Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/IflXIVJVKHjj3FbsU-x2caF1WgQ.roa
File: IflXIVJVKHjj3FbsU-x2caF1WgQ.roa (raw, json)
Hash identifier: KdoLv4ZPsQOs32tCZoWq/WwCeMDERRV/wK5GBJjjljQ=
Subject key identifier: 21:F9:57:21:52:55:28:78:E3:DC:56:EC:53:EC:76:71:A1:75:5A:04
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 019420681328880073A34C84E4E61F8561EC
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/IflXIVJVKHjj3FbsU-x2caF1WgQ.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60912
IP address blocks: 85.239.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:13:28:88:00:73:a3:4c:84:e4:e6:1f:85:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21f9572152552878e3dc56ec53ec7671a1755a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:ee:b0:21:1e:05:55:2b:2f:e9:a8:08:6f:
2d:db:93:eb:b2:0b:35:68:34:c3:02:23:4e:77:5b:
d6:d5:d8:7c:24:7e:b0:93:c6:86:47:f8:3f:85:fb:
e6:a6:0d:42:ee:e3:00:65:5d:0c:61:b6:3c:47:d0:
7b:25:be:1d:82:83:23:c7:3c:a9:ba:59:ef:2f:89:
82:1d:d3:98:2e:53:21:a4:b8:4e:1f:ec:c0:ee:08:
cd:13:b3:0b:6d:57:32:c0:bc:12:0a:60:57:7a:5a:
9f:dc:c2:c2:bf:12:82:bb:79:c2:f8:35:ee:6b:0a:
e0:37:81:c1:a5:cb:a5:af:42:10:b4:8e:ca:c0:16:
ef:95:09:8b:fe:0a:e2:96:44:72:e2:f0:0b:c6:2c:
2c:67:09:eb:69:51:a6:2c:e0:9b:f5:26:1b:45:9b:
15:66:45:8e:c8:b3:10:64:5b:83:db:0f:9b:97:c7:
a9:a8:13:28:ed:87:29:e0:2c:b3:b6:96:89:0f:98:
7f:fe:5d:60:78:60:8a:73:18:af:46:1c:c1:83:3f:
ed:35:d7:06:db:d9:3b:01:59:52:c1:64:14:e3:38:
7b:57:44:04:88:eb:44:4e:48:2c:35:eb:b4:e1:6e:
ad:79:ed:49:d5:4f:8d:a7:ec:43:93:61:2e:4f:9d:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:57:21:52:55:28:78:E3:DC:56:EC:53:EC:76:71:A1:75:5A:04
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/IflXIVJVKHjj3FbsU-x2caF1WgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ea:0e:2b:75:75:74:df:ba:f7:54:59:cc:c9:fc:34:71:ca:
43:0b:e3:62:d1:c9:b8:ce:f0:a5:bd:8d:58:7b:11:68:45:14:
f4:c3:54:97:52:0d:72:77:2c:91:f0:88:2e:57:fa:33:1a:23:
87:24:e9:a6:e8:48:90:e4:f1:5e:7e:db:ad:cc:2e:2c:dd:72:
0f:27:15:2e:6f:f7:5a:0d:c5:87:80:7a:79:a5:6d:43:35:84:
28:e6:41:61:e1:6a:d9:6f:ac:74:0a:76:fe:60:d7:61:d9:b7:
18:8c:7c:42:68:16:b5:63:84:bb:b7:c8:bc:0b:cc:f2:6f:f9:
62:92:ab:9e:d8:dd:34:c1:6d:1b:0d:49:3e:4a:43:f3:3d:b9:
cf:ee:5e:ed:90:79:7f:a7:44:9f:4d:9d:a3:c9:c8:10:c7:6b:
6e:da:ef:71:d6:97:6d:6a:3e:a9:64:b2:55:51:4b:78:b7:a5:
97:c5:5b:df:9b:4a:c8:7d:99:44:8b:cb:31:9b:95:e4:bc:9b:
81:20:0b:4d:ab:f5:31:5c:7c:f1:8e:01:d8:ca:61:50:19:34:
62:91:f9:91:fd:13:77:1e:cb:8e:49:cc:12:ed:10:cb:85:3f:
ca:df:41:a4:bb:7c:60:a3:03:08:de:49:43:19:52:68:eb:f1:
78:5f:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:28 2025 by rpki-client