Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/J9C16lcx8PgyurfKUP9kuPkC8qk.roa
File: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (raw, json)
Hash identifier: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=
Subject key identifier: 27:D0:B5:EA:57:31:F0:F8:32:BA:B7:CA:50:FF:64:B8:F9:02:F2:A9
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019427B40BDA989DFC61D0DE0889FE66955B
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/J9C16lcx8PgyurfKUP9kuPkC8qk.roa
Signing time: Thu 02 Jan 2025 15:48:18 +0000
ROA not before: Thu 02 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35053
IP address blocks: 85.237.64.0/22 maxlen: 22
85.237.69.0/24 maxlen: 24
85.237.70.0/24 maxlen: 24
85.237.84.0/22 maxlen: 22
85.237.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:0b:da:98:9d:fc:61:d0:de:08:89:fe:66:95:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 2 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27d0b5ea5731f0f832bab7ca50ff64b8f902f2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:9e:46:87:ec:ab:58:ab:6f:8c:ed:92:b7:
f7:fa:ac:4a:6e:51:78:ba:b7:01:11:58:c8:d0:9a:
04:33:78:68:6c:aa:48:a1:b8:23:f8:e2:40:a8:15:
a4:14:dc:9e:3e:69:c0:c9:9e:f7:2a:e9:7a:3f:0a:
10:08:b9:c0:b8:5b:33:ae:85:68:d9:b8:28:1c:3c:
ce:b9:52:7c:95:ca:93:b7:74:77:41:b7:0b:28:6f:
d1:12:bf:09:ec:92:55:f8:0f:f7:bb:a7:61:cf:c3:
90:08:a4:bc:51:22:6c:01:ba:99:b4:df:03:f1:aa:
89:4c:4a:45:eb:01:a0:dd:2b:84:0c:d7:4b:a1:39:
ab:13:a6:2d:33:e8:23:d6:75:4d:23:2a:c6:1b:26:
47:14:90:86:e1:43:23:c0:22:99:62:89:e1:3b:65:
84:c6:7d:8e:6d:a4:0c:77:e7:20:11:cb:94:8d:1b:
ec:ba:ca:6d:1b:b3:23:51:b0:1a:36:a1:09:1a:70:
56:f5:27:38:62:01:f7:77:b5:78:52:e8:ae:f4:80:
b6:5a:e7:0c:73:36:10:70:6a:d2:d3:94:7b:14:5c:
21:21:c3:f2:b5:5f:02:ef:c6:ab:fb:28:e1:db:29:
da:d9:96:79:dd:75:7f:88:b7:11:72:ab:f3:72:35:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:B5:EA:57:31:F0:F8:32:BA:B7:CA:50:FF:64:B8:F9:02:F2:A9
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/J9C16lcx8PgyurfKUP9kuPkC8qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.64.0/22
85.237.69.0-85.237.70.255
85.237.84.0-85.237.88.255
Signature Algorithm: sha256WithRSAEncryption
54:47:e6:26:1e:f5:0e:55:2a:89:68:67:ff:fc:d4:84:3c:e4:
2a:c4:a1:ba:6a:2e:eb:4c:dc:a3:78:e7:2b:89:e1:43:f4:19:
7a:80:c3:46:ee:79:5b:13:1e:e9:3d:20:d1:0b:67:f1:d6:3e:
04:2b:8c:5d:26:9f:d2:4e:4f:fc:9e:6b:c8:21:48:b0:ca:49:
ee:e8:94:f2:dc:e2:49:52:08:2b:85:9b:ff:ab:08:3d:b0:6d:
d3:ba:e5:2e:16:70:05:e4:a7:3f:65:4a:2a:e9:ed:08:fd:5d:
90:eb:1b:cd:6b:91:ca:f3:be:96:93:0f:0e:a5:aa:3c:9e:39:
22:04:40:52:2d:e0:6f:4e:39:02:ef:a9:50:bc:f7:f1:58:87:
2c:4a:d2:3a:c7:91:1a:7f:52:c1:1b:8f:8d:5d:11:1a:d9:63:
fc:b8:ce:1e:12:a9:90:82:46:13:e0:49:3c:15:cd:28:e5:19:
00:bb:e1:bd:bf:5f:91:37:6e:9a:5b:cd:20:48:89:51:07:2b:
42:c1:b8:da:89:c7:16:1e:8c:f2:11:e4:a5:21:dc:a4:18:68:
a1:51:87:a4:d8:e9:63:3d:7e:8f:e6:c9:18:da:a0:f2:e2:b6:
2c:47:e3:5b:4d:ad:02:06:2f:0c:68:ea:3e:f1:37:a0:26:51:
31:47:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:43 2025 by rpki-client