Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/1-ZdS4Jzx8YMoPxXna_Pdr0SBNNA.roa
File: 1-ZdS4Jzx8YMoPxXna_Pdr0SBNNA.roa (raw, json)
Hash identifier: 8OYPzPqa5MRHe28ES96ro1mcbCvARP5mMAhHgMCMInk=
Subject key identifier: F9:97:52:E0:9C:F1:F1:83:28:3F:15:E7:6B:F3:DD:AF:44:81:34:D0
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 02F7ED2B
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/1-ZdS4Jzx8YMoPxXna_Pdr0SBNNA.roa
Signing time: Sat 01 Jan 2022 04:57:52 +0000
ROA not before: Sat 01 Jan 2022 04:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39346
IP address blocks: 85.204.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49802539 (0x2f7ed2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 1 04:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f99752e09cf1f183283f15e76bf3ddaf448134d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:77:ee:89:ee:19:cb:85:dc:b9:f9:0a:0a:
fe:de:8b:33:d2:2c:1d:12:c8:a6:b5:dc:d1:8e:dc:
0b:ee:45:e1:55:39:99:42:04:ba:a7:e6:30:27:04:
6b:64:7a:80:48:9e:7f:bd:03:c3:97:db:7e:ea:ab:
c8:15:30:0b:f0:97:ba:da:82:f1:91:7a:3a:d3:d8:
50:2c:fa:81:9c:7d:c8:25:7b:72:dd:9a:ce:96:c4:
96:d1:0e:c7:f2:65:d0:65:84:6f:71:8a:13:bd:57:
a5:28:3c:7b:5f:d9:81:7f:65:6c:ad:25:07:ba:6e:
4f:e6:ed:99:0b:54:02:f0:a2:e3:8e:02:05:5e:33:
f8:44:03:06:8c:ab:f8:a4:52:99:c4:b9:cb:2b:31:
a8:9b:c1:7c:5e:5b:7e:df:27:dd:d3:9f:89:12:9a:
bf:0a:6e:bd:d2:bf:7b:53:08:7d:83:ec:bf:db:f8:
a5:88:50:47:02:a8:7c:ae:ca:0d:0a:a3:64:ef:ab:
f0:1d:ed:b6:99:4e:94:b3:a3:3f:47:17:a4:d5:0c:
c7:d7:d3:70:2c:d4:0b:e9:f2:ff:68:f9:79:59:ec:
d5:10:30:fe:91:90:dc:cd:75:3d:9a:d4:10:e7:9c:
48:8e:41:7f:5f:3a:46:c8:40:41:67:b6:72:0a:19:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:97:52:E0:9C:F1:F1:83:28:3F:15:E7:6B:F3:DD:AF:44:81:34:D0
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/1-ZdS4Jzx8YMoPxXna_Pdr0SBNNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0b:df:31:99:e4:4e:81:99:0e:47:be:61:fb:c2:f6:de:d1:
8e:0f:4f:fd:e4:65:6b:1c:3e:65:c9:40:34:f1:eb:da:7d:de:
d2:b5:4b:59:bf:a3:f6:d4:35:8b:0c:0f:47:d9:75:d2:c9:56:
a3:70:c6:aa:1d:1c:b4:71:f8:d0:74:8a:57:9b:f6:38:ab:9d:
de:7a:45:36:0b:c3:8c:ba:30:c3:3b:40:28:4e:97:d7:f8:d4:
a4:3a:e2:6a:c5:a5:5e:f1:e5:f7:eb:d9:ec:18:ec:0d:f0:8c:
af:2c:12:27:04:64:a2:b4:ed:f2:47:e8:d1:32:2e:fc:35:e7:
e5:ac:b4:65:9a:7a:bd:81:e8:2e:d5:28:f9:a2:4f:1d:aa:2a:
b6:83:46:ba:f3:7a:f7:fa:00:0a:2d:e7:47:11:5a:76:99:5a:
cc:28:10:88:e2:46:6d:2d:de:c8:87:c6:9b:96:02:73:43:bd:
39:09:d3:b1:32:a5:e4:e4:69:db:a9:bc:a8:c5:f4:08:42:63:
ce:9b:f5:c6:24:e0:cb:ab:3e:98:9e:e1:b4:d5:ed:23:7f:0b:
88:26:bf:46:20:52:98:0f:5f:e5:ec:f5:2b:68:f8:c3:eb:76:
20:1c:ce:cd:9d:07:06:55:e7:8c:0e:2d:c5:90:9a:7b:5f:6f:
1d:10:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:14 2025 by rpki-client