Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/u6_LXdjqJL7r3QZAxXPy71re2BA.roa
File: u6_LXdjqJL7r3QZAxXPy71re2BA.roa (raw, json)
Hash identifier: xeGdaHyQ2MOS6QcwJ0Rw0pLHKq/InC/NKtjJlzI1rj0=
Subject key identifier: BB:AF:CB:5D:D8:EA:24:BE:EB:DD:06:40:C5:73:F2:EF:5A:DE:D8:10
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018AA79C07EB8A28A09BCE3F739E573D03FD
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/u6_LXdjqJL7r3QZAxXPy71re2BA.roa
Signing time: Mon 18 Sep 2023 09:25:35 +0000
ROA not before: Mon 18 Sep 2023 09:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35053
IP address blocks: 85.237.69.0/24 maxlen: 24
85.237.70.0/24 maxlen: 24
85.237.84.0/22 maxlen: 22
85.237.88.0/24 maxlen: 24
85.237.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:9c:07:eb:8a:28:a0:9b:ce:3f:73:9e:57:3d:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Sep 18 09:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbafcb5dd8ea24beebdd0640c573f2ef5aded810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:f9:da:9e:18:6d:1e:5a:6f:9b:bc:38:88:
f5:b0:2f:02:86:c4:aa:84:47:09:bb:3c:cc:80:1a:
44:b2:53:6e:f3:e3:52:9d:78:d6:3c:2f:14:2e:bf:
c8:e4:bc:ff:1d:58:1c:2d:d0:b9:82:09:a5:45:b4:
a3:7e:d8:c6:52:fa:c1:4d:0b:bf:9d:eb:45:ca:97:
28:58:67:e1:ac:c4:1f:20:67:8c:9b:ba:1e:70:7d:
0a:78:65:3c:ab:f3:b1:80:d6:5b:68:ae:ea:b5:ed:
27:95:2a:da:a3:3f:b2:01:79:f0:42:88:07:13:24:
c7:03:9a:c1:13:6d:a4:41:01:15:5e:34:e2:09:f8:
3e:dd:15:5a:e9:15:76:59:91:ad:2c:b7:2e:2c:e9:
30:bc:e4:06:2f:47:d1:bf:67:29:94:cb:62:0b:98:
c3:24:22:62:41:9d:b0:80:78:ee:12:16:aa:9b:39:
90:44:56:a2:24:bb:78:d1:84:32:e4:66:0e:0d:68:
1d:ea:61:86:86:6a:59:4a:24:06:47:c4:e5:e9:4f:
77:ce:18:1d:15:14:eb:06:d5:ec:62:3d:20:9c:f9:
14:6e:b3:a1:0a:77:e2:d2:1e:c3:e1:65:5f:0f:6f:
8d:70:9e:e3:92:33:b1:a3:6d:78:6a:5a:1d:c5:dd:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AF:CB:5D:D8:EA:24:BE:EB:DD:06:40:C5:73:F2:EF:5A:DE:D8:10
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/u6_LXdjqJL7r3QZAxXPy71re2BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.64.0/22
85.237.69.0-85.237.70.255
85.237.84.0-85.237.88.255
Signature Algorithm: sha256WithRSAEncryption
55:af:df:e4:a9:fc:0b:ae:07:05:fc:78:bf:28:30:49:03:38:
de:b2:13:5b:3e:7a:8a:81:6c:26:e8:50:77:ad:df:7e:60:ab:
30:f8:8c:15:88:ec:df:e9:32:7d:56:06:69:bb:9e:fe:53:19:
cb:05:56:2f:64:d0:1e:52:86:cc:77:da:e7:43:22:d6:30:f3:
60:54:2d:32:40:b6:89:57:f0:1e:80:47:af:20:69:e0:8e:af:
84:5a:68:86:b9:39:41:47:d0:07:fe:24:8a:1f:6e:7e:e2:8f:
e3:22:22:a0:62:ea:40:3d:9d:dd:e2:85:48:ce:ae:67:69:4b:
1f:d8:2b:d4:0d:6b:19:8d:6d:6e:51:83:f2:46:4d:7c:36:19:
84:34:80:17:bf:f6:14:9c:20:43:c6:bf:d8:23:18:3b:1e:cf:
7f:4e:90:11:4f:d7:fa:10:fe:3b:74:91:82:9d:0b:fa:de:c3:
e6:f4:9f:14:a6:3d:26:d6:99:a4:9f:bc:db:51:9f:80:b1:2c:
0d:e2:40:40:d7:49:7e:2e:23:c8:d8:94:e3:72:98:6a:d1:35:
d9:db:54:35:2a:f6:01:94:c6:8e:48:be:19:3b:56:19:c1:ae:
b8:7e:4d:dc:32:9c:ad:79:83:4a:d9:92:33:8e:9f:41:31:51:
e1:7d:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:38 2025 by rpki-client