Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/RcnM5lD2VLhEfstSA8lcgXJNriA.roa
File: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (raw, json)
Hash identifier: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=
Subject key identifier: 45:C9:CC:E6:50:F6:54:B8:44:7E:CB:52:03:C9:5C:81:72:4D:AE:20
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 01942143B4725C987F3A2A4280E8B951FE42
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/RcnM5lD2VLhEfstSA8lcgXJNriA.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62336
IP address blocks: 85.209.60.0/22 maxlen: 22
2a09:88c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b4:72:5c:98:7f:3a:2a:42:80:e8:b9:51:fe:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45c9cce650f654b8447ecb5203c95c81724dae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:ba:f2:47:db:02:47:66:d8:ff:e9:c3:d0:
1a:da:a3:56:56:48:f9:00:1d:9e:e6:42:a4:27:0c:
7f:f9:1b:9f:94:69:36:72:6e:cb:8a:7d:f5:52:7a:
10:94:4a:96:ec:27:a7:96:d5:00:ef:e9:e3:73:04:
4e:4a:6a:a7:ee:c4:02:4c:7e:b2:f3:6d:b3:76:fd:
7b:77:5e:05:68:e3:4a:a7:f6:75:8f:9d:63:c4:8a:
b6:ff:64:aa:36:98:12:f4:c8:ed:4f:65:ba:60:c3:
e1:68:71:89:a8:6b:08:f8:3d:dd:31:d1:fc:98:ed:
44:f1:c7:84:59:5a:1d:e2:9e:9b:d7:23:87:8a:bb:
8f:00:10:6a:ac:2f:16:bb:1c:5f:8c:fc:ca:f0:ef:
a4:6a:59:1a:4d:b2:a1:58:cb:fd:af:aa:7a:41:d8:
80:84:93:4f:a0:10:23:7f:3a:26:7d:27:68:ad:a0:
97:f1:c3:c2:51:7f:24:17:97:59:7c:2a:72:ce:95:
76:c7:ca:22:40:bb:34:b3:3b:61:09:ae:55:9c:29:
ec:9e:0d:26:1e:88:8e:d3:f9:23:24:4e:2e:8d:7c:
ae:db:c5:d8:31:39:eb:36:9b:fd:7a:22:2f:7d:b7:
b5:c4:88:a4:1c:09:6d:2c:74:d9:cf:db:f7:e5:5a:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:CC:E6:50:F6:54:B8:44:7E:CB:52:03:C9:5C:81:72:4D:AE:20
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/RcnM5lD2VLhEfstSA8lcgXJNriA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.60.0/22
IPv6:
2a09:88c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:af:83:dd:b3:60:70:6b:3a:7e:ee:06:f8:2d:83:30:a6:34:
e6:e1:99:d4:44:40:0f:7e:4e:a8:cd:eb:a5:5c:44:53:68:d3:
5e:bc:05:79:f1:86:e7:1d:96:a5:09:04:7a:ba:43:f8:17:8c:
6a:62:ee:e0:91:e4:e9:7e:74:4c:76:b4:83:d7:4c:50:7b:8e:
f7:62:13:3c:4e:45:f1:f8:86:b9:ef:55:4f:0d:f1:7d:a0:2f:
19:fb:b3:e2:12:3c:99:86:87:4b:22:c4:e2:9d:6f:48:a0:41:
37:27:9f:58:6b:96:14:67:85:c9:23:e2:34:11:3d:58:be:14:
d4:ab:c7:e4:bc:a2:0c:1d:ca:fe:da:73:f9:be:31:21:bb:82:
f0:f6:26:58:7f:9a:64:6a:82:8e:e7:57:78:36:c6:b6:f2:30:
15:5d:74:0a:93:e2:1e:da:4b:01:02:fc:ee:c4:46:74:f5:5c:
c5:e9:a5:d0:e0:26:1b:d8:d8:59:5d:30:aa:d8:d9:d1:62:a5:
3c:b7:ca:76:32:d3:56:db:7c:b1:ed:67:b6:f7:49:3f:7f:37:
b3:c5:a2:12:f1:77:d6:3b:10:0b:c0:be:79:a9:ad:7c:56:97:
63:ca:8a:0e:b0:bd:f2:89:01:26:28:22:8a:54:48:03:53:cd:
3d:41:4f:07
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhQ7RyXJh/OipCgOi5Uf5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjY5ZDBlYThjYWE0MGM3YTcwNDM4MmNhYjUzZTFiMDI2
ZDZiNDMwHhcNMjUwMTAxMDk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWM5Y2NlNjUwZjY1NGI4NDQ3ZWNiNTIwM2M5NWM4MTcyNGRhZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwa68kfbAkdm2P/pw9Aa2qNWVkj5
AB2e5kKkJwx/+RuflGk2cm7Lin31UnoQlEqW7CenltUA7+njcwROSmqn7sQCTH6y
822zdv17d14FaONKp/Z1j51jxIq2/2SqNpgS9MjtT2W6YMPhaHGJqGsI+D3dMdH8
mO1E8ceEWVod4p6b1yOHiruPABBqrC8WuxxfjPzK8O+kalkaTbKhWMv9r6p6QdiA
hJNPoBAjfzomfSdoraCX8cPCUX8kF5dZfCpyzpV2x8oiQLs0szthCa5VnCnsng0m
HoiO0/kjJE4ujXyu28XYMTnrNpv9eiIvfbe1xIikHAltLHTZz9v35VrvQwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEXJzOZQ9lS4RH7LUgPJXIFyTa4gMB8GA1UdIwQY
MBaAFNsmnQ6oyqQMenBDgsq1PhsCbWtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQt
Njk4ZjgxOGJiZDMzLzEvUmNuTTVsRDJWTGhFZnN0U0E4bGNnWEpOcmlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQtNjk4ZjgxOGJiZDMz
LzEvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdE8MA0E
AgACMAcDBQMqCYjAMA0GCSqGSIb3DQEBCwUAA4IBAQBJr4Pds2Bwazp+7gb4LYMw
pjTm4ZnUREAPfk6ozeulXERTaNNevAV58YbnHZalCQR6ukP4F4xqYu7gkeTpfnRM
drSD10xQe473YhM8TkXx+Ia571VPDfF9oC8Z+7PiEjyZhodLIsTinW9IoEE3J59Y
a5YUZ4XJI+I0ET1YvhTUq8fkvKIMHcr+2nP5vjEhu4Lw9iZYf5pkaoKO51d4Nsa2
8jAVXXQKk+Ie2ksBAvzuxEZ09VzF6aXQ4CYb2NhZXTCq2NnRYqU8t8p2MtNW23yx
7We290k/fzezxaIS8XfWOxALwL55qa18VpdjyooOsL3yiQEmKCKKVEgDU809QU8H
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:02 2025 by rpki-client