Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/htjMLskaVCdjF7OT6QsFYzjDi9Q.roa
File: htjMLskaVCdjF7OT6QsFYzjDi9Q.roa (raw, json)
Hash identifier: iAgoqllHecw4/hVoKwzjhvc89BydjoWwnqbgcOOHqSY=
Subject key identifier: 86:D8:CC:2E:C9:1A:54:27:63:17:B3:93:E9:0B:05:63:38:C3:8B:D4
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01853AACB5A9B6C4F04E3288F5D7871124C3
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/htjMLskaVCdjF7OT6QsFYzjDi9Q.roa
Signing time: Thu 22 Dec 2022 16:31:15 +0000
ROA not before: Thu 22 Dec 2022 16:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 85.209.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3a:ac:b5:a9:b6:c4:f0:4e:32:88:f5:d7:87:11:24:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Dec 22 16:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86d8cc2ec91a54276317b393e90b056338c38bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:4c:a8:ff:cf:32:c5:85:5f:56:65:79:bb:
f3:09:9f:d3:d6:0c:88:e9:a8:05:c7:ae:55:c5:d5:
69:22:e0:a4:5e:97:21:ba:89:1e:af:ba:e6:02:5c:
f5:ed:8d:db:45:e6:16:28:c1:ac:d0:f0:33:7e:9e:
bd:bf:57:3b:12:46:da:cf:a4:30:8f:d6:c0:84:5b:
0c:5c:71:0b:35:13:b3:58:c4:0f:21:9d:d8:80:d0:
00:40:bb:0a:29:a4:f5:a2:b4:6a:a0:fa:7a:cf:bf:
71:f9:0e:df:ed:80:c1:87:4f:2e:7c:90:f1:f5:89:
2f:08:49:5f:2c:bf:e0:c6:e7:12:0e:41:e3:b2:ae:
12:eb:64:93:82:69:dd:e0:a5:e9:c6:cd:1f:54:82:
81:bd:7d:05:35:c5:cc:c2:da:29:4a:00:dd:b6:1d:
29:29:84:dd:cd:9c:50:3f:f9:6c:cd:c4:cf:d1:78:
3e:f1:c9:58:bd:1b:f4:46:e1:ea:b5:a8:57:db:2c:
74:1d:e5:ba:8a:0d:38:b5:48:f8:0f:69:65:15:01:
73:fc:f2:f4:72:0b:9d:a8:15:f1:a6:9d:b1:24:c1:
25:cc:6d:d3:e5:28:f8:20:b1:63:6a:45:7f:73:dd:
89:d5:6b:44:8b:ae:be:93:a5:40:cf:07:75:03:dc:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:CC:2E:C9:1A:54:27:63:17:B3:93:E9:0B:05:63:38:C3:8B:D4
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/htjMLskaVCdjF7OT6QsFYzjDi9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f0:ce:f1:85:d6:35:21:81:d9:af:68:c6:74:c9:0e:03:c8:
ae:2f:05:c2:de:48:25:90:c9:cb:30:9e:8a:dd:36:6b:0e:ca:
c1:6d:54:1f:e7:36:f8:24:6d:40:8c:52:61:90:e6:a0:00:36:
99:9e:cf:be:77:2e:a1:a5:48:b6:66:7c:bd:50:63:47:25:43:
ba:f1:fd:a6:5c:cd:bc:6c:1c:4b:cb:7d:5d:0a:6c:80:de:fd:
7b:25:a9:00:d0:02:54:74:7f:87:9f:c5:ff:56:a5:ce:dc:07:
fd:94:3d:c3:ba:b8:82:33:16:df:07:f4:be:06:7e:67:df:7c:
93:28:60:09:95:63:8d:c9:b9:8c:88:19:1a:ac:a6:9b:fb:56:
fc:44:60:e6:b8:0c:55:4a:a3:92:f0:94:b0:be:9e:a0:80:70:
61:4e:3b:0d:bc:39:71:bc:55:a1:07:be:fc:c9:d9:7f:7e:96:
a9:37:e3:68:04:ac:6a:42:90:07:53:b2:09:4e:12:b7:00:c9:
43:d2:e0:ed:19:93:3e:0b:bc:da:e6:cc:6f:73:82:22:32:ca:
68:a6:9f:12:e3:e9:e2:1a:df:95:e7:bd:e0:0e:91:2b:bb:43:
de:f6:ed:a4:88:a6:83:24:da:37:47:d7:dc:d7:c5:63:a2:57:
ab:4e:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:47 2025 by rpki-client