Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/P5M7UJlZjMySa32njTftp25wO6k.roa
File: P5M7UJlZjMySa32njTftp25wO6k.roa (raw, json)
Hash identifier: FhaWF2kmRxA3EZjzVGYmWEj/mJ5KPjp8cb5xRvfrwcY=
Subject key identifier: 3F:93:3B:50:99:59:8C:CC:92:6B:7D:A7:8D:37:ED:A7:6E:70:3B:A9
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B263DACA748BABEA3DDAA67BC0CE62
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/P5M7UJlZjMySa32njTftp25wO6k.roa
Signing time: Wed 01 Jan 2025 11:48:46 +0000
ROA not before: Wed 01 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57010
IP address blocks: 85.143.180.0/22 maxlen: 22
85.143.198.0/23 maxlen: 23
85.143.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:63:da:ca:74:8b:ab:ea:3d:da:a6:7b:c0:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f933b5099598ccc926b7da78d37eda76e703ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:99:12:2c:22:65:f1:f5:91:b7:c9:b6:41:
b4:f4:4a:82:cf:bd:f4:5f:60:12:fc:4c:00:17:52:
a9:39:81:a8:7b:f8:d0:78:aa:92:57:3b:8b:fd:77:
5f:84:ba:d4:4d:25:b6:f1:9e:bc:5b:6d:ed:ed:dd:
f9:3e:74:1d:85:85:3e:ed:60:2b:4d:78:10:ca:ab:
41:32:15:01:af:cb:33:26:f8:c7:96:f6:04:e1:d6:
0b:ad:94:fb:3f:38:b1:c8:70:a3:89:78:2c:66:c8:
d4:da:b5:4e:37:ad:b4:2e:2a:25:a5:29:c6:f5:0d:
40:a6:5b:bc:dd:6f:b5:f4:7f:27:c1:39:50:36:f1:
eb:d4:e8:9f:5d:f1:2a:1c:7e:1b:b3:6d:a4:c8:78:
34:98:36:85:45:72:8e:16:db:8b:78:c7:b9:39:cb:
d2:dc:7b:18:4b:a7:07:55:c0:46:32:8e:d4:db:ae:
02:fd:0d:7e:f5:b7:39:a8:c0:a4:da:23:d0:8d:9a:
f3:d0:6b:da:67:30:5f:cb:9f:8e:57:23:3c:c2:8e:
df:63:29:a2:37:ba:57:95:92:22:82:2f:ec:8e:da:
01:68:15:5a:33:b1:e2:9a:ae:17:21:b5:6a:08:3d:
ab:46:85:e5:3e:99:1a:b0:99:1e:ff:ce:b0:e5:61:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:93:3B:50:99:59:8C:CC:92:6B:7D:A7:8D:37:ED:A7:6E:70:3B:A9
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/P5M7UJlZjMySa32njTftp25wO6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.180.0/22
85.143.198.0/23
85.143.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b8:9b:2f:d9:3a:52:a3:58:8c:53:e0:d3:df:30:99:73:5b:
0e:05:e3:d7:26:71:f8:e2:a4:e3:de:67:47:af:e9:9d:31:b5:
51:48:ae:84:64:eb:4e:6a:38:25:89:3b:97:bc:59:60:f7:64:
a3:0e:5a:db:e4:ec:a0:d2:8f:ec:d4:dc:d5:41:2e:4b:a3:56:
ae:ca:f2:83:30:f5:8c:ea:28:95:37:09:46:95:f9:c6:cb:d4:
ad:dd:2d:4a:a5:00:42:59:4d:7e:8d:c7:cf:41:26:cf:52:95:
12:42:a6:29:5d:7d:53:34:da:98:47:cf:55:ed:df:ad:4b:da:
fe:53:ea:9e:61:08:ae:c0:6f:0c:27:ce:45:8a:5e:88:d0:6d:
3a:59:0b:10:12:81:55:56:7b:56:95:cd:6e:8c:a2:f7:6d:db:
c6:94:44:63:e1:ed:8e:22:ca:ee:f8:c8:43:d8:d9:dc:20:18:
ce:39:50:d5:7b:bb:ca:99:e8:07:c4:b6:e8:93:7c:60:ba:30:
ed:ac:cb:08:6a:2b:a7:f2:f8:2b:f6:bd:a6:b6:b6:ea:21:cc:
33:01:ee:cd:75:86:55:ca:0e:d3:f8:a2:0c:8a:58:8c:14:7c:
ab:04:00:41:1b:19:46:6d:89:ad:85:34:84:12:23:ec:e4:70:
38:eb:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:11 2025 by rpki-client