Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9akxktbl0WdW2VrN9fhQ4CPa5e4.roa
File: 9akxktbl0WdW2VrN9fhQ4CPa5e4.roa (raw, json)
Hash identifier: z094BpAmlu2aAVSunN2yeXBrvg9BeQNPducWNXGldME=
Subject key identifier: F5:A9:31:92:D6:E5:D1:67:56:D9:5A:CD:F5:F8:50:E0:23:DA:E5:EE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D931D457FC7FB6189D3FB266B4D1E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9akxktbl0WdW2VrN9fhQ4CPa5e4.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24693
IP address blocks: 85.95.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:93:1d:45:7f:c7:fb:61:89:d3:fb:26:6b:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a93192d6e5d16756d95acdf5f850e023dae5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:9c:77:38:77:a5:c0:eb:66:c1:78:78:cc:
75:d0:5d:8a:4c:ab:9e:7d:5f:c1:9f:79:c9:7d:84:
f3:e6:02:27:46:bd:47:80:f2:2d:2f:2e:0c:a4:a4:
56:77:ab:cc:19:c3:79:f4:1c:b6:29:b9:8e:06:79:
2d:46:3e:12:d8:56:9d:47:24:fd:5c:b9:15:4c:a5:
aa:2f:53:11:31:1f:14:71:d6:8b:5a:13:2d:f8:74:
e2:f1:4c:94:c4:49:cb:e6:6f:c6:49:6c:96:5c:b4:
ff:0f:50:29:a6:4d:59:10:10:9d:70:55:18:a2:e7:
62:5a:89:e1:d5:11:80:9f:6f:bf:1f:76:e7:42:21:
39:fd:b3:90:84:3e:44:d2:8b:33:49:56:3c:27:73:
0d:b9:be:9e:19:61:57:31:a8:e8:47:cd:f4:cf:84:
93:d0:80:1b:37:e6:32:6f:f3:41:c3:7b:02:ba:cd:
56:c9:6b:d7:80:df:ae:6a:a8:d7:c5:c8:c3:ee:a5:
50:9d:4e:92:57:4b:76:7f:18:39:01:95:73:37:ee:
35:24:68:bb:fa:28:7c:7b:3f:1e:83:18:0b:45:9a:
3e:5e:83:a6:ad:ad:66:9e:92:2b:26:65:7f:7d:3e:
2c:c7:e8:4d:7a:a3:b0:f1:cf:2a:02:0d:80:a4:ce:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:31:92:D6:E5:D1:67:56:D9:5A:CD:F5:F8:50:E0:23:DA:E5:EE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9akxktbl0WdW2VrN9fhQ4CPa5e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.95.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:11:f3:16:b9:57:f8:26:ed:a0:0d:fc:9e:85:11:ec:ac:03:
49:c7:26:17:df:ff:36:84:9a:bd:b8:16:0d:de:ad:0c:c7:1e:
20:ca:6e:4c:d1:79:96:ab:60:9e:dc:5e:4c:b6:ee:f4:79:67:
c3:81:29:3d:1b:fc:99:c2:93:e1:17:d0:fc:f9:1e:70:85:4b:
c3:ef:cb:d7:2c:85:55:31:96:05:f9:c0:b1:59:11:1c:0b:27:
1d:d8:66:73:2c:69:c6:78:80:55:b0:5b:9e:ba:ee:13:46:f1:
c5:1b:11:cf:f5:6c:61:fa:39:8b:78:54:cb:7f:7c:5d:2c:30:
85:32:86:71:17:72:ba:af:30:3e:d7:fe:1d:48:18:a0:b8:2a:
73:ae:66:76:c3:ec:3c:6b:58:ce:19:8b:c7:31:45:9d:a5:39:
24:d1:64:1d:ef:ed:6a:88:0f:ba:97:55:c9:76:6c:35:46:34:
1c:db:1c:31:ea:b1:6b:ed:00:62:b9:44:75:fc:44:f6:dc:c7:
ec:69:99:b0:fd:bc:6b:cb:21:eb:71:ee:3c:78:cf:55:77:62:
af:c5:d6:a7:7e:c0:97:9b:2b:56:0a:e6:9a:6d:15:15:7f:b5:
81:6a:9a:46:a6:9c:ce:45:3d:8a:41:2f:fe:3f:17:d7:be:16:
c9:7d:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:16 2025 by rpki-client