Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dWixx8-qp9vADNW4S8WHXgXXhJU.roa
File: dWixx8-qp9vADNW4S8WHXgXXhJU.roa (raw, json)
Hash identifier: eG/WEK+sUrCloYszXhP4VinWEKLXrHuNKqom8aqKdB8=
Subject key identifier: 75:68:B1:C7:CF:AA:A7:DB:C0:0C:D5:B8:4B:C5:87:5E:05:D7:84:95
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422201EF9D1B38A9CF2FFA8A59E8A047C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dWixx8-qp9vADNW4S8WHXgXXhJU.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214677
IP address blocks: 85.208.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1e:f9:d1:b3:8a:9c:f2:ff:a8:a5:9e:8a:04:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7568b1c7cfaaa7dbc00cd5b84bc5875e05d78495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:7e:9b:e4:b3:bc:71:46:e8:9f:b7:49:3a:
5f:57:4f:4a:ce:a6:be:68:ff:cd:2f:5c:4c:9f:9b:
4f:d7:a6:d6:5e:49:b2:77:a0:2f:05:19:7e:19:2c:
e5:9b:ad:f1:35:24:d8:51:22:da:95:a4:11:64:e9:
2d:b8:11:1b:2c:93:ca:0c:fc:07:d7:d7:b9:2a:c6:
99:13:6f:a7:fd:11:5a:04:60:d9:b8:f2:06:99:ab:
9f:49:0f:63:75:82:2c:c3:32:04:71:14:b5:f7:3b:
4b:1f:6b:61:a1:df:b9:e5:2c:2b:e9:0a:47:97:66:
8d:82:27:2f:5d:69:55:4e:0a:d8:e5:65:63:a0:b4:
e2:a1:ed:30:ba:c6:df:cd:ac:ca:49:e8:e2:7d:17:
48:b1:48:72:dd:e6:79:36:a5:2f:7e:5e:6f:49:5f:
dd:47:5c:50:cd:ab:ab:a3:9b:75:48:18:54:2f:50:
2a:11:94:f9:9f:2d:ca:13:a1:75:7d:dd:36:04:e7:
e6:4d:97:5f:20:d8:8b:a3:43:a9:b7:dd:db:96:33:
78:20:e9:ae:7e:5f:eb:71:83:f9:69:c2:b0:ee:bf:
15:b3:53:21:17:ec:33:31:6c:72:97:31:c3:63:b4:
53:a4:85:fb:f7:5a:f2:13:5b:28:85:54:21:02:6c:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:68:B1:C7:CF:AA:A7:DB:C0:0C:D5:B8:4B:C5:87:5E:05:D7:84:95
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dWixx8-qp9vADNW4S8WHXgXXhJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
39:39:77:a8:75:2b:30:4d:26:d6:24:7f:ac:f8:69:12:7c:08:
ba:be:f9:77:9d:b1:f9:2c:0d:55:5e:9d:74:6a:58:5c:43:ed:
7f:eb:5c:44:ec:fa:a1:0b:80:91:2e:83:24:47:c7:d9:cd:b7:
b2:09:87:2a:29:36:e0:92:01:7b:b9:de:c0:9c:0a:77:5d:0b:
7e:ff:ab:d1:d1:6e:9a:38:d8:c1:dc:ee:ab:dd:05:e0:33:96:
f4:b2:31:a5:de:ef:b3:9c:da:ae:c0:01:5c:8d:d8:15:41:3f:
0f:6e:c0:78:f0:f2:1d:c2:c2:ba:17:d7:d6:a7:ed:16:b8:77:
5b:56:a4:1b:3f:68:ef:ed:6c:ef:73:67:1e:d7:bd:d6:d3:f0:
af:ac:4a:ec:c7:c2:2c:e9:c7:d0:08:8c:f6:35:59:a7:22:65:
ff:ab:1a:3e:20:26:67:3b:54:6b:87:8b:9a:31:ff:bc:0a:77:
49:91:4b:50:a7:d5:4a:63:b0:9f:0a:47:1a:e1:b0:58:c7:ab:
91:c8:31:4e:d2:d7:cc:d9:fe:2c:57:80:54:fc:f9:f3:c4:62:
cc:1c:ef:be:18:4c:fe:1f:f5:18:7c:cd:8c:34:a7:1e:37:4b:
97:73:eb:35:87:b3:58:cf:24:c1:73:b8:15:a4:b9:32:a8:76:
35:8b:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:38 2025 by rpki-client