Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qME_hjUa0cs_jfM4856N4cuYUUI.roa
File: qME_hjUa0cs_jfM4856N4cuYUUI.roa (raw, json)
Hash identifier: b5PLDbWnnk7pwXRuYPztXkjPXY1DOYCpS3xXiaCbk/Y=
Subject key identifier: A8:C1:3F:86:35:1A:D1:CB:3F:8D:F3:38:F3:9E:8D:E1:CB:98:51:42
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01858E6EC4173E4E826BA4DBE8D5F5B38AC7
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qME_hjUa0cs_jfM4856N4cuYUUI.roa
Signing time: Sat 07 Jan 2023 22:51:41 +0000
ROA not before: Sat 07 Jan 2023 22:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51714
IP address blocks: 85.117.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8e:6e:c4:17:3e:4e:82:6b:a4:db:e8:d5:f5:b3:8a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 7 22:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c13f86351ad1cb3f8df338f39e8de1cb985142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:e3:a8:df:17:77:7c:43:3c:7d:dd:65:01:
e2:e8:11:96:d1:18:d5:b1:40:e3:b2:6c:f4:ba:35:
62:86:5e:b9:b2:27:39:f4:fc:31:41:61:9e:2e:d3:
33:c7:a9:42:de:d4:1b:49:df:a8:09:f0:d6:1c:45:
84:20:62:f5:f6:33:ec:e6:01:fd:78:c9:ae:ad:df:
cf:fa:d5:20:3f:84:d0:e3:e3:e2:10:57:12:c6:9f:
09:bb:1a:9b:d5:b8:ef:90:4b:8b:c4:dd:0a:54:44:
27:5f:2d:6d:a1:b9:c6:45:ec:e4:2e:1d:d0:ff:f7:
1c:15:7a:5a:b9:ed:70:52:12:64:7a:56:6a:47:cf:
12:20:60:86:a4:eb:64:30:22:67:c7:83:9f:d7:1b:
a2:93:51:16:6f:6a:fd:31:0c:e3:c3:ea:74:a1:c9:
2c:3d:23:7f:d0:0a:1a:f0:ee:52:af:eb:4c:99:de:
6b:c9:f0:ec:65:de:1f:13:6d:05:94:0d:5f:39:c4:
5d:67:f8:02:42:60:3b:27:35:55:d2:68:cb:db:28:
2c:cb:f9:cb:82:70:48:1f:c5:fc:5a:a7:7d:bd:de:
7a:b4:3d:84:c1:5d:63:d9:13:c4:f9:e9:43:20:bb:
91:c9:28:3a:4a:29:86:de:af:40:00:d5:af:32:08:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:3F:86:35:1A:D1:CB:3F:8D:F3:38:F3:9E:8D:E1:CB:98:51:42
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qME_hjUa0cs_jfM4856N4cuYUUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.241.0/24
Signature Algorithm: sha256WithRSAEncryption
52:52:9b:90:65:e4:5c:72:e4:b5:7b:b1:60:9a:25:62:5b:54:
04:83:1a:1d:f4:f4:4a:d5:36:12:e0:50:02:76:69:b5:6d:f1:
d7:1a:ad:5b:43:d3:20:cb:ed:2e:be:be:da:90:f9:d7:8d:95:
0a:32:ed:e4:14:de:4a:c1:aa:09:3a:38:9c:2e:41:03:9a:78:
67:a8:4c:90:e9:b8:9b:cb:8c:39:ec:fe:e2:b0:3e:2d:f9:dc:
76:9a:b8:6a:3b:77:a5:76:9f:de:2d:67:be:b6:8e:f9:c1:a6:
ec:ac:e1:bc:0f:f9:9d:1c:be:90:a4:18:4d:95:52:32:84:52:
6e:e1:b7:f0:bd:33:3a:1f:bb:b3:be:27:e7:10:2b:52:38:3b:
2b:3a:b4:7e:07:92:e4:77:07:1e:e5:a4:44:b9:5f:6a:9d:c4:
ce:c1:4a:6c:f2:6a:dc:57:de:94:d9:33:3f:61:a7:f9:d5:01:
ad:3c:49:39:a0:2c:ce:e4:78:8f:94:62:5a:72:a2:d5:75:d4:
22:15:4c:ae:94:29:b5:b9:5b:95:c1:73:57:74:7b:9a:f6:21:
13:71:ca:89:e8:b8:fc:8f:9f:42:60:d9:c9:d4:2a:ba:fd:95:
b1:0c:f2:b4:f1:db:ef:e0:19:77:ec:f0:12:54:fd:2e:d7:e2:
48:6a:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:58 2025 by rpki-client