Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/pJ_TDSEzHJNqj6NbQ4CfcmZECYo.roa
File: pJ_TDSEzHJNqj6NbQ4CfcmZECYo.roa (raw, json)
Hash identifier: VeIjZ26RZPFdn5b4CZvzsad6Yu3KTiKHNm6NJbl2acI=
Subject key identifier: A4:9F:D3:0D:21:33:1C:93:6A:8F:A3:5B:43:80:9F:72:66:44:09:8A
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 01856C53CB3E2B55AA757AA40B14BE901AD6
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/pJ_TDSEzHJNqj6NbQ4CfcmZECYo.roa
Signing time: Sun 01 Jan 2023 07:55:08 +0000
ROA not before: Sun 01 Jan 2023 07:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20722
IP address blocks: 85.204.44.0/22 maxlen: 22
85.204.44.0/24 maxlen: 24
194.102.188.0/24 maxlen: 24
185.88.130.0/23 maxlen: 23
185.88.131.0/24 maxlen: 24
85.204.56.0/21 maxlen: 21
85.204.56.0/24 maxlen: 24
85.204.57.0/24 maxlen: 24
85.204.58.0/24 maxlen: 24
85.204.59.0/24 maxlen: 24
85.204.60.0/24 maxlen: 24
85.204.61.0/24 maxlen: 24
85.204.62.0/24 maxlen: 24
85.204.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cb:3e:2b:55:aa:75:7a:a4:0b:14:be:90:1a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 1 07:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a49fd30d21331c936a8fa35b43809f726644098a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:bf:86:ab:b7:bd:c2:da:b9:42:85:6b:e2:
7b:30:71:38:1f:20:97:04:87:f8:39:91:11:2d:80:
ce:10:b9:8d:b0:d6:7c:39:8e:10:26:a7:cf:06:98:
b3:c5:d2:90:b7:10:8a:52:0e:b7:2a:8a:8d:82:e5:
94:1d:aa:2d:91:ab:f4:79:be:fa:e6:09:31:b7:f2:
63:96:3a:5c:39:76:24:d0:b0:c2:f3:14:a3:9e:45:
93:bc:4d:e7:c0:78:2c:66:c8:cf:79:23:04:73:a1:
d5:3a:fa:b6:a0:ab:bf:8a:6b:ea:a0:c1:42:be:df:
4a:a7:08:40:8e:70:44:76:d1:49:cf:1b:f4:88:ae:
f7:00:1a:02:b6:82:77:50:b6:86:2c:d2:e8:c1:3e:
83:56:c1:5a:94:da:23:4b:08:d4:28:72:dc:71:ed:
3b:8c:bd:82:8f:f2:81:7f:9c:3c:fc:46:36:34:74:
85:2f:4c:6f:e9:3d:52:77:2e:e2:e9:3d:b3:04:5b:
e1:79:f8:6d:c8:1e:3f:05:a0:a4:38:0f:6b:91:be:
bc:04:82:0f:0c:b8:ff:6e:a2:02:d9:fc:3f:48:64:
39:41:61:6d:cd:4b:a6:eb:14:e8:8a:c6:38:7f:36:
20:3d:03:70:3a:cb:25:88:65:de:06:5e:e6:d7:34:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9F:D3:0D:21:33:1C:93:6A:8F:A3:5B:43:80:9F:72:66:44:09:8A
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/pJ_TDSEzHJNqj6NbQ4CfcmZECYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.44.0/22
85.204.56.0/21
185.88.130.0/23
194.102.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:06:02:df:53:96:fb:91:9a:04:96:ae:11:31:30:fb:a7:7b:
ab:84:cb:cd:04:a9:52:91:89:e6:18:c0:b0:0d:64:4a:7e:3a:
88:a6:91:35:ad:4e:2f:c8:cb:be:35:06:58:92:9d:cd:0c:04:
aa:66:b5:3c:ee:2b:97:14:88:4e:2d:1b:77:e2:9f:c4:67:c8:
ec:a9:30:1d:80:a4:ba:a5:e2:f9:98:e0:8e:5d:ad:54:66:5d:
4c:a7:2e:b9:dd:2d:4b:42:b0:2d:61:a4:d9:6c:bd:7d:10:b5:
b2:0b:e2:20:d0:51:91:96:1f:f4:17:e3:d0:f0:66:ca:48:d2:
97:64:7a:c5:3f:a6:64:35:69:f0:9c:a0:0a:1d:cc:35:c9:a1:
cc:ec:22:35:86:9b:a1:4f:15:17:e3:f5:a7:c9:6e:eb:cc:c3:
2a:8c:ea:4e:47:68:9f:e6:5d:7b:e0:86:ee:bc:54:81:54:6e:
fa:1c:30:0a:e0:ef:22:d7:f9:2c:4f:56:b6:5c:ac:20:50:7e:
3f:29:48:43:4e:fc:bd:5b:23:8b:44:9c:27:da:5e:e1:14:7e:
55:10:60:bf:58:fb:3e:f0:e5:19:a8:51:a9:4f:bc:1e:47:c4:
cf:47:be:f4:c9:62:84:79:55:08:43:d0:4f:61:b3:b6:02:fb:
82:f6:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:17 2025 by rpki-client