Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/z9sQNivfLr2Ip9yWPh6gOeAL8ls.roa
File: z9sQNivfLr2Ip9yWPh6gOeAL8ls.roa (raw, json)
Hash identifier: x6MLtCpXwxGq85dadiIYddpgi6W+NE8xdtLwDVnl2Jg=
Subject key identifier: CF:DB:10:36:2B:DF:2E:BD:88:A7:DC:96:3E:1E:A0:39:E0:0B:F2:5B
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01832F0F1FEDF99E991EAC4194AEE4BBDC29
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/z9sQNivfLr2Ip9yWPh6gOeAL8ls.roa
Signing time: Mon 12 Sep 2022 00:17:43 +0000
ROA not before: Mon 12 Sep 2022 00:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 85.209.18.0/24 maxlen: 24
45.13.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2f:0f:1f:ed:f9:9e:99:1e:ac:41:94:ae:e4:bb:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Sep 12 00:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfdb10362bdf2ebd88a7dc963e1ea039e00bf25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:7c:ca:37:c4:a8:8c:11:c9:ee:6f:b2:a9:
87:7b:bb:a6:fb:b8:68:e8:aa:19:b0:40:47:de:38:
9c:29:c6:fd:77:f3:10:26:a8:3c:85:dc:01:bc:3f:
b8:97:1c:32:46:49:1f:6a:6b:d3:10:05:8e:65:0b:
57:f5:0e:ea:f9:1c:a5:87:55:a2:a6:e7:6a:5b:77:
7a:a8:9b:b7:38:6a:bd:69:e5:fb:79:26:5b:f5:5c:
4e:60:7b:92:93:70:dd:56:b4:b6:a7:5f:d3:59:26:
e5:5a:fa:be:33:12:8a:65:19:b8:06:7e:0f:f2:29:
72:44:c9:17:af:09:ba:3c:2a:52:31:42:05:58:dc:
e1:1a:58:cb:8b:16:4d:6b:83:6b:ac:06:3c:2a:da:
3f:75:33:2b:35:97:13:1d:7b:45:d0:04:c1:7e:40:
bc:8f:cf:b9:89:ee:01:63:d6:7f:b0:75:37:76:e1:
04:d0:9e:6c:d0:11:4b:80:c8:55:1b:7a:f1:77:25:
c3:bc:df:77:e1:5c:25:b9:ef:42:2e:8c:d0:e5:d1:
26:3b:6e:04:25:ee:ea:b9:39:eb:93:db:2c:1c:8b:
ea:f7:99:a8:06:55:27:a5:3a:6a:9f:dd:80:2d:94:
7d:d2:27:04:2f:d5:7e:4f:70:a3:44:17:91:91:1d:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:10:36:2B:DF:2E:BD:88:A7:DC:96:3E:1E:A0:39:E0:0B:F2:5B
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/z9sQNivfLr2Ip9yWPh6gOeAL8ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.148.0/23
85.209.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cc:84:3b:0c:3b:c8:30:e4:05:66:9f:68:38:63:99:40:ef:
1f:d3:17:a3:b6:ab:d6:00:9e:cf:88:27:3c:39:74:bc:65:fc:
f4:31:4d:4b:6a:ca:04:ee:d5:6d:7b:b2:bd:0c:0b:01:39:c6:
92:2e:94:d1:62:8b:56:14:42:38:90:dc:9a:77:cc:fb:da:da:
80:d7:eb:96:a3:a5:f0:ae:87:7d:61:76:cc:fd:c4:ed:ad:07:
27:f6:94:57:75:4f:a3:d5:94:1f:46:57:38:51:df:42:1f:8a:
4b:94:30:af:86:3c:d6:ef:e0:4c:ba:e0:d7:1a:29:40:ee:ea:
dc:5c:73:62:f4:13:37:f0:1a:6a:7c:95:5e:52:5e:d5:76:a0:
1c:0e:e8:ca:0c:fc:d6:95:5b:a8:a9:25:18:6d:6e:ec:37:79:
d8:90:84:3e:c5:a7:78:77:e9:96:3e:9a:7f:9f:a5:02:98:a0:
ce:16:34:43:60:16:7f:30:b5:e7:df:4f:47:70:81:96:18:4a:
bd:09:fc:b4:41:f5:06:03:30:48:82:a1:01:8f:a6:a7:43:ad:
ff:e5:eb:65:e2:31:c0:bc:ad:be:2b:fd:00:2e:50:b8:84:86:
32:cb:f0:d2:96:c6:45:7f:95:27:34:26:3c:ce:f7:22:76:a8:
e0:d3:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:21:25 2025 by rpki-client