Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/dG8M04_OLzVFeNSbBUFpywOgmmM.roa
File: dG8M04_OLzVFeNSbBUFpywOgmmM.roa (raw, json)
Hash identifier: o63pCmh1ocg2r5zYGqtJQ+ybvBGlmodnfMI9GLBERT4=
Subject key identifier: 74:6F:0C:D3:8F:CE:2F:35:45:78:D4:9B:05:41:69:CB:03:A0:9A:63
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0183D251D77C56A29B84D9AD2FC66B13EC20
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/dG8M04_OLzVFeNSbBUFpywOgmmM.roa
Signing time: Thu 13 Oct 2022 17:08:42 +0000
ROA not before: Thu 13 Oct 2022 17:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.230.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:51:d7:7c:56:a2:9b:84:d9:ad:2f:c6:6b:13:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Oct 13 17:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=746f0cd38fce2f354578d49b054169cb03a09a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:47:42:04:4c:70:1e:28:c7:79:84:ec:d3:
64:8c:28:fe:8f:19:4f:f8:59:db:87:cd:da:39:00:
46:d6:e6:36:07:46:04:93:21:f4:73:2e:ad:d0:73:
41:10:ea:e5:d9:08:8d:0c:1b:5e:da:79:3b:e3:bc:
c4:d2:18:1c:b6:78:f3:72:1b:c5:7c:c5:8b:33:66:
e7:08:6d:e6:38:76:31:b9:b5:4f:a3:b1:07:f0:46:
5e:e1:9c:97:b6:9c:fd:87:3f:26:c6:2b:eb:a0:ee:
bc:ff:e2:5e:9a:9b:67:0d:81:7a:31:d1:5b:cf:5f:
21:6b:85:39:29:0a:76:22:d5:36:73:30:5c:94:3c:
79:3a:0f:bf:be:fe:99:d2:c6:8b:9f:ce:8f:7c:84:
fd:6f:b9:ce:9b:53:d0:08:95:97:ff:23:e4:49:44:
ec:f5:e5:d2:1e:3f:63:1e:cd:81:fc:93:37:82:ee:
78:71:77:ef:a1:00:c4:24:f0:e1:d2:f6:6a:f1:74:
3d:67:c9:d0:b0:25:14:d1:85:35:2d:da:28:83:ef:
71:96:ab:ce:17:4e:46:b1:d0:6a:79:fc:cb:e8:3d:
a2:09:45:04:b7:d5:09:55:1a:f5:20:37:4f:2b:8a:
d5:a1:13:dc:66:d9:6c:83:a4:69:8a:a7:7c:d4:72:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:0C:D3:8F:CE:2F:35:45:78:D4:9B:05:41:69:CB:03:A0:9A:63
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/dG8M04_OLzVFeNSbBUFpywOgmmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
85.209.230.0/24
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e9:15:3c:57:cf:02:f6:f6:19:07:6e:74:dc:ac:f5:77:e3:
48:50:b4:8a:44:8e:3b:cb:ee:e2:c7:60:30:99:f9:e6:43:29:
84:b3:95:6c:05:61:b2:8c:86:48:f8:86:89:bd:01:04:ed:3e:
20:ac:be:f3:78:a4:d2:8d:e2:14:1a:4c:76:46:2f:fc:c9:6c:
1a:90:a8:86:cd:03:81:4e:a4:a6:ac:03:d3:2c:5d:48:f3:51:
64:ae:f8:14:51:0e:7b:e3:61:a7:1a:49:cb:3e:16:ad:07:6d:
f8:d8:71:3f:c7:51:27:b9:d1:14:12:b5:74:68:e2:1b:c0:38:
f3:4b:52:42:93:47:4c:71:4f:73:77:13:b6:b0:b1:2a:38:cb:
cf:2d:c8:3b:9c:22:3e:0a:31:08:a9:a6:c0:15:36:ef:de:a5:
5b:5a:85:b4:95:f2:7a:d7:ed:4e:a0:3f:38:d9:4d:ed:81:76:
00:ea:f5:cb:ef:56:45:b3:26:5e:6e:ea:d1:57:67:b1:41:9d:
de:64:c4:43:96:c3:62:11:0e:03:c9:1b:a8:ae:bc:3d:ed:dc:
61:69:2c:3f:f4:32:98:40:9a:8c:e9:5e:8e:fb:08:21:da:24:
d7:ac:96:e2:e9:a2:f5:60:01:50:e3:c7:b3:1c:98:2e:cb:ab:
2a:15:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:45 2025 by rpki-client