Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa
File: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (raw, json)
Hash identifier: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=
Subject key identifier: 0B:72:B3:9C:06:D5:00:9E:85:49:E6:01:6E:52:82:A5:69:29:48:B4
Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial: 0194228D24F4C541B2A93F4B26FC816913D1
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 85.116.200.0/22 maxlen: 22
85.116.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:24:f4:c5:41:b2:a9:3f:4b:26:fc:81:69:13:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b72b39c06d5009e8549e6016e5282a5692948b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:80:07:be:4a:5b:dc:77:46:62:3a:60:f0:
ff:9b:ee:08:62:8f:98:ba:d5:1b:ea:e9:b7:2f:45:
d7:ec:19:d8:4f:25:39:9b:af:71:db:5f:b0:b2:19:
13:bd:e6:60:25:0c:e8:85:c5:96:3c:aa:91:9d:ea:
13:53:1c:d9:3c:a3:9b:96:f5:77:e4:86:e8:7c:34:
22:3f:66:10:be:21:ed:d7:84:fc:30:d7:43:43:fc:
29:89:ab:e7:d9:89:ca:a9:fa:d1:87:75:65:0b:1c:
51:77:df:d0:13:ba:84:18:f5:41:7b:87:7a:5c:bf:
2c:ae:15:e3:e6:6a:69:f2:6e:2f:1f:5a:e0:e9:8d:
12:05:e9:f5:14:35:b2:f4:f8:84:ec:c0:b5:3c:5d:
ae:22:ea:6a:26:93:52:bd:3f:7b:fe:61:ba:73:44:
ef:d9:5f:c5:d2:eb:d2:14:6c:92:d6:78:7f:7b:70:
c3:f3:13:98:f6:2d:57:2e:3a:0c:d8:6c:af:e9:3f:
1d:4e:ed:99:6d:4a:64:6e:a7:d8:65:c3:8a:33:98:
14:32:14:13:9a:eb:78:8e:cf:ab:8d:54:e8:c0:1b:
6d:d6:77:ef:d5:d3:07:4b:cb:75:29:1d:49:2a:c9:
f1:ac:af:64:42:3b:d0:76:b8:2c:67:36:a9:11:79:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:B3:9C:06:D5:00:9E:85:49:E6:01:6E:52:82:A5:69:29:48:B4
X509v3 Authority Key Identifier:
keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.200.0/22
85.116.212.0/22
Signature Algorithm: sha256WithRSAEncryption
36:7b:5a:21:09:a0:dd:6c:ab:b9:59:f0:22:55:5e:89:ba:21:
d2:c8:f5:fd:e0:09:f9:7c:7b:a3:1d:30:dc:ad:7a:b7:e0:9d:
d0:80:35:e4:25:18:63:ac:2d:53:71:64:a8:67:77:67:cd:0a:
96:06:af:e1:24:b7:21:88:57:05:2f:b7:68:b5:c2:e1:59:f0:
0c:73:b5:67:24:7c:01:13:f7:72:02:8e:93:a7:e5:62:6d:81:
f7:79:c6:66:6f:d0:1d:c0:7f:e2:6f:d0:45:df:ac:56:30:52:
4e:6d:b3:5f:7d:47:96:39:ac:69:e3:b3:db:4e:41:0a:4a:f3:
78:5a:d8:92:d0:cc:52:14:fc:48:76:32:61:ea:62:9e:11:01:
5f:a0:95:b1:a3:1d:a1:84:e1:0e:64:29:ae:11:29:da:cf:48:
88:2c:18:1f:c4:6b:58:8b:41:08:31:81:d0:89:4d:7e:18:e0:
8c:af:92:f6:be:4d:92:4d:15:78:23:59:ad:ec:2c:33:64:51:
13:c1:d0:01:b7:a2:1e:2c:7d:a9:10:82:24:1e:8b:c0:94:55:
84:aa:2d:9a:4e:86:6c:dc:ac:af:d2:5e:2f:53:52:37:9f:9f:
46:2d:2c:e8:a5:a7:08:52:e6:b3:93:4b:92:09:40:86:a2:48:
b1:67:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:53:02 2025 by rpki-client