Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/rBcfLSQ6bQmfFvYC_ifRhgH0lgo.roa
File: rBcfLSQ6bQmfFvYC_ifRhgH0lgo.roa (raw, json)
Hash identifier: 1DVPS8TC6XqyX5RftCow/MMKQAL1/7NoIuGKtEc7azA=
Subject key identifier: AC:17:1F:2D:24:3A:6D:09:9F:16:F6:02:FE:27:D1:86:01:F4:96:0A
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA6D41F7AD64CC00D77DEC16AAD28
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/rBcfLSQ6bQmfFvYC_ifRhgH0lgo.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61418
IP address blocks: 85.153.172.0/24 maxlen: 24
85.153.181.0/24 maxlen: 24
85.153.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a6:d4:1f:7a:d6:4c:c0:0d:77:de:c1:6a:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac171f2d243a6d099f16f602fe27d18601f4960a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:a2:12:94:f3:b4:f0:4a:ca:1f:6e:d7:05:
11:48:12:92:3d:8c:39:95:cc:4b:29:d6:48:c1:04:
a8:cf:7b:04:c1:36:cb:59:bb:91:8d:2d:be:ab:9f:
b2:fe:95:aa:19:12:3d:23:62:95:86:9b:ff:62:c4:
42:55:d9:8f:11:95:9b:3d:d1:46:46:15:80:3e:52:
b1:3e:00:54:79:3a:4d:57:a4:e5:32:0d:c7:03:65:
69:c9:ea:a1:72:57:72:b2:c4:a7:00:14:5e:fa:c2:
8b:f6:8f:a5:31:36:cc:0d:7d:d5:85:1e:0c:23:06:
95:6d:04:61:e2:46:76:e0:e8:d0:a3:71:cf:e0:ce:
04:79:ba:24:4e:5b:41:20:ee:fe:df:3f:80:42:8e:
70:41:53:f8:8a:b8:4b:7a:fc:1d:07:14:cc:d4:10:
7b:14:97:73:d4:bb:e5:ee:d3:d5:44:42:a4:87:b3:
0f:3e:6f:34:af:10:ff:a2:f7:7d:31:42:b1:6a:d9:
16:f4:47:5c:4d:7c:82:28:9d:8e:c2:cf:6f:09:5d:
f5:e0:b0:cc:9f:df:3b:57:d4:d5:36:1d:ec:64:1f:
23:fe:77:62:6c:7d:c8:19:b4:56:43:b0:ea:b9:c0:
f3:c8:80:83:ec:d4:e8:9a:9e:bc:88:50:8e:85:cd:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:1F:2D:24:3A:6D:09:9F:16:F6:02:FE:27:D1:86:01:F4:96:0A
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/rBcfLSQ6bQmfFvYC_ifRhgH0lgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.172.0/24
85.153.181.0/24
85.153.185.0/24
Signature Algorithm: sha256WithRSAEncryption
36:dd:0f:7e:5a:c5:76:cf:f0:04:90:c4:49:66:89:25:72:11:
b8:6c:37:03:cf:97:96:0d:22:aa:8d:04:9c:0d:7f:a2:34:36:
c5:6d:2a:90:5a:fa:ae:1e:25:26:5c:bb:8b:75:05:e7:76:6f:
dd:8b:2d:17:73:c3:c2:d6:12:64:5e:28:7b:b8:0b:27:b2:ac:
87:fd:2d:02:b6:b6:28:78:e0:fc:d4:5a:9c:ec:3e:d3:5e:c1:
ba:0a:0d:7b:04:6c:ab:fa:93:a4:63:29:cd:c1:ed:0c:b7:f9:
bb:4e:d0:3e:72:25:e2:48:95:c8:ec:1c:3a:56:49:0b:c7:c0:
0f:d8:90:97:e2:5c:b3:19:6c:f5:c2:20:7b:6d:84:a6:a8:9d:
8c:14:40:c2:ac:34:73:ca:3c:d1:ab:bf:98:74:dd:b0:02:81:
b0:1c:73:54:62:4a:ec:2c:7f:68:4d:9f:25:0d:55:6d:32:97:
fc:2b:76:43:b3:ef:40:6c:28:cf:da:e1:18:f7:1d:e9:76:f8:
03:f7:1c:7f:4d:1e:e5:b7:37:81:ff:b5:85:17:b1:6f:77:88:
4f:56:2a:fb:0f:6a:86:03:ab:5e:b9:eb:81:ce:9e:ad:f5:69:
52:19:55:fe:51:78:e4:ac:d9:7b:1b:44:84:c1:7b:ff:04:a7:
01:95:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:03:52 2025 by rpki-client