Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/8Tr-AxiYhUp1H7IhRmfaZO9M8Ks.roa
File: 8Tr-AxiYhUp1H7IhRmfaZO9M8Ks.roa (raw, json)
Hash identifier: YN8dvWfWijL0qFvCmBbrzvswHqn5BEo8ZhAsyolCDcE=
Subject key identifier: F1:3A:FE:03:18:98:85:4A:75:1F:B2:21:46:67:DA:64:EF:4C:F0:AB
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04044DAD
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/8Tr-AxiYhUp1H7IhRmfaZO9M8Ks.roa
Signing time: Sat 01 Jan 2022 08:03:31 +0000
ROA not before: Sat 01 Jan 2022 08:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.228.0/22 maxlen: 24
2.59.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67390893 (0x4044dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 08:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f13afe031898854a751fb2214667da64ef4cf0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:e5:7c:50:cf:1a:68:4a:32:17:a7:17:70:
34:ef:e6:66:88:bf:93:be:9a:0f:b2:0e:7a:c4:2d:
eb:7b:a7:18:fd:25:36:bf:21:e1:2e:fe:ee:dd:14:
60:9a:c0:0d:04:08:6b:26:1c:19:82:08:96:77:25:
6a:93:98:3c:3c:8e:34:0c:8e:5c:b3:1a:18:03:1e:
ef:a4:c2:33:b0:c2:59:e8:ab:32:c3:79:ed:64:3a:
43:95:b7:5b:46:13:d6:e4:61:d4:a6:d0:6b:cc:63:
b6:54:da:05:5b:99:e0:11:4d:39:11:2e:9c:c8:97:
84:2b:9f:11:94:44:72:6a:63:e8:49:0d:ff:96:80:
7b:49:9c:39:66:06:5a:de:fd:54:fb:77:74:6d:5e:
71:14:ab:4f:0e:73:5e:ed:1b:ee:cb:30:ac:ee:92:
9e:87:ad:e4:1f:70:99:df:0c:52:74:26:0e:55:cb:
fb:08:48:c8:00:92:a3:36:ec:06:54:2b:94:98:27:
de:e6:b7:61:d2:7c:66:60:da:86:c1:18:cc:e4:db:
eb:14:df:4b:c6:fa:79:7a:51:de:fd:23:ee:ab:6c:
03:4b:70:4c:7f:7f:0e:03:57:66:1f:f9:03:c1:f2:
67:22:7c:af:d3:86:be:7c:fb:57:02:66:95:46:ff:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:FE:03:18:98:85:4A:75:1F:B2:21:46:67:DA:64:EF:4C:F0:AB
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/8Tr-AxiYhUp1H7IhRmfaZO9M8Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/22
85.209.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:be:59:26:6e:a8:30:e0:64:d3:1c:9c:f1:55:50:4c:ab:64:
76:5f:bc:49:83:27:e6:42:36:5d:18:1f:b3:8f:58:48:d1:1e:
be:9c:76:9a:cd:9c:10:77:92:f9:09:20:5b:eb:52:32:b9:06:
17:79:e3:78:8c:ec:66:43:33:f1:4e:a9:4a:09:2b:16:d9:4b:
9d:db:9f:73:9c:32:bb:a9:5e:1c:d9:b3:56:9e:d2:bc:8f:af:
61:32:bb:6c:4b:ce:a5:b0:64:cd:ee:8f:e7:5b:7c:2f:30:27:
34:48:4a:01:c1:16:35:e8:16:ca:76:71:76:f0:9a:03:bf:37:
60:ff:02:e5:f8:ad:f2:81:ce:1c:ad:d0:6e:7a:97:fb:12:c4:
68:74:e3:65:a9:43:76:b5:34:20:fd:bb:45:42:5c:b7:c5:84:
e1:9b:bb:fb:b6:32:dc:fe:51:b8:cd:61:77:f0:37:3e:c8:42:
4a:3b:07:0e:c5:51:cd:a0:05:e8:3f:ca:f2:72:39:73:3f:14:
8f:ef:e7:f7:77:fa:4c:0d:02:41:d4:67:66:06:aa:2f:2e:17:
4f:49:c3:5a:02:ca:24:56:33:a9:5e:24:a7:b1:65:a3:89:01:
3d:a3:01:16:cb:05:a2:16:82:bc:37:40:54:91:1f:29:f8:83:
f6:df:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:30 2025 by rpki-client