Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/9bQI2MEggSINlK9_BarU8M81OQA.roa
File: 9bQI2MEggSINlK9_BarU8M81OQA.roa (raw, json)
Hash identifier: wOitezrRSXcEwaiiOP2S3ZgNGLVJcTHEtHqjTe+hp0U=
Subject key identifier: F5:B4:08:D8:C1:20:81:22:0D:94:AF:7F:05:AA:D4:F0:CF:35:39:00
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FBE4F337F0087CF2311AF81F982CB
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/9bQI2MEggSINlK9_BarU8M81OQA.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24756
IP address blocks: 85.219.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:be:4f:33:7f:00:87:cf:23:11:af:81:f9:82:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5b408d8c12081220d94af7f05aad4f0cf353900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:50:ed:6e:a0:3b:90:4b:8d:d8:d7:f7:69:
c0:8e:d3:db:f9:9d:8a:bc:21:4a:a4:d9:84:25:53:
99:b9:c2:4c:fb:11:b6:91:80:c1:32:1e:0f:c2:39:
13:eb:57:60:b8:03:6b:93:02:0c:7b:81:68:8d:be:
13:2f:e3:0d:71:c8:49:93:2b:d6:93:e6:e6:23:18:
b1:c9:47:0d:99:94:c6:f0:ef:31:e2:1c:c1:b1:4d:
77:fe:e5:85:bf:ff:3c:00:b7:97:8f:7d:d1:6a:46:
b8:e9:fc:ee:9f:79:c5:36:4f:b1:78:c3:59:78:f8:
1f:ff:72:75:d0:6b:1d:92:0c:e4:1b:c1:71:e1:b6:
bf:aa:8c:c1:26:81:55:da:4f:53:cf:03:ef:1b:ef:
ce:52:29:d9:66:3a:7f:6a:0c:a4:f6:fa:df:7e:cd:
25:1f:9b:5c:a2:16:d5:76:e8:6c:c4:dc:b8:10:bd:
17:86:9e:c4:66:dc:4f:2f:79:1d:07:cb:9d:a0:07:
53:eb:73:c2:e1:5b:db:3a:81:79:a9:fb:9f:3a:f8:
3c:64:56:e6:ac:5c:ef:57:5f:22:ee:81:d7:c9:c3:
c6:d6:f1:58:21:78:8c:72:58:b1:28:ff:a5:78:a2:
c9:b7:98:08:c2:04:f6:f5:e0:ad:c3:de:64:cc:a9:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:08:D8:C1:20:81:22:0D:94:AF:7F:05:AA:D4:F0:CF:35:39:00
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/9bQI2MEggSINlK9_BarU8M81OQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.198.0/24
Signature Algorithm: sha256WithRSAEncryption
71:97:e4:ec:09:0c:c3:ee:8a:75:dd:0e:b6:9e:55:6c:ac:d5:
f2:a7:4c:03:26:f3:4c:be:08:81:3c:96:04:41:84:dd:80:05:
e7:49:95:2c:1e:24:2c:a0:96:10:7c:0e:64:43:a0:0e:f6:78:
ac:15:36:cc:3b:69:da:4f:90:cf:5d:0e:f5:b5:41:16:ed:98:
fa:7a:06:a8:eb:b5:a7:82:f3:6a:5e:2b:09:72:5c:7f:77:d1:
df:1b:54:39:f5:a1:44:df:aa:eb:70:e4:82:fa:eb:bc:85:48:
bb:4c:9c:a8:19:a6:16:75:95:3f:08:e7:a8:1c:16:a8:b1:2a:
40:f1:fe:e6:f4:40:55:4a:d7:d2:0d:bf:b7:32:bb:1c:8c:13:
ad:d7:7d:7c:ea:b2:82:f1:56:73:95:e4:33:14:71:34:a1:1a:
22:4a:e4:c3:52:2f:38:86:85:ab:87:a7:5a:f9:c5:fd:b3:4f:
5c:35:e5:cc:5a:4f:c0:37:59:25:df:ef:8f:b7:92:fc:2d:2c:
27:d0:1a:60:0b:52:c7:10:28:2f:f9:af:11:6b:e9:fd:0a:ad:
c8:98:d7:52:15:02:1a:b4:65:a1:65:c9:a0:d2:68:3b:e2:58:
44:23:54:ec:48:f6:e7:33:6c:73:5c:b2:f6:14:38:9e:54:96:
6f:23:ad:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:57 2025 by rpki-client