Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jJzZPEuYn_bjE8t1kn-PMlGBQKM.roa
File: jJzZPEuYn_bjE8t1kn-PMlGBQKM.roa (raw, json)
Hash identifier: NVEEm4yarJmhKKdphgRvaAG05CbBLK4SCRccC2QipYE=
Subject key identifier: 8C:9C:D9:3C:4B:98:9F:F6:E3:13:CB:75:92:7F:8F:32:51:81:40:A3
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D19F9106C181C9A0373DB3F7A918
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jJzZPEuYn_bjE8t1kn-PMlGBQKM.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 85.209.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d1:9f:91:06:c1:81:c9:a0:37:3d:b3:f7:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c9cd93c4b989ff6e313cb75927f8f32518140a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:19:e1:6f:ad:43:d5:8a:0f:75:84:26:ad:
54:d1:59:5a:7a:47:3e:1f:52:65:48:d0:35:9f:50:
98:65:b7:c8:8b:d6:28:3a:51:eb:39:fe:a9:a2:7b:
2b:41:72:8b:b1:df:2f:a5:43:64:ef:24:9a:b2:24:
69:3c:70:f0:c0:8e:13:b9:91:74:bb:10:9b:97:21:
d5:30:6a:50:f5:62:f0:46:fc:a0:56:22:55:df:e4:
78:e7:4f:06:65:93:79:78:1a:dc:c1:38:82:e5:6b:
85:1d:0c:cf:d6:79:13:2f:5f:bd:63:49:ac:ea:32:
17:56:12:f7:c6:9b:21:d2:50:13:b2:7c:a8:21:07:
d6:9e:39:80:e6:2f:b4:59:35:ab:31:ad:27:27:0d:
e4:8c:31:4f:81:34:9c:27:71:b9:a5:77:b2:71:02:
7e:96:5d:f4:e6:31:29:5b:4c:2f:7c:cc:fa:76:51:
47:f3:82:0c:2e:7c:81:6b:b6:d9:c8:84:dd:2b:e9:
58:9e:5f:95:62:34:9d:57:ef:42:1e:6d:43:e7:df:
a9:6f:a7:c5:f8:92:19:a7:8a:04:48:80:a7:c4:b9:
e4:3d:39:ee:5c:c7:80:f8:74:3b:da:79:d6:ef:1d:
58:c4:3f:d8:69:a5:c2:d5:45:5c:f7:af:3c:ec:84:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:D9:3C:4B:98:9F:F6:E3:13:CB:75:92:7F:8F:32:51:81:40:A3
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jJzZPEuYn_bjE8t1kn-PMlGBQKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.9.0/24
Signature Algorithm: sha256WithRSAEncryption
56:df:24:0b:82:16:0f:3d:5c:e1:3c:10:40:4e:f1:42:ba:5a:
fc:51:01:bf:bd:8a:a9:ac:ba:24:d9:2b:01:ad:2e:ff:a2:40:
67:fe:0e:70:66:43:1f:8a:43:8d:41:29:c3:10:0c:a3:b1:86:
40:90:4d:bb:6e:5f:92:bb:78:c2:8c:a6:f5:29:7a:19:47:22:
29:6e:86:dc:aa:a5:c6:9d:93:d2:1b:83:b9:73:a6:1b:68:55:
bf:75:1f:33:23:91:d5:93:68:8b:ef:96:54:7a:81:33:65:e3:
10:ee:07:d1:2e:cf:a8:e6:1e:c4:00:ee:4c:bd:ae:c8:cd:75:
24:c0:b1:96:8e:04:b9:f9:0f:cc:1f:25:06:42:44:82:c6:bb:
64:1f:1d:1d:67:fc:58:36:57:4e:02:6a:70:54:48:80:67:8b:
e4:2e:82:36:cf:65:14:6a:fa:e2:cc:2c:03:a5:8d:e7:d7:9d:
d6:a7:e2:01:22:fd:87:25:a8:67:0b:59:6c:d0:66:b0:d5:7f:
b9:9a:b9:24:30:a4:42:3b:a9:2b:0b:1e:e8:12:48:70:ed:73:
99:70:1c:8b:2b:e0:45:39:5b:53:94:9e:8a:e2:01:1d:00:81:
dc:4d:38:3a:3a:15:62:f3:f8:be:05:de:a6:3b:63:68:3b:8b:
56:bf:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:58:15 2025 by rpki-client