Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/u2_pk8ziGbntGRmZKYxnrXKkuzE.roa
File: u2_pk8ziGbntGRmZKYxnrXKkuzE.roa (raw, json)
Hash identifier: U3xBnjU+TIfce0hnkqiAtyYgsbPeVjXQqUNP5QZpZvg=
Subject key identifier: BB:6F:E9:93:CC:E2:19:B9:ED:19:19:99:29:8C:67:AD:72:A4:BB:31
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A4405A9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/u2_pk8ziGbntGRmZKYxnrXKkuzE.roa
Signing time: Tue 29 Mar 2022 14:46:57 +0000
ROA not before: Tue 29 Mar 2022 14:46:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 85.209.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172230057 (0xa4405a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 29 14:46:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb6fe993cce219b9ed191999298c67ad72a4bb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:28:86:6f:be:6e:43:0d:e4:c6:a2:b8:d9:
bd:ff:f7:b7:b8:25:19:9d:99:96:25:c6:a7:72:94:
d0:d2:d9:5e:c3:20:ca:27:b3:5b:ba:5c:06:5c:5f:
0b:52:0a:8a:04:19:3d:c0:a8:6f:1d:60:19:01:54:
7b:ac:9a:c8:7a:8e:e5:b8:f9:74:66:15:07:02:51:
73:8b:0c:d3:49:77:7c:24:7c:c9:de:d2:bf:31:2b:
f2:c8:39:6e:ff:46:b0:10:2c:e4:22:88:73:f9:3b:
48:4e:56:f9:38:cc:ec:ab:3d:53:b4:df:54:e5:40:
be:42:5a:bb:59:3d:14:e1:02:2c:7b:86:fc:9e:0f:
7d:2c:9d:8d:9e:3a:67:b8:d9:0f:fa:de:7f:46:f8:
61:cd:ce:84:f2:54:9f:7e:d7:7f:bf:dc:2c:dd:30:
48:9e:28:f0:fc:ae:16:d9:b0:2f:ca:61:67:c6:9e:
c7:c2:77:84:c6:47:c0:a3:a5:2b:9f:cb:d1:a4:2c:
24:e6:19:fa:5b:e2:6f:42:21:d0:f9:b8:58:74:67:
9d:7f:59:aa:03:fe:1e:d6:80:a0:ff:c2:51:cb:0c:
b2:19:a3:9a:a9:ec:b4:39:5a:eb:a0:3e:c2:91:2f:
15:68:94:5e:8f:18:60:18:08:1a:0c:3f:ff:96:da:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:E9:93:CC:E2:19:B9:ED:19:19:99:29:8C:67:AD:72:A4:BB:31
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/u2_pk8ziGbntGRmZKYxnrXKkuzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.222.0/24
Signature Algorithm: sha256WithRSAEncryption
31:58:e2:b5:4e:b5:da:4d:65:3d:11:6a:ab:0d:6c:9b:15:2c:
50:2b:d1:24:24:a9:3b:96:fa:ef:6b:06:30:f9:40:b3:8e:52:
5a:31:fb:c2:8c:b6:db:ef:39:49:c2:ab:e7:c8:7a:16:6d:a3:
d4:60:4d:06:e3:f3:fa:79:ff:77:d4:13:3d:db:bb:38:4f:0d:
6f:23:bf:77:43:c0:43:72:fa:c8:7e:fe:1c:bf:73:c5:80:b9:
fb:c8:b3:6d:75:36:38:07:dd:48:a7:5a:b0:e8:59:d7:f8:61:
af:26:c4:3b:ef:1f:5f:2a:54:de:33:de:54:0b:04:95:13:c4:
9b:7e:25:f6:23:7b:3e:88:7b:ea:67:61:d9:5d:99:16:c9:c4:
db:14:88:3d:15:84:56:01:42:32:99:f1:ab:5f:85:95:88:cc:
7a:19:cd:36:72:c8:2e:9e:2d:74:e6:bd:ad:8a:76:1d:37:e1:
fc:ea:45:a7:3b:4f:86:75:c2:14:70:ec:de:14:7d:90:f1:c5:
75:af:6f:14:be:ad:7e:34:4f:0f:1b:78:3c:94:64:f7:b9:7c:
89:48:e4:f9:51:73:d7:16:af:04:8b:aa:fe:7f:0f:60:a1:71:
22:98:dc:9e:61:50:d7:ff:e5:00:66:84:c9:62:83:03:a9:bf:
d4:dd:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:18 2025 by rpki-client