Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/PwZ5Rx2tsUh1_FefS0nc_nUDeB0.roa
File: PwZ5Rx2tsUh1_FefS0nc_nUDeB0.roa (raw, json)
Hash identifier: gEiiDaONNSSjciFlHV3RFSWRcIrvlWesnrGHW9tH4A0=
Subject key identifier: 3F:06:79:47:1D:AD:B1:48:75:FC:57:9F:4B:49:DC:FE:75:03:78:1D
Certificate issuer: /CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Certificate serial: 01856D81C688C5209F0CE2833D2B639DADBE
Authority key identifier: EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/PwZ5Rx2tsUh1_FefS0nc_nUDeB0.roa
Signing time: Sun 01 Jan 2023 13:24:59 +0000
ROA not before: Sun 01 Jan 2023 13:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210099
IP address blocks: 85.117.237.0/24 maxlen: 32
85.117.236.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:c6:88:c5:20:9f:0c:e2:83:3d:2b:63:9d:ad:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Validity
Not Before: Jan 1 13:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f0679471dadb14875fc579f4b49dcfe7503781d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:41:b2:60:93:7c:6e:e8:1f:a1:e5:a1:bf:
af:9e:09:58:5c:57:3c:97:a2:13:35:32:e4:01:f5:
bd:5d:e0:1c:3e:9c:89:e6:94:18:a5:62:6c:f3:fe:
c7:37:c3:8b:2f:e2:31:3a:e3:54:3f:7d:e8:f4:24:
81:92:57:f5:8b:13:87:e6:70:ff:c4:7f:e3:44:41:
6f:a2:19:eb:45:13:38:f9:3d:9c:6f:71:bc:9f:86:
af:e2:16:d6:f1:25:da:0a:42:05:50:92:1d:be:96:
d1:db:33:fc:1a:cc:39:77:6a:6e:a2:7c:43:4e:b7:
19:b5:da:95:39:80:96:c7:5f:05:d8:53:1b:d7:56:
9e:c0:6b:18:58:2c:a9:df:1c:41:31:92:f8:74:0c:
48:0a:fa:93:c5:59:b7:aa:9e:0a:56:04:89:bf:89:
2d:56:85:78:ca:03:a1:a3:bc:53:38:64:33:5f:48:
6d:b7:70:37:3e:0f:63:77:c4:a0:32:c1:12:45:c6:
e5:17:70:62:7a:c8:39:90:22:48:b6:d2:24:fa:69:
52:4d:6d:71:1f:53:6b:e7:0c:1f:bd:ce:88:4f:d2:
88:7f:c5:30:91:a0:c4:8a:64:bc:dd:ba:15:38:8e:
95:60:36:62:bf:05:f7:c8:64:3c:3c:55:3c:32:d8:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:79:47:1D:AD:B1:48:75:FC:57:9F:4B:49:DC:FE:75:03:78:1D
X509v3 Authority Key Identifier:
keyid:EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/PwZ5Rx2tsUh1_FefS0nc_nUDeB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.236.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:3c:04:87:e5:58:30:0e:ae:a1:6a:ea:92:9e:e9:f8:20:f3:
ed:77:74:e1:5c:bf:87:f1:6c:3b:27:20:6e:d4:77:a3:f3:44:
d6:96:0e:78:43:b4:fa:77:f8:09:de:7c:be:b9:87:0f:67:25:
bd:71:ff:08:ea:42:70:7d:b7:8a:0b:d7:9e:13:ea:2f:43:f3:
a6:89:6c:8e:ad:b8:45:03:12:6a:6c:f5:d0:d3:db:e7:02:0e:
2e:bf:d4:fd:7c:fc:8e:c3:34:af:32:f1:4e:e9:2b:3e:5e:77:
7c:08:fc:bc:4b:7c:fe:a7:41:49:1c:77:01:2a:fb:ce:c4:41:
19:05:ae:c0:ff:69:61:91:12:3e:85:b5:55:8a:de:dd:d5:fc:
0d:cd:54:c6:c4:ff:c0:13:0d:08:17:c6:80:f6:89:80:90:6b:
22:e4:9b:15:a1:65:19:e8:4c:d7:0e:32:b8:85:cc:85:3a:b5:
e3:8c:90:ee:4c:ae:d7:c4:1e:6c:99:e2:34:23:e0:ff:e5:b2:
f4:04:57:d7:f0:62:b6:d6:f1:3f:d5:8a:39:ad:fc:b9:32:11:
ac:6c:d5:88:c0:e1:3a:be:6e:bf:07:37:f6:2a:f2:ab:69:7e:
30:49:03:96:ab:85:96:ae:57:fa:aa:3e:d2:a3:06:d6:31:a1:
c3:40:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:31 2025 by rpki-client