Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Ksv-Iw2ShTnnBXIWzNQqUfxijJ0.roa
File: Ksv-Iw2ShTnnBXIWzNQqUfxijJ0.roa (raw, json)
Hash identifier: j+hVVlBM8QWnTUNTQpJd9nhO5CtIsa47ixaqYJ++Oxo=
Subject key identifier: 2A:CB:FE:23:0D:92:85:39:E7:05:72:16:CC:D4:2A:51:FC:62:8C:9D
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04397C86
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Ksv-Iw2ShTnnBXIWzNQqUfxijJ0.roa
Signing time: Wed 19 Jan 2022 21:48:02 +0000
ROA not before: Wed 19 Jan 2022 21:48:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 85.209.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70876294 (0x4397c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 19 21:48:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2acbfe230d928539e7057216ccd42a51fc628c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:09:94:8a:88:a8:b8:37:1f:14:24:d7:0b:
34:bc:cd:26:86:b5:65:37:8a:6d:e5:d3:0c:7a:cb:
b0:0b:0d:76:50:a5:f5:45:12:33:1f:48:af:6e:59:
a7:07:d7:d1:95:a9:cd:f4:7e:05:92:8c:75:a4:a9:
51:32:34:63:f7:30:46:e2:9a:00:ab:60:d3:45:4c:
f8:5e:4b:6a:2e:0f:25:6b:62:c9:2f:44:ca:80:3a:
f3:16:09:91:47:3e:0b:75:fc:6c:6f:9f:7b:37:c8:
75:bd:b5:38:1d:f2:ab:50:29:12:3a:d1:5f:a5:87:
e2:8e:a3:8c:5e:a8:1a:5b:6e:de:51:cd:fc:49:1d:
53:fb:32:5e:31:af:61:63:9a:26:ba:a7:bf:49:0a:
7d:ba:71:a8:80:30:6d:ca:ef:91:a1:ac:5e:4f:c6:
2d:b0:c0:47:15:10:a6:d0:05:3a:c5:94:76:ed:a6:
8c:8c:f1:15:89:2b:c4:b5:74:35:94:1d:8e:4a:8a:
1e:f3:f4:09:cc:1f:07:1e:42:a5:c8:6f:7c:ec:a1:
45:72:9b:61:82:51:8c:a9:01:41:1d:19:28:f8:eb:
d2:3a:c0:77:1e:28:54:2f:a2:a1:68:21:e5:7f:84:
a0:86:94:e5:f0:53:6c:a2:2a:a8:44:f6:6a:67:4e:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:FE:23:0D:92:85:39:E7:05:72:16:CC:D4:2A:51:FC:62:8C:9D
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Ksv-Iw2ShTnnBXIWzNQqUfxijJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cc:62:96:ea:b0:d5:8f:97:e3:54:06:a3:82:c3:ac:05:f5:
eb:5e:c3:4f:a6:86:81:e9:05:3b:b7:5f:a6:ff:67:23:6f:05:
20:ea:f0:b9:ac:b2:cd:7d:66:8e:38:21:af:6e:fd:0b:ae:44:
a5:25:82:8a:7a:a7:8b:82:9f:a6:16:14:79:23:cb:4b:f5:bd:
0d:59:b0:a5:26:18:0f:64:20:3f:9c:1d:18:9c:34:64:55:91:
8e:a0:02:8d:92:b0:62:9c:9e:0d:9f:c0:5b:12:37:3d:2d:a4:
1a:f7:88:bc:48:d0:72:9a:0e:1e:fa:ff:2e:f5:d2:5a:d6:31:
fa:a9:7d:82:53:35:54:da:32:d8:5b:20:88:6e:9d:ae:70:23:
c2:43:af:62:65:d7:02:e2:d2:64:14:16:c3:5b:2e:97:75:17:
55:10:6c:2a:a4:74:ae:f8:3c:21:37:05:e0:ae:96:0b:e9:f9:
38:b7:15:19:4b:b3:f0:29:50:73:55:b1:a5:65:ce:70:de:b4:
c6:ad:5a:e8:1d:64:0b:50:11:fc:3e:67:b5:85:4a:a6:69:59:
e7:24:29:c6:d6:3a:06:fc:be:ba:93:29:0f:15:fa:87:e8:3d:
a8:46:bf:d1:32:fb:a7:65:05:46:d9:ea:cf:b8:a6:ad:9a:a6:
3d:e7:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:40 2025 by rpki-client