Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-8UxcVTla5j7bO3G5vVxQgJ3gzs.roa
File: 1-8UxcVTla5j7bO3G5vVxQgJ3gzs.roa (raw, json)
Hash identifier: ch8dpT85wJEGWDgj3N5hDC8XQYwv3BSkNMrgH1pP29g=
Subject key identifier: FB:C5:31:71:54:E5:6B:98:FB:6C:ED:C6:E6:F5:71:42:02:77:83:3B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5F9196ABA4BD4D1530C544192F0CA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-8UxcVTla5j7bO3G5vVxQgJ3gzs.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 85.133.193.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f9:19:6a:ba:4b:d4:d1:53:0c:54:41:92:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbc5317154e56b98fb6cedc6e6f571420277833b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:01:37:46:0e:cb:1e:01:f6:17:18:f7:3d:
85:73:1e:8f:9a:04:c6:31:3c:f1:65:9b:e9:8e:e5:
30:ac:a1:32:25:d7:29:69:70:47:52:a8:ab:42:42:
a5:6c:35:d3:7f:7a:23:a4:44:51:e4:51:60:b6:88:
34:27:3d:6c:ff:8c:0a:f9:09:86:e3:2a:80:14:20:
d4:31:52:97:d6:d5:1c:cd:9f:0e:5c:25:c3:08:ac:
d8:4d:4b:07:8f:67:e6:89:8a:90:7e:df:b6:35:32:
94:f4:9d:81:73:c3:a5:2c:04:8c:28:f2:28:79:22:
88:fe:5e:75:82:71:1f:58:77:4a:f0:23:ea:a4:1c:
5d:fb:ed:ed:8a:68:2c:ca:46:aa:7c:2e:b9:36:a5:
14:94:c3:67:ea:88:8a:74:d0:57:03:00:67:28:cd:
33:81:d7:4f:5d:67:48:a4:41:cb:e6:52:99:1c:39:
e1:99:fb:10:6e:ca:5b:9e:c4:0c:24:cd:a2:4a:09:
98:77:af:7a:e1:30:ba:ee:b1:9a:9e:de:f8:2e:6f:
3c:69:ff:6e:6a:61:cc:78:77:c9:dd:97:77:1f:c8:
1e:be:b3:19:1b:6d:20:21:1b:4e:ea:22:6c:11:a2:
84:29:8b:fb:b8:18:86:00:48:82:a4:d8:20:18:7a:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:31:71:54:E5:6B:98:FB:6C:ED:C6:E6:F5:71:42:02:77:83:3B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-8UxcVTla5j7bO3G5vVxQgJ3gzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
85.133.208.0/24
85.133.214.0/24
85.133.254.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d7:dc:4a:7b:fb:99:6a:07:33:e8:79:f9:b3:3b:34:7d:53:
36:17:17:88:b5:dc:86:6a:2b:a9:02:81:52:bf:0d:60:07:c2:
5a:ca:32:40:50:27:e6:c6:a0:1e:33:8e:8d:c6:8e:8d:fc:ef:
cf:dc:49:58:58:39:ef:1b:bc:bf:b9:41:b9:b6:3b:28:c3:e0:
1b:b7:1d:29:24:3c:32:40:4d:a1:fc:01:f7:01:34:a0:a5:3f:
a4:a7:36:d8:8f:57:44:81:f4:d8:ee:53:63:92:9d:47:ab:0f:
2e:df:57:8a:d4:dc:bb:18:1e:66:e2:eb:95:45:c2:f0:1f:41:
26:4c:63:4f:d5:a7:60:26:f2:f1:45:9a:52:02:14:b3:a8:d4:
12:8f:06:c0:f2:15:75:40:ca:74:2d:dd:b1:a7:93:b5:95:49:
d7:6b:3f:53:ff:03:91:c6:63:10:f0:04:bb:37:57:ef:99:31:
6c:a4:d5:a1:a9:6d:7e:dd:79:80:65:a3:19:a8:ac:5a:4b:fa:
e6:c6:1e:d9:6d:cb:b1:92:71:fa:e0:16:b1:27:71:c8:73:dd:
c4:60:80:e5:83:3a:e7:77:c3:1c:44:1b:2f:ff:97:fe:a9:89:
59:85:c8:6a:42:c1:92:ac:38:50:55:00:92:9e:8b:10:45:96:
49:d9:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:56 2025 by rpki-client