Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pttBzTCTpoiJ3lgUD-QqM84k8aQ.roa
File: pttBzTCTpoiJ3lgUD-QqM84k8aQ.roa (raw, json)
Hash identifier: 6sAlEeYWg0AgpsXxhddjKFqdSVNFCgejIiF0QeO52JI=
Subject key identifier: A6:DB:41:CD:30:93:A6:88:89:DE:58:14:0F:E4:2A:33:CE:24:F1:A4
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEEE7FE442CA7CD319A6E89A0D7EB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pttBzTCTpoiJ3lgUD-QqM84k8aQ.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202385
IP address blocks: 85.31.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ee:e7:fe:44:2c:a7:cd:31:9a:6e:89:a0:d7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6db41cd3093a68889de58140fe42a33ce24f1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:28:1a:1e:6e:7b:51:25:3a:4d:e0:2e:eb:
69:7b:bf:a8:81:e3:7c:39:0b:73:5b:93:01:2f:ae:
57:88:28:bd:8e:f5:1b:18:3a:da:92:41:70:40:2f:
7a:7a:22:a3:47:ec:76:f2:42:a2:79:dc:9c:c1:c7:
8b:d4:0d:58:dc:30:71:46:1c:f4:00:c0:78:3c:e6:
a5:2d:7c:d0:ce:79:c7:a1:0a:e9:14:4b:1c:b7:8f:
04:79:fd:80:04:52:e9:e5:9b:46:44:98:c4:b7:50:
b3:67:d7:bc:4d:d2:2f:cc:e3:6e:fe:7f:63:93:8d:
f2:13:94:63:f9:c4:44:85:9d:d1:d5:ed:85:e7:5b:
15:2a:8d:b0:45:20:fc:f4:15:bd:53:fd:64:40:3c:
de:25:9c:3f:20:27:26:c4:5c:77:5e:7e:53:dd:e7:
19:c0:f3:62:b2:6f:ba:e4:b1:41:9a:ec:69:ef:ee:
7c:0e:ca:2a:b4:72:9b:8c:0a:45:f2:eb:7f:86:0a:
cf:0d:99:e4:8b:f4:21:fa:c3:f9:12:d4:04:a7:fc:
6d:31:41:06:3f:e7:b4:30:06:4c:57:e4:29:1c:ab:
b8:49:ac:e8:98:87:6c:df:f6:d4:0f:69:46:e8:79:
fc:33:2e:6a:6d:d1:d9:b8:69:33:78:3a:eb:0f:4f:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:41:CD:30:93:A6:88:89:DE:58:14:0F:E4:2A:33:CE:24:F1:A4
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pttBzTCTpoiJ3lgUD-QqM84k8aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.240.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2b:41:9f:78:f7:21:0f:26:16:64:4a:44:29:d0:c2:f3:15:
14:ad:9a:4c:f5:09:0d:7d:e3:09:f6:6a:b3:a4:be:c9:d3:05:
42:2a:2e:50:5a:68:de:8f:04:2b:bf:4d:2b:3f:ec:49:06:9a:
01:c6:3d:41:f4:62:d2:f3:06:83:75:72:a7:15:fd:6f:2e:d2:
36:ff:42:73:8d:cf:1f:19:39:84:d4:e8:06:7b:dd:5c:f6:7c:
cc:33:91:c8:0d:30:5a:b9:7f:a6:d9:f0:96:bd:f9:33:e9:2a:
93:58:81:3e:66:2e:57:95:87:71:11:cc:d7:88:a0:e8:a0:16:
9c:a3:6a:b5:b9:f0:ec:22:f5:68:15:9c:dc:be:79:40:c1:78:
a6:2f:ab:31:c9:71:84:cc:dc:26:b8:2f:2a:85:e8:e9:02:ad:
42:46:12:94:77:0b:b6:fb:79:79:67:52:f0:5d:88:7f:a4:b1:
f9:5b:a1:25:9e:49:0c:0c:c7:1c:da:2e:04:af:c3:99:bd:08:
46:1b:99:bb:64:29:a3:3d:97:6a:d4:58:50:27:16:a4:d4:e2:
f2:f5:40:ae:7e:ff:fc:92:96:60:6e:58:00:8b:ae:63:6a:b4:
1c:e7:d1:60:5d:e1:bf:6c:c3:d0:f2:3b:f1:d9:7d:69:64:36:
4c:b7:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:42:37 2025 by rpki-client