Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/KAady5nIQ7goGP7Rcsy66F2FCTk.roa
File: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (raw, json)
Hash identifier: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=
Subject key identifier: 28:06:9D:CB:99:C8:43:B8:28:18:FE:D1:72:CC:BA:E8:5D:85:09:39
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 019423D7D6328F23412969F13C8D674A1EEB
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/KAady5nIQ7goGP7Rcsy66F2FCTk.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34469
IP address blocks: 85.158.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d6:32:8f:23:41:29:69:f1:3c:8d:67:4a:1e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28069dcb99c843b82818fed172ccbae85d850939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:21:04:2f:76:33:ec:6c:25:39:bd:79:60:
85:d5:51:b3:7d:ae:65:8a:1a:aa:c3:91:d1:c0:d9:
b3:19:32:44:84:61:fe:03:88:f3:a1:e9:4c:de:d2:
6e:f7:7c:de:9e:6e:d2:d9:31:e6:82:f1:7a:ab:2f:
4a:34:72:96:18:ea:17:c9:15:b1:f3:6d:1f:6b:6c:
f0:8e:a7:25:47:9c:55:27:c3:d2:31:7d:37:92:7b:
b5:ca:dc:62:59:50:db:da:36:c5:89:21:6a:6d:b9:
ba:de:83:b7:52:3b:f1:1b:05:eb:a9:21:b1:8a:20:
c2:c6:78:ef:a4:c3:2c:1b:0e:e2:57:c4:f9:b3:80:
a2:6c:6e:34:a9:ab:df:7d:7f:1b:12:8d:a5:aa:ef:
04:fb:5d:71:da:92:39:bd:cb:88:4b:23:5d:ae:23:
96:06:46:b8:f5:71:2a:e5:c0:e3:8d:55:1f:77:fe:
01:de:51:51:c4:ed:cf:d0:70:ba:25:de:42:a7:0e:
28:b6:17:d5:57:7f:76:8c:51:d4:3b:52:02:ba:3d:
9c:5d:fd:cd:c7:ae:85:53:85:24:64:69:f2:fa:eb:
1b:a2:b9:1b:5e:4d:a8:23:ae:47:4f:bd:52:87:ff:
99:bc:36:c5:7b:fc:6d:22:0b:a1:00:9e:91:34:70:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:06:9D:CB:99:C8:43:B8:28:18:FE:D1:72:CC:BA:E8:5D:85:09:39
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/KAady5nIQ7goGP7Rcsy66F2FCTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:d7:c3:bf:48:a0:1f:6b:39:4f:b9:97:10:67:f6:6e:8c:5e:
3f:7d:30:fb:be:50:c3:ba:38:0b:72:42:8c:01:21:da:e8:82:
ac:ed:9c:c7:f1:ea:03:ae:76:a3:f4:46:8a:73:a4:52:8c:58:
99:49:d6:53:e8:4d:dd:f3:f4:a6:7c:f6:b4:54:ed:1e:b6:5a:
84:16:b8:9a:8d:66:1d:79:17:54:73:28:5f:0d:2d:f6:2e:c9:
0d:b6:93:e8:41:f7:e3:91:90:43:5a:d4:20:bd:16:ab:df:55:
04:0a:40:75:a8:3f:d1:54:82:33:f9:df:50:b3:38:66:7b:5c:
65:1f:ac:73:ba:39:57:5f:72:af:09:c2:ee:d1:bb:f0:e2:fd:
58:d9:2e:e7:9e:5b:97:7a:70:3b:5a:73:e6:55:ed:a5:1b:63:
46:1b:5f:3e:12:02:7d:89:c2:00:62:13:10:13:51:1a:14:56:
60:e3:b2:d6:8b:4f:dc:63:d1:88:a7:be:3c:62:1d:5c:86:de:
0f:4f:01:e0:68:2c:51:2f:c5:8a:6e:a4:30:e9:ae:93:bb:44:
fc:a7:ed:8f:4e:4b:64:e8:0a:e5:6d:09:d6:5c:ff:c3:75:4f:
5c:4d:d2:3e:5e:a5:62:07:18:3f:17:ed:c7:ab:5c:cc:25:3f:
5a:b8:e4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:49 2025 by rpki-client