Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Ae_kYc64Fql4WTWLHThJNJ7ekuc.roa
File: Ae_kYc64Fql4WTWLHThJNJ7ekuc.roa (raw, json)
Hash identifier: DEXzIs4FlO4D6q2me3bGp9rXRU3kOTrZ2/DzCCJ16wo=
Subject key identifier: 01:EF:E4:61:CE:B8:16:A9:78:59:35:8B:1D:38:49:34:9E:DE:92:E7
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01876FF306BD3FC292452CC5B8680C0FCC63
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Ae_kYc64Fql4WTWLHThJNJ7ekuc.roa
Signing time: Tue 11 Apr 2023 10:53:30 +0000
ROA not before: Tue 11 Apr 2023 10:53:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:f3:06:bd:3f:c2:92:45:2c:c5:b8:68:0c:0f:cc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 11 10:53:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01efe461ceb816a97859358b1d3849349ede92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:62:21:cf:b1:82:2b:d4:e1:d4:6e:95:76:
f1:43:c3:83:0b:86:f3:ea:18:e0:1f:ea:29:66:7c:
74:ce:15:46:36:b6:7e:85:39:e0:ed:1c:bd:f4:e6:
ae:6b:81:a8:b3:85:66:45:35:bd:e0:8e:c9:ee:62:
1a:13:5e:08:bb:02:24:a7:fd:a2:fb:f8:70:71:91:
be:4d:b4:64:1a:61:f6:44:3e:76:6f:94:12:42:a1:
a8:bc:eb:8a:d0:ab:b1:22:69:86:0b:47:89:af:55:
d6:8e:9d:2d:4c:f8:c1:b0:d3:d5:5e:74:14:39:39:
4b:06:eb:aa:b8:83:45:32:c3:ab:f7:e9:4b:1e:50:
3f:4c:78:10:f9:e2:30:e4:7e:fb:ce:c3:19:12:92:
4c:42:85:59:e4:1b:92:c2:a3:a6:f3:5d:d8:4e:e4:
92:c5:99:a1:42:96:8b:cf:1f:a4:75:86:64:fb:19:
05:dd:1e:4d:5b:23:f5:79:10:6f:3c:b5:62:2c:a0:
6b:80:38:c9:7b:1b:d2:e4:98:3c:a8:53:49:ec:c1:
d9:38:f6:91:5e:88:e3:58:55:eb:f2:1d:b5:7e:d6:
a6:79:8c:1b:f1:6d:10:2e:88:1b:e2:ea:1b:a0:59:
58:c4:2e:57:e1:8c:bb:f8:81:81:cc:7b:37:41:b2:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:E4:61:CE:B8:16:A9:78:59:35:8B:1D:38:49:34:9E:DE:92:E7
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Ae_kYc64Fql4WTWLHThJNJ7ekuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
08:bc:18:61:34:df:fa:f8:bd:ab:77:1b:72:99:db:eb:75:f4:
87:ee:a6:72:ed:72:0f:eb:40:fb:e0:47:68:ad:ea:a5:e3:eb:
59:c1:88:7b:c4:bc:d8:db:65:65:f2:63:f1:fa:bc:0c:6f:9b:
be:36:2d:e9:44:2c:00:7c:49:1c:97:b1:7e:95:d0:15:25:3f:
70:53:43:e7:dd:6c:42:45:0a:ef:19:30:d8:78:5d:38:78:30:
34:d8:7f:2e:c2:7b:48:2d:70:2b:48:38:ac:6a:28:1b:5f:4a:
d1:5a:d5:26:21:85:5a:1c:68:69:3e:6a:db:80:a2:30:a6:88:
b7:0a:ae:63:79:39:26:12:09:6d:3f:59:8b:b6:df:64:3d:8e:
ab:cb:ab:ff:65:f5:0b:35:c1:24:d4:b0:bc:b9:1e:9b:4b:ec:
a9:84:bd:95:75:4e:62:9d:46:6e:68:a3:17:a1:b0:a2:9d:76:
b1:86:88:19:50:8d:ad:64:06:9a:57:61:9a:71:c6:96:36:76:
87:00:3a:19:70:83:83:1c:3f:d7:87:01:ab:1d:4f:78:22:e0:
07:6d:bf:6b:dc:85:2b:9c:98:03:62:82:62:f7:e8:4f:20:dc:
03:f0:d5:b9:ad:1e:62:f4:c4:ae:95:72:81:0d:ff:d4:68:4f:
2b:1d:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:28 2025 by rpki-client