Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa
File: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (raw, json)
Hash identifier: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=
Subject key identifier: F8:EA:40:AF:3F:9C:BE:BD:FF:C3:82:CC:C6:93:D9:CD:2C:42:B6:A2
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01941FFA2910D56DBCB1B9F5FD5CB188C3DC
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 85.209.164.0/24 maxlen: 24
85.209.165.0/24 maxlen: 24
85.209.166.0/24 maxlen: 24
85.209.167.0/24 maxlen: 24
91.208.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:29:10:d5:6d:bc:b1:b9:f5:fd:5c:b1:88:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8ea40af3f9cbebdffc382ccc693d9cd2c42b6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:0d:1b:cd:64:7e:36:3e:5a:ee:dd:43:2a:
4f:d2:54:0f:84:51:c3:73:7d:43:d0:8f:44:e4:82:
b0:e9:fb:b4:79:19:eb:d3:4b:28:ad:60:60:d4:e9:
dd:1a:8a:ad:a2:a6:f3:e5:db:32:a6:7a:24:85:ff:
9c:ef:44:da:2d:88:16:eb:6d:cf:1b:9b:e1:67:cc:
b8:8c:35:ef:5e:0d:b3:6c:5c:4c:1f:65:ee:85:78:
35:91:1b:1f:7f:ee:44:ef:15:36:ac:c9:10:cb:d0:
a2:38:c9:69:d5:63:e6:a4:5f:8b:f8:30:67:4e:b6:
1b:2d:85:ae:63:21:32:a3:17:f7:c9:5b:2f:26:1a:
15:b3:cf:53:92:06:65:96:f5:91:da:ec:76:77:40:
6b:45:8f:6f:72:56:f1:83:50:6b:66:9b:2d:e0:2f:
f9:46:77:0e:29:24:49:32:88:04:2a:be:73:0f:83:
35:8c:88:9b:92:c1:0a:e7:3b:bd:cd:45:d4:52:1f:
fc:28:58:df:00:8e:bf:5c:61:02:00:93:59:f8:e2:
5d:ff:84:45:62:5a:ce:9a:79:a4:e4:5a:6a:76:a4:
b0:72:95:0a:9a:1a:c7:c5:5e:49:96:56:48:00:97:
92:e1:b3:de:fe:8f:8c:fb:da:f3:5b:6c:83:1d:1b:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:40:AF:3F:9C:BE:BD:FF:C3:82:CC:C6:93:D9:CD:2C:42:B6:A2
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.164.0/22
91.208.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:55:39:1a:83:d9:75:84:d5:21:eb:59:87:3b:5e:f2:42:f2:
63:1b:d7:ce:9c:81:22:40:21:e6:bf:14:35:aa:7b:9b:5c:95:
1c:8d:ce:6f:57:e0:83:87:9b:d2:d4:ba:03:c3:a0:56:62:27:
27:d4:3d:6a:ff:fc:e2:7d:20:39:68:41:04:81:4d:b5:aa:ec:
bf:8c:50:a9:0f:4d:3c:b3:10:ab:68:0a:45:d7:0d:de:e2:ee:
1f:5f:54:eb:e3:e7:28:5c:c3:b2:88:58:42:30:77:ea:ab:92:
ee:b3:8e:21:e3:ef:07:66:dc:11:ee:cc:c3:a1:35:78:2c:4c:
a8:f8:45:63:cc:ef:89:04:da:20:76:c9:d7:55:63:2e:86:75:
2c:cf:f1:dd:79:31:a6:38:b7:c6:52:21:bb:30:62:07:6b:3e:
20:c4:d5:e7:d9:95:2e:f7:88:54:d1:e3:21:fe:89:48:e3:e8:
7d:16:1c:ac:c1:04:b8:cf:74:ad:72:69:f0:2d:f2:47:e4:78:
d1:da:3d:c1:b1:b9:8e:b2:91:f4:0c:f2:0b:bd:8e:c9:d7:0a:
be:02:cb:64:98:e1:3a:66:f0:1e:89:31:bf:88:35:8f:01:87:
b3:ca:93:5e:ae:8f:45:9f:4c:5b:6c:c7:4d:74:da:56:9d:9a:
c0:e0:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:51:38 2025 by rpki-client