Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa
File: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (raw, json)
Hash identifier: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=
Subject key identifier: E6:BD:06:AD:85:68:03:2B:0A:24:3B:87:0C:F4:E3:FB:53:15:58:24
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01942521440F58D8B1E3021ABEAC82007F1A
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60078
IP address blocks: 85.204.248.0/24 maxlen: 24
85.204.249.0/24 maxlen: 24
2a10:52c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:44:0f:58:d8:b1:e3:02:1a:be:ac:82:00:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6bd06ad8568032b0a243b870cf4e3fb53155824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:8f:dc:7e:ce:46:b7:d5:4d:b1:fd:77:b7:
23:7d:1f:2d:75:08:77:44:e2:4d:ea:d6:78:a1:1e:
63:ae:c9:8d:36:3f:cd:ca:f3:0d:86:13:df:ed:46:
8d:93:b6:49:79:ee:c5:34:e3:4a:5d:e1:d9:8f:ac:
e7:c7:0d:74:4c:28:56:1f:79:44:66:90:35:18:96:
12:61:a4:73:87:34:6d:96:c7:03:c6:9b:4c:0d:7c:
6b:9c:77:49:6d:ab:77:82:5d:97:4d:1c:6d:7b:d3:
97:7e:4d:a0:8f:48:6c:1a:5f:a6:66:41:f7:90:f3:
76:82:98:89:b6:9c:42:8c:43:07:30:ac:2e:49:b1:
1d:48:3c:4a:5e:a6:79:fd:4e:70:cb:2c:38:5c:2c:
3d:19:fc:ae:80:dd:2d:64:75:6e:3b:11:1f:6e:6b:
3f:93:93:a1:52:28:13:0f:04:36:60:38:4b:c4:72:
37:bf:0d:44:77:14:46:6e:81:d1:48:f7:d1:5f:af:
5f:0d:f4:ed:8c:ae:a8:f9:1e:58:57:d7:38:43:9e:
e3:b3:c2:34:93:ce:2b:c7:bb:fe:1e:43:b9:a9:db:
a3:fd:c5:d6:43:60:84:ba:8d:92:c5:13:a1:9a:8d:
6c:95:16:19:0d:d1:df:56:81:84:16:b0:e2:81:6a:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:06:AD:85:68:03:2B:0A:24:3B:87:0C:F4:E3:FB:53:15:58:24
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.248.0/23
IPv6:
2a10:52c0::/48
Signature Algorithm: sha256WithRSAEncryption
93:10:a7:ed:9c:72:2b:1a:89:67:3f:01:a6:2d:a9:9e:38:47:
5f:21:54:66:9a:ad:89:74:a8:d1:2b:19:28:5d:d1:84:b7:2f:
78:82:59:f5:35:40:89:28:ac:44:2b:50:94:c8:28:4e:25:07:
78:e4:1a:79:66:a3:88:30:d3:97:e1:6e:9f:ab:35:a8:cc:ae:
8d:34:ec:b4:5d:66:84:7b:ae:dc:3c:bd:5d:b9:df:21:08:16:
5e:77:1b:3f:b3:81:30:b1:b5:25:fa:9c:e6:62:e3:68:dd:58:
49:a0:e5:72:00:fb:a8:54:40:4d:2a:dd:93:dd:ab:7b:ce:49:
89:cb:cd:4b:d0:05:17:90:c4:59:e7:db:18:fb:5e:d9:3d:62:
97:f0:8a:9b:bc:f5:3e:d2:d3:38:c5:ef:64:d4:0d:cb:8a:e5:
92:08:0c:22:4b:86:b1:da:f0:61:3a:5a:9b:9b:ea:6c:ed:da:
21:60:95:6a:ee:d8:e3:f8:5a:8a:36:16:4a:39:1f:54:9e:a0:
df:45:ba:d5:8a:e0:11:36:b1:3b:ea:4f:59:8b:5c:c5:03:9d:
b1:44:6e:58:21:36:76:7c:b3:7a:6e:f1:50:71:77:7c:35:ad:
2c:21:99:62:31:4e:6c:ce:dc:3e:d5:2e:fc:a9:15:3c:a3:3b:
28:08:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:06 2025 by rpki-client