b5:57:21:ce:41:ba:b4:dc:1f:
9c:a9:ec:c8:87:9a:39:95:87:09:74:a1:de:2b:8a:
42:26:6f:29:b1:d9:a4:d4:7b:93:33:5c:8d:10:23:
73:7a:b4:5e:5a:12:e4:11:59:43:a1:98:64:38:3d:
3b:a5:af:77:3b:3f:30:85:2e:77:c6:04:d4:18:7b:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:29:94:CD:E2:40:23:09:E7:C3:09:42:79:50:FF:94:35:F3:EF
X509v3 Authority Key Identifier:
keyid:C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/XR8plM3iQCMJ58MJQnlQ_5Q18-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.16.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d1:3a:41:ae:90:73:be:20:f2:66:4f:9f:97:ac:a3:e4:2f:
fa:02:0e:f8:f9:05:03:c0:01:20:da:60:cb:d3:67:07:7e:24:
5c:36:67:b9:e0:dd:50:fd:90:4b:c5:65:a8:bf:1a:5f:25:48:
be:3f:8b:f2:1d:0e:39:5c:dd:de:51:b9:73:85:8f:e1:bc:bc:
a6:24:84:cd:32:e8:f5:6b:41:fd:c3:b8:2e:f5:6d:c6:bb:2e:
ce:a9:d8:be:d4:2a:6b:63:73:69:2b:af:e0:30:43:bd:e1:f8:
59:c3:04:c7:f4:92:76:da:4e:39:85:fe:de:1f:6a:73:f5:0c:
31:bd:36:f7:a6:be:b6:d4:f5:a6:f1:4a:92:23:a7:d9:e4:68:
9d:c3:49:19:39:b1:75:6a:82:c9:37:82:b9:72:48:7b:c9:de:
df:cb:7b:91:bc:e5:01:4c:37:f3:be:67:ad:0a:32:5e:91:d6:
1e:82:3c:7f:ce:81:02:0e:99:21:9c:01:87:93:d1:6d:03:b9:
e3:6b:c3:ff:a2:5c:57:a0:03:95:74:26:42:d8:f9:69:80:11:
3a:f9:2d:da:cd:86:0c:36:9a:99:5a:91:cf:dc:86:1b:01:8e:
18:4d:e3:3d:3c:33:e6:90:af:67:59:00:5c:1c:8b:00:60:c6:
03:a9:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:38 2025 by rpki-client