Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E2HLDU8db5IZ0CA7CwJxPO_uwOk.roa
File: E2HLDU8db5IZ0CA7CwJxPO_uwOk.roa (raw, json)
Hash identifier: PhS4/yB9897u1ON7/mc36hDcH4e1B1Yrl1XiIMOqh0w=
Subject key identifier: 13:61:CB:0D:4F:1D:6F:92:19:D0:20:3B:0B:02:71:3C:EF:EE:C0:E9
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD50EFE826E482FF8C3334292495341
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E2HLDU8db5IZ0CA7CwJxPO_uwOk.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 85.204.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:0e:fe:82:6e:48:2f:f8:c3:33:42:92:49:53:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1361cb0d4f1d6f9219d0203b0b02713cefeec0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:31:53:75:58:2a:e6:3f:21:b0:f8:ba:9a:
26:49:b9:2f:fa:ea:b6:9d:e7:56:b5:20:3f:58:3b:
ff:83:c7:d7:eb:14:56:53:ff:33:be:88:61:31:96:
97:5a:3f:15:46:58:d5:b1:42:06:74:e6:b9:60:64:
2b:62:49:77:00:15:f4:10:a6:07:76:9c:ca:3c:48:
09:23:35:4c:a3:45:2c:c6:3b:42:5f:b6:6a:58:6a:
cc:3e:ab:36:71:af:0b:4f:6f:db:ce:10:1f:2a:f3:
42:cd:be:f9:f5:62:b9:ba:c9:2b:e7:c3:3c:9d:c7:
ba:fc:c3:60:b4:51:a9:b3:52:54:d5:96:03:26:ad:
bc:12:ed:47:c5:ce:ff:7f:bf:03:25:b5:f1:8d:9a:
45:be:10:f1:cb:4c:28:36:8f:ec:bb:1e:c1:1c:da:
85:8b:98:47:fb:dc:f5:e7:d3:42:67:64:54:62:d3:
78:a7:65:c6:5c:79:97:fc:0a:cb:df:30:93:96:76:
ea:f7:cb:e7:1a:53:1f:ae:da:bf:36:08:80:bc:58:
98:dd:e9:9d:30:7c:08:49:bd:a0:f8:03:19:e6:f0:
18:4d:26:83:b8:48:58:b5:a9:6e:0a:96:b6:ea:ff:
69:74:57:44:3c:2f:4c:c4:1e:a7:05:60:26:e3:1f:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:CB:0D:4F:1D:6F:92:19:D0:20:3B:0B:02:71:3C:EF:EE:C0:E9
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E2HLDU8db5IZ0CA7CwJxPO_uwOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.99.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cf:c7:5f:12:66:ab:7e:55:e3:cb:65:4a:dd:9a:2c:3c:20:
7b:93:12:dd:03:28:5f:0e:57:a0:e9:a7:d5:4f:b5:59:2a:66:
36:d8:8a:4c:25:6f:17:ae:ca:87:09:62:4a:83:3e:c5:5c:de:
0a:86:b6:08:85:d5:d4:be:15:bb:53:cb:3c:ba:03:19:3e:f5:
79:21:d4:5d:46:81:82:f9:10:90:a5:cf:e4:a1:c3:79:6f:24:
12:7e:cb:26:6b:9f:c6:79:c0:a4:1b:e9:12:20:9c:62:c3:9f:
d9:6e:03:9e:04:f7:ec:77:17:e9:ec:b2:9c:9c:77:46:76:30:
fa:1d:54:93:34:66:9d:72:d3:00:85:f3:3d:9e:08:2c:3f:07:
04:34:14:41:b4:3a:c6:4a:c7:0c:c7:64:df:83:60:0a:b0:cd:
df:64:5f:49:9d:13:7a:42:85:99:68:da:5c:9c:5a:79:c4:02:
f1:b1:fb:d3:33:31:f7:8b:61:d1:59:d1:65:f1:89:b0:5f:a4:
b0:22:05:c2:86:db:5a:68:9b:be:46:cf:7a:4b:a1:77:46:6e:
e4:85:e9:5f:cb:d7:b8:cf:5e:7e:27:d7:31:cd:8b:78:58:f6:
98:52:ca:b9:bf:c0:a9:17:60:d1:36:b6:00:1e:62:ab:08:9b:
73:e7:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:56 2025 by rpki-client