Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/SeBDGoUZsUtOUZx02IQlwMJ27mU.roa
File: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (raw, json)
Hash identifier: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=
Subject key identifier: 49:E0:43:1A:85:19:B1:4B:4E:51:9C:74:D8:84:25:C0:C2:76:EE:65
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5FC0CCFF10D39592BFA9B7B08BA96
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/SeBDGoUZsUtOUZx02IQlwMJ27mU.roa
Signing time: Thu 02 Jan 2025 15:50:25 +0000
ROA not before: Thu 02 Jan 2025 15:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 85.133.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fc:0c:cf:f1:0d:39:59:2b:fa:9b:7b:08:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e0431a8519b14b4e519c74d88425c0c276ee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:03:64:bb:2b:8e:c7:e8:65:55:12:60:00:
3e:7c:f2:71:04:00:b3:ad:ad:17:9b:86:e5:6d:8e:
fb:a6:9c:f5:75:e9:64:f6:60:85:ad:36:0a:32:c5:
bd:0c:f7:dc:4a:91:f7:2a:cd:a4:a3:89:41:57:8a:
66:88:b3:73:45:b1:d6:aa:98:10:69:a2:39:37:a9:
4f:28:84:38:10:a6:4c:12:40:df:52:79:50:60:f1:
8d:c0:44:7b:01:ce:4d:da:8d:9d:d3:47:e5:c3:d1:
5e:59:4c:55:d6:6a:18:b1:04:33:db:be:15:ee:95:
b9:71:87:17:f8:67:92:17:f4:17:9c:48:d5:e3:6e:
8c:9c:8c:21:5e:b8:f7:44:a3:d4:cc:95:67:a0:0a:
ca:15:29:c9:10:bf:05:ce:de:b1:47:e7:b5:67:96:
9b:b4:55:be:66:3f:c3:14:4d:9e:44:16:fd:8d:8c:
75:c8:03:a2:a0:09:69:b7:7a:ef:fd:fe:42:e7:5f:
b3:3d:1b:25:b8:34:c4:92:0b:9c:49:87:3a:c6:d7:
05:38:e8:c9:99:d0:a2:6e:35:d4:f2:d9:68:79:d5:
25:df:49:6b:e9:16:07:78:21:c8:ac:5b:4d:e8:77:
2a:7b:7e:a7:69:40:8c:e5:0b:81:e1:18:39:18:d1:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E0:43:1A:85:19:B1:4B:4E:51:9C:74:D8:84:25:C0:C2:76:EE:65
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/SeBDGoUZsUtOUZx02IQlwMJ27mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
86:86:8d:18:04:e1:69:59:d0:d5:ab:0d:56:de:b2:1a:69:bd:
14:29:ba:cd:16:c6:54:84:94:a6:0a:58:f4:cd:19:a8:b1:b2:
c0:c0:56:68:0b:22:63:da:ec:48:b8:03:39:9c:dc:7f:27:fb:
d3:4b:53:4c:e5:72:f2:44:21:92:a4:c1:37:59:de:81:cc:21:
1e:dd:bd:8a:52:95:2c:21:3e:93:83:3d:0b:ff:8b:0d:56:8c:
a4:06:e1:00:00:cf:ff:5a:cc:9e:c7:11:6c:2d:b8:7b:cf:c7:
03:a4:9e:4e:c4:ad:be:3f:16:6a:9f:a9:99:5e:14:b3:29:af:
87:36:c3:d3:ed:02:cd:0c:2d:f1:af:5f:e9:e0:c5:d3:dc:af:
d7:51:23:3a:c8:9d:ef:f5:f4:2f:b7:f7:aa:6a:26:30:67:64:
07:1b:f6:37:b7:ef:ca:07:87:02:a5:3a:eb:8f:b3:a2:19:74:
27:ea:75:f7:1f:fc:4d:08:f3:5c:7e:65:80:cf:7e:cb:f2:8d:
48:af:b9:31:d1:ba:70:58:d2:e7:bc:e0:8c:36:5b:ee:8f:30:
29:96:aa:0b:8b:98:92:9a:fe:0b:b0:59:7c:e5:dd:91:f9:e1:
5d:e0:63:9e:c9:69:e1:05:8c:5c:ab:0f:7a:1f:0d:a8:61:53:
32:03:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:17 2025 by rpki-client