Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/cE8hYNa0TFLNY1Ym0oL2KDXDktM.roa
File: cE8hYNa0TFLNY1Ym0oL2KDXDktM.roa (raw, json)
Hash identifier: anaR+bWX/5Ci73p0d/3eX3oQ6oKxONzHWDCgvHVC8TE=
Subject key identifier: 70:4F:21:60:D6:B4:4C:52:CD:63:56:26:D2:82:F6:28:35:C3:92:D3
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 019420681593E15F128E48B8CFDE4B3BE151
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/cE8hYNa0TFLNY1Ym0oL2KDXDktM.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197648
IP address blocks: 85.239.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:15:93:e1:5f:12:8e:48:b8:cf:de:4b:3b:e1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=704f2160d6b44c52cd635626d282f62835c392d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:e5:e3:69:66:86:8c:35:3e:45:bb:63:f2:
5f:07:d0:97:2e:2c:8d:2f:93:83:54:46:2f:5b:d1:
16:3c:82:47:6d:28:bd:c4:e7:16:4f:59:08:4e:89:
b9:78:bf:56:77:3b:ee:0a:0d:ae:2a:ee:21:02:e0:
98:af:be:f3:42:b4:ce:9b:63:be:25:49:dd:17:a0:
0a:6b:09:00:0a:9e:37:02:24:d6:ec:e2:b9:53:5c:
99:2c:9c:ec:2f:c8:46:72:12:42:7b:0a:81:f8:cf:
38:b2:e9:12:f3:b5:93:19:55:7f:04:7a:e9:ff:de:
aa:61:08:97:6f:40:cf:e0:d0:e6:f9:28:2b:67:64:
a5:a9:18:28:71:10:df:e0:4e:e5:fb:ea:6e:1d:7a:
7e:f1:cb:71:00:c7:6b:64:71:3c:a7:c8:6e:e0:6e:
27:10:8e:b5:f5:e9:80:12:ab:9f:6d:34:89:3c:ad:
58:ca:ed:52:c0:33:88:36:54:de:dc:96:1a:fb:e6:
75:d1:9f:4f:90:34:80:28:ab:7c:39:ca:f1:95:98:
9f:28:72:42:27:0b:3c:db:42:c7:a0:6a:32:00:2e:
de:ea:75:c5:a4:d3:b3:ec:0e:cb:b9:4e:e0:ae:d6:
90:d2:d2:05:19:de:e6:7c:a9:28:6d:ed:ec:2f:4f:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:21:60:D6:B4:4C:52:CD:63:56:26:D2:82:F6:28:35:C3:92:D3
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/cE8hYNa0TFLNY1Ym0oL2KDXDktM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.40.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:37:62:8e:1f:91:28:8f:49:26:06:67:9d:23:f0:ae:2d:d2:
b0:5f:66:1b:46:12:00:b2:69:7e:33:f1:b9:53:70:73:92:01:
dd:d4:61:5e:78:03:f6:b4:e5:18:ef:7d:2a:40:e1:f1:da:61:
e7:25:e8:c9:d7:cc:62:68:d6:67:22:66:a0:82:66:ff:04:17:
16:fc:e3:43:ff:57:9b:fe:2e:71:e4:b8:f2:17:45:82:62:ef:
56:53:c8:07:46:ec:a1:8c:a1:2e:2c:9a:b2:c0:6f:70:a5:f9:
74:55:3c:d8:d4:f5:a8:69:94:b5:b7:5f:d9:cb:18:34:53:95:
78:70:55:61:87:81:f2:01:a2:cc:e8:61:16:37:93:98:99:82:
ea:e7:73:12:71:69:79:32:1d:4c:a8:b0:5e:e4:0f:c5:86:eb:
5e:cd:be:3f:cb:d4:d4:ac:ce:c2:39:4f:16:a9:6b:ad:ea:dd:
18:94:ac:68:b7:e6:85:5f:4d:48:95:ad:31:ad:d5:99:a1:7c:
20:66:7b:0a:ad:7c:a8:bd:f2:50:04:bd:64:67:1d:32:af:51:
6f:ff:af:27:38:ea:a1:ca:e4:50:7d:c0:77:f2:5c:fc:b9:87:
26:cc:41:40:05:4c:c0:a1:7d:24:9f:32:c8:62:c7:7e:70:70:
2a:2f:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:50 2025 by rpki-client