Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/zZNsL_7GzlhdLVIq7cFYJJFdvls.roa
File: zZNsL_7GzlhdLVIq7cFYJJFdvls.roa (raw, json)
Hash identifier: BalVcBlC9dZIvq3rZ0edgBd/Z3aBjdWWwqtGXayogaU=
Subject key identifier: CD:93:6C:2F:FE:C6:CE:58:5D:2D:52:2A:ED:C1:58:24:91:5D:BE:5B
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 018CC3495E4B58CA1A9CAB0EF7A8937DF68E
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/zZNsL_7GzlhdLVIq7cFYJJFdvls.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 85.209.206.0/24 maxlen: 24
85.209.205.0/24 maxlen: 24
85.209.204.0/24 maxlen: 24
85.209.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5e:4b:58:ca:1a:9c:ab:0e:f7:a8:93:7d:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd936c2ffec6ce585d2d522aedc15824915dbe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:4c:19:20:52:e3:11:b8:d6:7e:28:1b:b6:
d3:1a:1d:62:a9:2a:58:d9:23:a5:34:4b:88:3f:b5:
0d:e4:64:d4:80:d9:bb:10:23:65:80:e5:4c:3d:b6:
8b:a7:0b:25:8b:b9:66:22:bc:f2:2d:90:69:57:6c:
08:f1:8e:ba:df:76:14:4a:51:73:ac:98:3a:ec:37:
81:b3:4a:9b:4a:9b:e3:2d:bc:7b:8a:f1:e6:ae:ff:
51:77:02:4b:5b:14:5b:48:18:3e:76:2c:33:30:a5:
17:83:80:e0:76:16:06:f6:c7:61:44:7c:20:61:69:
46:bd:c6:dc:d6:d5:46:19:c7:2c:6f:cc:a6:e6:f9:
87:86:ca:b9:95:b6:7e:16:a5:4a:b3:c4:dc:14:55:
8c:95:bb:ff:bc:e7:2b:3b:43:c9:81:e7:6d:89:69:
c3:b0:76:6b:95:50:3d:b5:67:73:05:a7:ba:86:e2:
e8:64:88:f6:56:47:4c:27:d5:4d:9e:16:b5:1c:0b:
d3:db:05:ac:43:4b:e8:6d:1b:ef:8d:a1:3e:4d:9c:
5c:20:bd:a6:80:74:e4:2a:b9:1b:ac:ac:78:8c:fd:
75:58:e0:a4:d6:a6:ea:ec:df:d8:de:ae:42:29:16:
73:e9:e6:8c:1e:4b:6d:c1:a1:58:7a:48:bc:11:55:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:6C:2F:FE:C6:CE:58:5D:2D:52:2A:ED:C1:58:24:91:5D:BE:5B
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/zZNsL_7GzlhdLVIq7cFYJJFdvls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.204.0/22
Signature Algorithm: sha256WithRSAEncryption
06:74:32:e7:f9:e9:4d:8d:f4:b6:07:2a:2a:e4:47:db:3b:42:
71:b9:37:7f:33:4f:31:eb:f2:ac:15:5b:d0:5c:65:25:fb:15:
43:16:ef:98:c5:83:93:0e:86:24:b3:5d:9f:ba:89:ef:4d:1f:
7d:af:7f:c2:1f:fa:53:54:66:3b:ba:48:9d:6c:51:fb:cd:f3:
d0:88:0a:ba:7c:bf:f6:0c:b4:09:a1:75:30:6d:14:12:22:15:
2c:7f:7f:27:a3:bc:5c:74:f0:89:dd:a2:e5:ca:6b:59:0b:f6:
42:9b:c2:d8:6d:5c:19:63:41:f6:d2:49:38:4e:a1:3a:83:79:
02:31:0f:46:36:17:9f:23:ab:41:89:6a:42:5a:8e:3c:aa:ab:
1c:4f:d9:f1:f6:2f:17:75:58:c8:be:6f:26:ee:23:2c:49:ad:
22:bd:04:ed:9e:71:87:49:24:40:87:c8:bf:cc:48:96:c0:07:
57:85:19:a2:0f:05:41:0f:d2:3c:de:a4:0a:ec:93:e9:b6:28:
14:20:b3:dd:5e:6e:85:21:4a:a4:e3:58:b4:95:38:fc:a7:0a:
e0:67:46:eb:f1:b2:b3:72:69:b0:39:b8:f8:3a:a4:df:49:31:
ed:cf:b0:7f:74:0e:d2:75:eb:45:e6:61:5d:33:1b:b8:3e:16:
a4:2c:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:33 2025 by rpki-client