Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LKDbv82Su7v9Ia1cTO3xZ1u13Kw.roa
File: LKDbv82Su7v9Ia1cTO3xZ1u13Kw.roa (raw, json)
Hash identifier: kYvMvepAwhGWs43oDsP+SL5y9eBDMlnuTNf9DuUFFF4=
Subject key identifier: 2C:A0:DB:BF:CD:92:BB:BB:FD:21:AD:5C:4C:ED:F1:67:5B:B5:DC:AC
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019364608F79BC07230485B40C3F0D3EDA57
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LKDbv82Su7v9Ia1cTO3xZ1u13Kw.roa
Signing time: Mon 25 Nov 2024 17:31:10 +0000
ROA not before: Mon 25 Nov 2024 17:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214677
IP address blocks: 85.208.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:60:8f:79:bc:07:23:04:85:b4:0c:3f:0d:3e:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 25 17:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ca0dbbfcd92bbbbfd21ad5c4cedf1675bb5dcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:eb:11:56:3a:a1:2f:97:ba:b7:92:b9:59:
40:96:95:14:89:0c:54:c3:6c:f5:c3:68:51:5b:0a:
bb:37:14:e2:6e:37:97:8f:b2:23:6d:db:19:2c:92:
0b:4b:fa:97:fe:6f:a2:09:a5:57:05:c0:74:7c:17:
c8:11:59:23:69:5c:0c:33:ee:3f:64:e2:0a:4f:b5:
e7:d8:88:fa:1a:be:b5:6e:79:7a:6e:90:11:3c:e5:
e5:73:e8:b2:5c:c8:09:b0:92:06:9a:7d:1c:8b:37:
83:95:b5:3a:5c:6c:b6:08:03:76:90:8e:67:90:3b:
df:d3:5d:85:a8:c2:e5:6e:00:46:91:f2:df:c9:6a:
2e:6a:3e:24:a2:66:b2:e0:df:6c:00:13:a3:dc:e2:
c1:90:01:93:64:02:69:be:ce:02:ad:b4:e6:89:af:
5e:e5:e9:1c:93:1a:5a:eb:6e:7b:b9:ea:31:bf:aa:
03:1d:19:02:99:5a:1b:11:7d:34:81:41:eb:38:98:
a3:03:01:2b:0f:85:fe:a9:83:23:5f:84:e8:2a:1c:
b2:37:13:93:89:bb:dc:86:94:b7:13:26:b4:12:c7:
9e:26:f2:cb:fc:10:97:f1:db:27:7c:a9:bf:d7:67:
4b:b3:d2:10:17:d1:68:e8:3d:78:f0:99:4d:f2:79:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:DB:BF:CD:92:BB:BB:FD:21:AD:5C:4C:ED:F1:67:5B:B5:DC:AC
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LKDbv82Su7v9Ia1cTO3xZ1u13Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b2:09:d0:e8:ba:d6:c7:a2:57:9c:77:46:4e:12:f8:c4:91:
66:44:02:9c:38:f2:38:e5:5a:46:ab:2a:02:80:9c:ee:9e:b1:
9b:52:f8:d5:5e:6d:a9:8a:c3:aa:ee:4a:41:e8:82:f7:46:fa:
3b:c3:a1:a2:a3:50:f2:8a:60:60:9d:15:e0:38:fa:b6:d3:2a:
ef:bc:95:fb:a8:f6:0e:10:ad:dd:59:87:28:e4:dc:5c:04:f1:
d6:03:c8:07:e6:8a:a9:8a:7a:04:53:a8:c7:bb:50:0d:8b:a1:
6c:c6:40:74:64:16:10:10:8e:9d:84:54:e7:61:19:33:0d:4e:
ea:db:0d:e0:cf:a3:93:f6:c4:9e:61:e1:ad:87:6d:b9:35:08:
a9:64:21:f8:e5:83:af:3e:c3:cb:6d:c7:17:19:9f:80:5c:7b:
08:dd:ec:30:37:a3:c4:65:71:d9:1e:fb:44:4b:16:96:e5:10:
c0:6d:c0:71:34:35:38:e6:81:e9:74:ab:c7:68:21:96:58:d7:
d5:3c:5f:1b:7f:5a:fc:a9:07:d9:47:1b:1e:91:d4:0b:52:9c:
d1:85:4f:ba:b7:a9:2b:2a:f7:51:6a:14:51:d2:92:19:17:61:
ba:7a:68:eb:f5:c6:83:f6:b3:cb:39:54:a2:29:00:d5:a8:d6:
98:a4:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:15 2025 by rpki-client