Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/8CJTB-IKSZF8T5Va0bDSXYJc6D0.roa
File: 8CJTB-IKSZF8T5Va0bDSXYJc6D0.roa (raw, json)
Hash identifier: h0KakNFHzb78pFgUuI2HB7ICju6Zjn7/ZXC5PeL8MGk=
Subject key identifier: F0:22:53:07:E2:0A:49:91:7C:4F:95:5A:D1:B0:D2:5D:82:5C:E8:3D
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 019420681163D1C70F93A6EA30A2DACAB1F1
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/8CJTB-IKSZF8T5Va0bDSXYJc6D0.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35913
IP address blocks: 85.239.34.0/24 maxlen: 24
85.239.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:11:63:d1:c7:0f:93:a6:ea:30:a2:da:ca:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0225307e20a49917c4f955ad1b0d25d825ce83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3d:76:a5:82:48:0e:6c:6c:42:c1:a5:ce:8e:
da:f8:c4:d1:06:ce:af:02:aa:0d:e2:8f:aa:92:d1:
c8:69:fd:58:79:f7:f0:bb:2e:18:a1:cc:9a:14:09:
5a:84:87:29:e1:8a:64:20:c5:ba:4c:29:85:89:5f:
9e:61:09:5d:b4:0b:00:e3:c4:bc:f7:7f:90:a6:70:
a4:51:1f:d8:81:78:6e:01:60:c0:97:4c:b6:e9:62:
84:78:e9:4e:d2:8c:47:86:29:ae:10:a1:b5:50:fb:
a4:9b:d2:46:ae:71:c5:ec:85:c1:55:4e:df:85:da:
43:cd:2a:08:94:f8:d7:ce:0e:54:e4:64:4c:fd:e9:
f0:15:f1:11:c7:d5:dd:9e:b9:ce:c0:b7:4a:a8:70:
86:94:6f:a9:7a:1a:a8:e6:b6:d2:8d:01:92:58:a8:
03:ab:b2:72:ec:6b:d7:dd:8d:ff:af:cf:ac:e8:d9:
d1:d2:11:a8:84:93:45:43:a6:14:5f:70:ec:b6:64:
36:e9:df:cd:83:35:2a:11:7d:3f:32:78:1f:08:9c:
db:44:45:b0:ee:34:4d:58:0d:08:4c:ec:02:f5:ba:
c2:78:cd:1a:83:96:45:2b:2d:0b:82:51:56:8c:2f:
99:dd:61:f9:67:76:aa:b6:e5:8c:94:0f:85:c2:dd:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:53:07:E2:0A:49:91:7C:4F:95:5A:D1:B0:D2:5D:82:5C:E8:3D
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/8CJTB-IKSZF8T5Va0bDSXYJc6D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.34.0/24
85.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:97:60:56:14:3e:d0:78:44:d7:50:15:7b:fe:dd:ab:e2:9b:
af:d4:1c:9d:71:da:a4:3a:2a:ae:b4:ee:24:4c:51:4c:4a:f0:
eb:14:24:ad:2c:8e:48:49:62:76:a7:a8:68:6e:bf:3a:52:42:
9b:68:1e:f6:6e:41:2c:a5:7e:a1:f0:0b:af:8b:63:6f:e2:f5:
36:9d:47:08:b8:d9:76:73:7b:78:48:5f:b7:9f:8b:7d:99:00:
5a:5a:49:fa:35:23:dd:a2:7c:95:a0:ee:9b:55:01:2d:16:8c:
38:3b:0a:b7:91:ea:94:49:56:66:7e:e7:ca:68:52:b5:fb:e7:
87:53:40:08:c1:94:31:e7:0c:3f:e4:cf:da:b6:78:55:7a:77:
81:55:4c:4b:4d:59:b9:2a:98:c0:bb:16:6b:21:36:a8:20:7f:
b2:82:73:e1:cd:a2:ca:17:26:66:cd:6b:41:ff:a4:7b:12:72:
5f:6e:f1:66:63:f2:00:e0:76:28:b4:25:05:3b:5f:e0:f5:99:
02:13:08:8a:36:1d:bb:29:10:27:f3:d5:d4:03:ec:9d:76:e7:
c4:49:55:c3:e4:06:51:56:4d:0e:a0:5f:59:ff:d3:37:5f:81:
44:ba:e0:fc:e9:ab:94:1f:3e:73:c2:b8:51:c8:15:15:dd:b0:
cf:a3:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:50 2025 by rpki-client