Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/9pVSMCdjQealzLgQcmqOThUhNyY.roa
File: 9pVSMCdjQealzLgQcmqOThUhNyY.roa (raw, json)
Hash identifier: Za3wBMJoYZ7WrjJeJ4YGgLkdE+KKnUd40rRwXB4f/WU=
Subject key identifier: F6:95:52:30:27:63:41:E6:A5:CC:B8:10:72:6A:8E:4E:15:21:37:26
Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial: 0194228D23EF7EE037C0DB8CB9AC75E19070
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/9pVSMCdjQealzLgQcmqOThUhNyY.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 85.116.192.0/22 maxlen: 22
85.116.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:23:ef:7e:e0:37:c0:db:8c:b9:ac:75:e1:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6955230276341e6a5ccb810726a8e4e15213726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:0b:8e:7e:c1:26:23:db:40:55:89:c8:60:
cc:05:b2:90:b0:f7:9a:c1:69:bc:55:2d:64:5b:ef:
db:f3:99:ea:2e:d7:51:6f:f8:67:9d:14:3b:ce:80:
b8:7f:25:45:2e:a3:d1:03:5b:3d:2a:d1:47:eb:bf:
df:7f:7a:c1:aa:de:7c:80:a0:66:99:31:82:a9:2f:
17:08:4f:bf:92:20:e5:05:f6:74:87:64:82:5f:b7:
ce:19:e5:a4:93:45:10:d0:35:4c:7f:05:9a:19:4e:
06:0c:d8:ce:72:83:4b:11:72:9f:12:1f:d6:5a:2b:
28:d2:d6:d0:fc:12:e6:6e:3f:fa:66:ca:84:7d:d2:
3d:ae:e9:10:2a:31:ad:61:ae:f6:7a:4d:7e:e6:4a:
90:77:ff:d3:f1:60:6a:f8:71:a5:56:13:57:47:21:
a3:41:2e:db:82:bb:db:5e:84:f3:c9:f6:80:d0:30:
c9:c0:6d:98:8d:f8:3d:e1:cd:b7:a8:4c:ff:24:4c:
93:c7:80:8f:cc:c9:24:59:d1:62:81:95:8f:8e:ef:
8e:c7:6b:a8:1f:a9:cc:3e:ac:e0:0b:3d:83:10:19:
71:9a:57:a1:30:b9:fa:38:ee:95:47:48:a9:14:4f:
bb:2b:7a:51:cc:59:25:59:6f:d4:dc:56:dc:38:cd:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:52:30:27:63:41:E6:A5:CC:B8:10:72:6A:8E:4E:15:21:37:26
X509v3 Authority Key Identifier:
keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/9pVSMCdjQealzLgQcmqOThUhNyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.192.0/22
85.116.216.0/22
Signature Algorithm: sha256WithRSAEncryption
88:8c:62:17:ac:4e:1f:92:7b:83:ea:e5:8e:51:6e:55:b1:a0:
8b:cd:6f:9c:6e:25:09:93:f1:f5:60:21:e5:35:85:19:c7:53:
01:62:d7:56:e3:df:a8:a2:e9:46:3f:d8:43:09:ee:bd:db:a1:
ce:bc:74:b5:d9:80:4e:4a:4c:c7:f5:28:f6:5e:45:61:4b:a7:
85:97:ec:83:5c:09:eb:17:e0:32:4f:f9:50:ae:5e:09:93:55:
3c:3f:62:73:6c:76:b8:4a:6a:7f:e4:12:44:dd:39:aa:7a:9e:
14:e9:f5:67:c0:c1:ed:6e:3b:7c:02:f7:1d:d1:3f:79:2d:ea:
ff:ef:21:52:d9:40:1a:98:7e:8b:e8:18:64:c5:c7:aa:c7:d2:
57:ab:68:c6:c7:3d:34:a0:ee:b3:82:e1:c2:67:8b:22:f0:22:
58:2a:2f:81:3f:b2:e2:84:e7:6e:dc:50:64:d4:34:a5:c8:f5:
5d:66:3a:99:4b:75:9a:6b:ed:9d:45:41:0d:d2:0c:b0:92:8e:
b3:70:90:4f:84:98:83:5f:58:66:62:54:7e:4a:92:0a:42:4a:
05:a9:ca:af:35:ae:ba:e4:44:63:59:f5:3f:16:f4:f5:01:fa:
9a:38:62:4f:e2:64:93:8d:37:d2:39:ac:ee:14:89:27:93:d9:
d8:e7:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:41 2025 by rpki-client