Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/uss8JJJxPnB8e1c0GGUMoCmM6jM.roa
File: uss8JJJxPnB8e1c0GGUMoCmM6jM.roa (raw, json)
Hash identifier: i1viUFwT2/NByBbifbUictS/b/ELXf2lVlsTSRg50bc=
Subject key identifier: BA:CB:3C:24:92:71:3E:70:7C:7B:57:34:18:65:0C:A0:29:8C:EA:33
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0181CF09B43C6AEA0365CA98804B98882A0F
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/uss8JJJxPnB8e1c0GGUMoCmM6jM.roa
Signing time: Tue 05 Jul 2022 15:45:28 +0000
ROA not before: Tue 05 Jul 2022 15:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 85.209.229.0/24 maxlen: 24
45.95.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:09:b4:3c:6a:ea:03:65:ca:98:80:4b:98:88:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jul 5 15:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bacb3c2492713e707c7b573418650ca0298cea33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:e8:0b:d1:28:cc:46:bd:18:42:61:97:e5:
ee:73:d9:18:38:a6:63:0d:32:3c:43:ca:33:38:a9:
7f:b7:91:38:b7:26:1b:ce:d1:25:f5:3b:15:2a:65:
1b:70:ae:37:ff:32:ad:0d:df:7f:12:e1:ed:08:4c:
47:25:b7:cf:34:67:e8:3c:10:82:17:b1:b1:3f:d0:
d8:5d:4a:de:a3:51:3a:ad:f4:52:1e:0e:a5:1c:45:
49:55:64:01:fc:3d:8f:03:92:54:61:2a:cc:33:a1:
57:46:76:ad:87:ea:34:ce:72:3a:58:a8:13:3f:48:
a3:4c:12:3a:26:e1:ed:76:8c:93:d3:56:52:21:8b:
ae:05:23:ae:c4:08:ec:2d:a9:10:1b:85:1a:6a:b2:
bf:84:91:dc:e7:62:50:ab:0e:f7:59:c2:6b:0f:48:
7a:bc:37:b6:a6:cb:5a:9c:8e:ee:25:73:81:aa:dc:
c3:7b:a1:e2:25:d7:9e:10:04:5c:d1:09:36:1d:61:
c1:68:22:c6:a2:75:f1:87:16:1d:64:40:af:e8:bc:
4d:d4:8e:34:da:0b:bb:da:a9:41:5d:72:dc:1b:65:
8a:66:5e:03:86:2d:8b:9a:c6:b0:cb:f1:1c:74:d6:
2e:e1:99:e9:c7:eb:f6:f3:5b:96:19:23:84:cb:45:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:3C:24:92:71:3E:70:7C:7B:57:34:18:65:0C:A0:29:8C:EA:33
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/uss8JJJxPnB8e1c0GGUMoCmM6jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.213.0/24
85.209.229.0/24
Signature Algorithm: sha256WithRSAEncryption
98:43:67:69:aa:47:22:7f:04:af:ab:a3:d6:53:b3:f0:1b:38:
d1:bf:50:e0:c0:49:a8:ce:af:56:04:40:dd:2d:6a:76:16:fc:
4f:ca:50:78:ab:5a:41:4a:73:a3:2f:a6:21:9b:8c:9b:67:ee:
f9:9d:44:52:d0:3c:39:9c:a6:89:6d:df:6e:c0:62:51:74:e3:
7c:f3:65:9e:c5:65:25:66:07:ff:97:da:63:cd:8e:b0:1e:4f:
e2:bd:22:f0:c2:1f:d8:38:a3:04:5b:95:65:8c:78:55:ab:c8:
74:88:df:02:90:85:7c:07:82:62:06:cf:f3:cd:df:6e:f2:02:
e3:99:5e:9d:26:7c:f2:53:3e:e6:13:7f:28:71:a5:7d:ca:09:
47:bc:40:59:e4:5a:5e:2c:04:27:13:9b:05:ff:cc:34:f5:93:
3b:7f:91:86:d5:73:b9:e0:7f:bc:68:e5:bc:89:df:f8:b1:b8:
a0:4f:6c:ea:de:4d:49:60:d3:27:1e:24:b0:7d:66:94:67:82:
b8:43:8b:07:2b:ca:b8:4f:2f:33:9c:cd:70:ac:15:73:44:8b:
83:cb:8f:92:45:9d:22:7d:ba:a2:81:10:7b:3b:58:11:c2:27:
4e:02:5d:dd:87:1d:ce:05:9e:ad:28:63:3a:a0:6f:01:b9:d3:
4e:ad:3e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:43 2025 by rpki-client