Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa
File: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (raw, json)
Hash identifier: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=
Subject key identifier: 85:A1:43:F5:C2:C3:78:A2:4B:75:71:49:FC:59:56:B0:35:90:6B:56
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 0194228DF84B98A6E8CCE5572BF8FB9646EA
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24595
IP address blocks: 85.159.96.0/21 maxlen: 21
185.94.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f8:4b:98:a6:e8:cc:e5:57:2b:f8:fb:96:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85a143f5c2c378a24b757149fc5956b035906b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:9c:10:25:a2:cc:95:7c:72:42:5e:dc:2d:
af:a0:c0:c9:9f:ce:ed:ae:bb:5b:8e:01:b8:57:bd:
cd:a4:7c:6d:29:ff:c4:ca:7f:5d:f7:62:be:48:dd:
7a:76:cf:d4:aa:73:b5:fc:73:e5:42:81:38:70:dc:
d0:fc:17:ad:5d:4b:b2:96:bb:c3:ff:2e:78:34:e4:
35:aa:be:44:83:7c:38:0d:3e:f5:73:a0:8c:2d:15:
b1:2a:eb:c7:d1:a1:1f:45:82:81:03:68:84:cb:7b:
58:60:4e:16:6c:1a:aa:64:a3:0b:95:62:4b:95:b2:
5e:85:10:46:41:9f:d9:a3:5a:b4:9c:80:99:97:0a:
9d:61:3f:16:9e:13:22:4e:c7:75:e3:e7:8d:1b:6a:
24:98:4b:de:b3:e0:3c:84:23:33:f4:7f:34:1e:81:
29:b2:66:96:58:8d:da:43:61:73:c5:68:e2:d6:27:
44:c9:9e:6f:a7:7e:9c:e4:51:b4:47:09:ad:a9:b6:
80:08:d6:d4:7a:1a:62:8e:2e:9f:cd:67:90:e3:dc:
0d:a0:18:3f:f3:68:b0:67:d7:8a:e2:c3:57:c9:4b:
4f:94:92:9a:6a:41:d4:98:f8:3b:c0:4d:32:9b:6f:
31:79:9f:71:e9:14:aa:18:36:f8:81:41:ee:f4:5a:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:43:F5:C2:C3:78:A2:4B:75:71:49:FC:59:56:B0:35:90:6B:56
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.96.0/21
185.94.120.0/22
Signature Algorithm: sha256WithRSAEncryption
18:21:e9:fe:95:be:1d:be:d9:b3:fa:8c:09:21:f5:bb:ae:ec:
2e:2c:81:25:9a:27:eb:5b:a6:e5:33:40:94:f3:65:52:f3:d8:
c7:29:e6:0e:1a:cd:4d:c4:1c:76:c1:3b:e7:21:86:25:26:d2:
75:2c:bc:57:a6:c4:97:d7:4a:be:95:ec:92:65:8e:86:dc:7b:
d0:c8:be:ca:02:f6:38:60:e7:51:7f:29:46:11:22:60:5d:1b:
e3:8b:2a:90:7f:e0:43:c6:5d:f6:d9:e6:25:a4:02:ac:06:6f:
58:60:8b:28:76:64:8a:26:17:e4:bc:5b:b5:81:96:ae:ed:c1:
a7:ff:ee:bc:21:a8:ed:95:39:55:18:b5:9d:93:f4:9f:48:e0:
78:88:20:26:0a:83:a7:33:b9:fe:ce:f8:0c:5e:ad:eb:e9:3f:
35:b1:93:52:34:dc:15:48:dc:c0:d8:4f:f3:7f:19:7e:f2:f7:
0e:cd:01:66:09:42:64:e4:72:8e:1d:96:02:35:2d:98:50:fc:
ae:ac:df:7d:07:18:54:31:3a:f8:16:81:ac:f5:56:a6:f8:a8:
49:21:8b:48:96:29:4f:f8:f1:a8:4b:22:44:23:cc:c7:83:08:
86:6e:c0:42:d7:60:80:34:8e:f0:4d:dd:5a:54:29:b4:1f:8a:
fe:f6:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:47 2025 by rpki-client