Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa
File: It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa (raw, json)
Hash identifier: QAc5gHOaQXt39S4LjrikuPGmP8en9wsKvBleiEYuYHU=
Subject key identifier: 22:DF:DF:F1:27:F6:15:F8:41:FD:2D:03:6D:F4:0A:6B:ED:89:38:F6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B603F6864929625056D0F23AA0F1D2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa
Signing time: Thu 02 Jan 2025 15:50:27 +0000
ROA not before: Thu 02 Jan 2025 15:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215938
IP address blocks: 85.133.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:03:f6:86:49:29:62:50:56:d0:f2:3a:a0:f1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22dfdff127f615f841fd2d036df40a6bed8938f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:9b:ea:04:6a:d7:53:ce:90:67:99:fe:dc:
9b:aa:ab:83:9e:39:25:ea:b9:bb:e5:1f:0d:fb:36:
c1:c4:57:25:e4:3a:9b:cb:59:10:91:dd:cc:3c:c8:
93:5b:6b:cb:96:5c:f0:ae:c5:f1:1e:a0:1a:67:59:
42:76:07:95:7f:86:fc:b0:1e:1f:8a:65:a7:07:43:
18:c4:3c:85:c7:fa:e2:a5:11:37:34:15:13:a6:71:
f5:d3:10:7f:de:05:80:30:42:8e:90:34:3c:ef:67:
99:b3:3d:7a:00:e6:bc:bc:f5:da:65:09:d2:74:13:
3b:a4:f8:fe:2f:47:c8:53:7c:9d:38:9a:28:cd:5d:
e3:e4:f2:f4:76:d6:b1:b8:d4:10:d6:c9:3f:f4:22:
18:49:a5:6a:83:41:32:3a:32:72:65:16:ba:f6:3b:
80:c0:d4:b4:0d:36:0b:61:d8:1e:b6:aa:f9:20:79:
52:cd:4c:ed:9d:7d:c8:54:3a:7d:c6:43:37:82:d8:
f6:5c:f3:e2:fa:32:bc:83:39:a8:36:fb:25:5f:d5:
51:e1:a9:25:d0:05:8f:17:56:3f:8a:35:27:38:7a:
07:2e:d2:67:41:62:2c:d4:b3:8d:cc:2d:57:7a:1e:
0c:73:b4:0b:62:5f:66:7c:82:21:77:bf:13:87:bb:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:DF:F1:27:F6:15:F8:41:FD:2D:03:6D:F4:0A:6B:ED:89:38:F6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
67:23:18:3d:5a:f9:1c:41:02:ee:51:01:a9:88:47:1a:64:00:
10:16:b4:82:71:ef:ba:30:0a:49:d1:32:ae:f1:f0:dd:e7:a9:
31:3f:50:fe:82:a8:8c:e4:50:cd:06:ca:c3:ec:e6:aa:9c:02:
a4:ff:a5:f0:28:19:e5:97:64:8f:17:50:4f:1a:26:64:85:5a:
0d:45:aa:71:56:f2:b7:5a:af:ad:4c:1e:ff:cf:1f:c5:c3:b0:
b0:3b:aa:d4:43:49:78:7e:4b:f4:1b:69:23:63:12:c2:0a:12:
2e:df:09:df:87:e8:71:e1:05:91:7b:f1:72:a7:5c:84:ec:a6:
41:de:50:30:77:c4:89:b8:ab:c1:f0:48:1c:9f:a6:8a:f9:0e:
ae:9d:82:67:d1:13:8b:32:e2:50:fd:ca:1e:85:be:8f:4e:f6:
a9:17:06:62:88:f4:ee:b2:2c:9e:31:50:cb:95:fb:3f:96:ea:
f4:93:6c:ba:4c:0b:a1:6e:fb:2e:b0:b0:9c:9b:1f:6f:c7:ed:
b3:8d:32:ef:76:59:be:1e:ad:6c:d5:1e:96:4e:80:3c:a6:8c:
cd:81:f8:42:eb:46:81:4b:4e:cb:54:d8:d1:37:78:fa:ff:14:
4a:6c:bc:b5:a8:17:64:c1:e9:0f:a5:be:16:7a:da:13:ab:d4:
62:2c:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:49 2025 by rpki-client