Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa
File: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (raw, json)
Hash identifier: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=
Subject key identifier: B0:BF:FC:8D:3E:85:F5:B7:B4:80:7A:73:B9:66:09:E4:D4:45:93:B6
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3F2EFA882529BDAD324145FF6010F
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10557
IP address blocks: 85.209.86.0/24 maxlen: 24
185.191.230.0/24 maxlen: 24
185.215.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f2:ef:a8:82:52:9b:da:d3:24:14:5f:f6:01:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0bffc8d3e85f5b7b4807a73b96609e4d44593b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:ea:da:5b:9d:8f:d0:f7:3e:c1:8c:45:ed:
cd:7b:f7:ab:21:96:b1:87:a2:09:7b:ab:2f:4b:45:
2f:6f:24:be:9d:79:88:1e:c0:a7:f9:37:3a:80:8d:
95:c4:3a:27:84:19:40:1c:e8:5e:5b:53:96:e3:3a:
66:eb:83:3f:be:57:e6:d4:1f:75:a7:24:45:ff:df:
d5:22:4e:05:a8:0b:c0:1f:65:8d:03:93:ff:02:6f:
e6:a3:fe:01:21:4e:95:47:90:31:3c:ac:ea:6a:f6:
b1:c7:b8:7d:9f:c7:96:26:05:b1:18:14:79:4d:d1:
09:38:ad:b2:74:32:8b:e2:7a:18:a2:3b:57:ad:11:
d5:1a:0c:9e:54:70:4e:e3:b9:a8:a7:4f:89:7a:76:
7c:64:72:6e:49:64:5b:f1:db:33:29:77:bf:7c:1d:
fe:53:da:b1:0e:74:b2:24:ea:ca:0c:db:91:55:f4:
65:98:36:ef:e4:fe:15:a7:cd:03:a9:2b:8c:b1:86:
35:a5:ef:35:b6:f7:8e:6d:9e:44:79:df:13:f9:e1:
f6:04:7d:c2:aa:56:22:aa:a4:7b:47:9b:53:a9:41:
4e:c7:a5:55:6e:1b:62:f6:f0:cc:40:31:cd:0e:d1:
54:6e:e4:02:f4:9a:ac:40:e0:7a:6a:48:66:db:3e:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BF:FC:8D:3E:85:F5:B7:B4:80:7A:73:B9:66:09:E4:D4:45:93:B6
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.86.0/24
185.191.230.0/24
185.215.149.0/24
Signature Algorithm: sha256WithRSAEncryption
35:52:39:8b:ed:87:78:4c:42:1c:4a:fc:2a:9d:f9:6c:89:93:
be:b0:fa:58:2e:4e:71:b1:f4:46:2a:02:d5:05:c1:56:15:46:
ff:72:8c:99:a4:bc:a3:a6:d5:71:c0:e1:ad:08:8c:f0:fe:8c:
b2:d8:0c:ba:eb:c9:0d:20:34:d9:e4:6b:2d:78:72:2a:24:d9:
0d:19:7a:bf:77:ca:f5:4a:5e:a6:a3:a5:ea:1e:ac:72:5e:50:
85:b9:51:2c:07:40:e3:8f:29:ac:3b:19:8b:e3:65:d4:54:12:
e2:1a:8d:a4:52:a8:05:bf:2b:13:cc:56:50:06:56:ad:2e:68:
32:fb:34:eb:c3:98:1e:ce:e2:6b:a3:f7:8a:53:23:09:8e:0b:
de:17:a9:3e:af:1e:5c:f1:63:98:bd:62:5a:fb:68:92:b3:54:
22:29:e0:fa:15:55:60:cd:cf:57:9e:5c:b7:b6:2f:e6:9d:62:
29:3c:86:37:be:d4:d2:06:fa:9a:d1:27:3e:20:69:9a:5c:98:
cc:b7:6a:71:85:f0:5c:53:16:4f:e5:ab:be:ff:4d:b4:48:d2:
8a:bf:82:0c:83:94:64:0b:0c:45:82:24:16:d1:93:89:0e:6a:
fe:17:62:0e:05:07:ba:80:58:e4:2d:11:0d:e3:10:41:bf:32:
d7:86:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:07 2025 by rpki-client