Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/x3sssqglLtavRMUHt_jKYNrXirQ.roa
File: x3sssqglLtavRMUHt_jKYNrXirQ.roa (raw, json)
Hash identifier: c2W6LJkj2uhLCcLjThyIgLRr3kFdRXIRPzxRlW2c4FY=
Subject key identifier: C7:7B:2C:B2:A8:25:2E:D6:AF:44:C5:07:B7:F8:CA:60:DA:D7:8A:B4
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF9620A6B2A0F0DF0C8D6D408E86A
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/x3sssqglLtavRMUHt_jKYNrXirQ.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208817
IP address blocks: 85.202.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f9:62:0a:6b:2a:0f:0d:f0:c8:d6:d4:08:e8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c77b2cb2a8252ed6af44c507b7f8ca60dad78ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:df:b0:c3:a0:cc:34:e9:d2:42:45:26:9a:
3d:39:07:a6:8d:f5:38:97:13:38:4e:65:a8:f2:21:
6d:07:6f:70:07:41:0e:79:35:9b:28:9f:6f:31:a9:
93:d2:14:33:99:dd:52:6f:d9:86:9e:ce:ab:f1:e0:
35:cd:47:0a:c3:a5:e1:02:7c:a4:e4:d4:d1:5c:d9:
40:60:22:fd:60:ae:b6:00:f0:b0:e4:80:b8:e6:03:
42:9e:b9:26:8a:a0:09:92:ab:45:05:77:89:24:29:
7b:3d:a4:75:37:12:6b:0c:d9:a4:90:d2:8b:c9:b9:
ca:15:69:22:85:1e:68:91:42:92:c0:38:86:e5:83:
4e:7f:8e:0a:37:90:18:e4:e7:c0:ac:78:e2:a0:7f:
4b:87:1a:b3:bc:3f:30:52:27:3f:4e:58:db:aa:06:
43:a1:1c:93:f0:2e:f4:0a:9c:f3:bf:63:5c:df:a0:
c9:db:e3:0a:e6:d1:71:f3:ac:83:5f:ca:6f:62:84:
da:b6:33:c4:39:7d:8d:99:94:4b:f2:7b:13:43:53:
23:88:6d:7a:71:55:fe:f4:c9:4d:14:54:0e:33:08:
aa:54:35:a0:dc:7d:87:72:81:ce:e6:d8:cf:ba:cd:
9b:eb:7f:70:30:3b:c1:e9:d1:92:18:6f:25:d8:c5:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:2C:B2:A8:25:2E:D6:AF:44:C5:07:B7:F8:CA:60:DA:D7:8A:B4
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/x3sssqglLtavRMUHt_jKYNrXirQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.60.0/22
Signature Algorithm: sha256WithRSAEncryption
49:1d:02:15:14:14:cb:51:04:b6:2e:f9:a5:07:ce:36:8a:10:
db:4d:3e:96:aa:50:63:cc:ca:fe:b3:24:d4:72:1d:a1:c7:c9:
70:ae:03:2a:a2:89:bd:06:aa:a0:af:e9:9a:57:86:63:f4:4d:
a6:61:54:42:18:c5:2d:81:9d:b9:0c:98:4e:10:8b:41:35:15:
50:60:8f:8c:98:0d:83:9e:5d:4f:d3:aa:55:37:82:ff:6a:23:
29:a7:53:d1:8a:4c:0f:49:7f:6f:2b:7e:6c:10:f2:b7:ac:7f:
25:69:f9:aa:5a:67:8e:e7:fb:3c:1b:23:5f:26:67:09:9e:23:
77:7b:7e:eb:f5:e4:11:1c:64:fd:4b:c0:82:ae:2d:2e:b6:0b:
ad:51:1b:c6:47:81:d6:17:af:a6:ce:1d:87:26:7d:87:d6:c3:
7b:8f:29:05:96:df:4d:a3:f1:73:af:07:b0:7f:97:fb:bb:f2:
77:c3:4a:4f:5b:9f:e7:3e:d8:c6:ce:31:5c:52:c1:3d:b0:64:
7b:92:d1:b9:68:26:67:98:38:06:92:39:9e:f4:6f:a4:1a:00:
58:70:a0:49:56:8e:b2:06:3b:de:96:eb:86:7b:d9:2d:da:51:
50:59:45:81:ae:cc:de:8a:4a:fa:aa:02:46:41:2f:40:c8:d5:
a8:d2:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:29 2025 by rpki-client