Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6Ie-F8GAJFeItNDUM-05NAxlfHE.roa
File: 6Ie-F8GAJFeItNDUM-05NAxlfHE.roa (raw, json)
Hash identifier: RfbOnxicJldRjRTDsUWDYOzsrp0UupIwOByQAXjNCzE=
Subject key identifier: E8:87:BE:17:C1:80:24:57:88:B4:D0:D4:33:ED:39:34:0C:65:7C:71
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 044C2E0E
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6Ie-F8GAJFeItNDUM-05NAxlfHE.roa
Signing time: Thu 27 Jan 2022 11:05:51 +0000
ROA not before: Thu 27 Jan 2022 11:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 85.209.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72101390 (0x44c2e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 27 11:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e887be17c180245788b4d0d433ed39340c657c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:b8:d1:2d:86:83:70:c5:b2:5d:56:2f:b5:
b2:95:ea:49:df:23:e3:81:ae:c6:a5:69:4c:25:07:
a6:a0:91:28:5b:cf:b6:fb:dc:0f:d1:5b:68:a9:4b:
cd:fb:72:00:03:ea:29:1f:9d:06:b6:06:46:53:d4:
de:13:cd:35:8d:dc:dd:f8:85:44:98:8f:ca:d2:4f:
1b:77:74:07:92:7c:a5:b9:b9:eb:c8:91:ac:84:54:
ac:42:3c:f4:b1:3d:ed:84:7a:fb:71:81:e8:1d:d5:
31:d2:e0:d9:36:55:dc:d8:f3:d0:a7:c9:4f:cc:12:
fc:e8:ae:cf:56:6f:4b:8e:a3:ae:e1:5b:1e:66:4e:
45:a1:d2:75:2b:9e:4f:d9:4c:35:8e:a1:ae:16:cb:
1b:8e:2b:d5:ed:0f:aa:08:a8:be:0a:5f:55:ee:0f:
a6:c4:20:2d:06:85:c3:f9:b8:3e:a7:47:a8:9d:10:
27:f8:a9:44:c0:af:b3:7e:88:16:bd:71:5f:3a:ed:
ac:9b:b9:aa:f7:b1:02:86:36:f7:fa:0b:6f:32:7b:
53:e1:fb:d2:f4:7c:2b:ea:74:b3:2d:46:5e:9d:ee:
8a:8b:22:92:97:4e:ad:8c:a9:16:7f:82:5d:4f:25:
17:f9:a8:f4:9f:6e:99:fd:e8:bd:3d:a8:77:aa:95:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:BE:17:C1:80:24:57:88:B4:D0:D4:33:ED:39:34:0C:65:7C:71
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6Ie-F8GAJFeItNDUM-05NAxlfHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
27:36:aa:da:3a:8e:40:29:25:fe:21:f5:6a:02:e1:a7:12:45:
89:5d:4e:d2:48:4f:3b:96:7c:a3:08:9c:29:ec:7a:b9:17:c8:
4a:c8:3c:25:af:56:c9:63:23:11:48:2f:c6:36:d2:c4:19:c0:
a0:cc:5f:e4:87:20:55:30:ed:06:69:1d:5b:c5:a6:60:38:19:
ef:6c:b1:70:59:87:e3:8f:0d:c0:5a:94:fe:cd:19:44:84:fa:
26:ca:f5:14:a3:d4:64:8f:fb:fd:b3:d2:3a:26:33:bd:48:7e:
3d:d3:8f:fd:3e:86:6c:08:8a:d1:95:5b:5f:35:68:de:d0:b2:
d7:d7:69:d1:43:14:20:0d:e9:f9:02:05:42:48:4e:f4:24:f9:
d8:63:c6:bd:59:1e:02:4f:79:fa:bf:fd:7f:45:08:ac:ad:f7:
d1:2f:13:39:ba:f1:6c:a1:ac:af:34:53:e1:a2:8d:cd:b4:66:
4a:cd:af:ca:e3:c4:dd:c3:3b:38:8c:aa:63:3f:89:45:a1:71:
ac:1a:dc:c7:7e:15:df:e1:ad:dc:0f:9b:bd:08:25:65:4c:85:
0a:e3:9e:aa:7f:19:f7:3c:44:fc:bc:bf:9d:d9:c0:06:cb:33:
eb:36:58:a9:91:5a:53:e5:9f:ab:7b:76:90:01:20:a8:53:88:
f9:14:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:01 2025 by rpki-client