Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/z5USRWL1xokOYfBSwUf22d4RSgs.roa
File: z5USRWL1xokOYfBSwUf22d4RSgs.roa (raw, json)
Hash identifier: +k9eJkOqlZwo2Ca8utkijZ5ya8drgkfsi12poSw6dDo=
Subject key identifier: CF:95:12:45:62:F5:C6:89:0E:61:F0:52:C1:47:F6:D9:DE:11:4A:0B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B600299EB051997848288021684923
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/z5USRWL1xokOYfBSwUf22d4RSgs.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 85.133.200.0/22 maxlen: 24
85.133.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:00:29:9e:b0:51:99:78:48:28:80:21:68:49:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf95124562f5c6890e61f052c147f6d9de114a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:3e:cb:69:eb:18:7f:b3:92:96:1f:9a:72:
e3:ef:83:4d:6a:b2:c4:0c:e3:3f:e4:3f:1a:c0:b1:
c6:4f:20:2c:64:b9:ef:f6:71:e9:34:86:9e:98:b0:
62:e7:fc:82:4b:4d:b8:71:a3:06:98:9a:c3:4b:80:
c1:0f:e5:8a:01:39:8a:c5:5a:be:0b:de:d6:dc:0c:
7f:ae:a3:f4:90:9b:aa:f7:69:1a:3a:1f:06:3f:cb:
58:8e:a6:c1:6d:68:c4:30:12:d0:9c:e6:d1:5f:9d:
fc:8c:c1:bb:64:3b:76:97:88:18:0d:b0:5b:fa:c0:
da:e2:c8:3e:62:73:f5:5b:ab:d6:0d:b3:1c:43:1f:
dd:86:bb:d3:40:b2:80:28:23:17:ff:eb:60:44:34:
38:64:d3:75:ce:88:51:f6:0e:c5:f5:ab:97:7f:34:
d7:70:02:fb:e6:b5:a9:1c:2c:4b:cf:a0:4d:69:1b:
98:9b:b2:9e:30:97:ff:da:2e:3b:9f:1d:73:92:3d:
1e:88:1c:8f:ed:29:98:f2:88:ad:6f:aa:b5:f5:20:
5d:f4:01:76:e9:f5:01:29:a7:18:1f:7e:8e:cd:aa:
95:cb:88:74:39:17:25:17:5e:84:ad:cf:27:fb:0c:
90:93:46:95:c3:69:7e:df:d0:b3:15:99:58:99:54:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:12:45:62:F5:C6:89:0E:61:F0:52:C1:47:F6:D9:DE:11:4A:0B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/z5USRWL1xokOYfBSwUf22d4RSgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.200.0/22
85.133.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c1:ff:91:36:80:76:4d:83:5c:77:49:90:ba:e2:05:8f:1c:
9e:3e:54:7e:49:d7:55:3b:ce:83:43:5a:f6:16:2f:68:c9:dc:
cc:e2:9c:81:7c:fb:c3:e5:41:a9:0f:a1:86:36:7d:e5:95:69:
e4:50:15:3c:79:5c:10:f8:95:b2:d5:2a:b7:85:f7:00:eb:a8:
c2:63:e5:91:9c:a2:f5:7a:a8:d4:0a:b8:52:61:35:99:68:e1:
44:10:f0:63:a7:ee:4f:69:a2:63:ac:96:32:80:b8:17:f0:cc:
4c:34:65:7d:e4:2b:cf:8e:25:27:e4:c0:fc:e7:1b:57:60:1d:
1e:9f:11:97:23:10:08:69:df:34:7b:38:a6:96:eb:5f:9a:5f:
50:80:55:a0:4e:b2:b9:f2:ff:64:4c:f7:20:9e:88:50:2d:b4:
c6:f9:bb:85:d5:c7:7f:c1:76:d8:96:f5:a7:f1:bd:dd:75:91:
b0:2c:c0:3b:c1:de:d1:68:16:1a:3d:2c:94:a6:63:c2:d6:f3:
91:28:37:bd:c7:da:52:10:e2:fc:a9:63:66:f9:8c:c2:68:21:
45:78:ea:61:c3:80:75:d6:76:ab:1a:9e:85:d0:2b:1f:5a:06:
d4:b1:5d:78:c4:e6:9f:c6:90:ea:30:fe:39:be:c4:65:88:b7:
8e:b9:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:35 2025 by rpki-client