Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/hB3G-CnMnQWbCDd8-Zv-y6zJCRU.roa
File: hB3G-CnMnQWbCDd8-Zv-y6zJCRU.roa (raw, json)
Hash identifier: wv5Q2AwS7PK9gmPHIbqvtl6HZ8bBa1oTlAgACqcEbtM=
Subject key identifier: 84:1D:C6:F8:29:CC:9D:05:9B:08:37:7C:F9:9B:FE:CB:AC:C9:09:15
Certificate issuer: /CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Certificate serial: 019425220BD2914EF48EBBC8DF9236D09E58
Authority key identifier: EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/hB3G-CnMnQWbCDd8-Zv-y6zJCRU.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 85.117.236.0/24 maxlen: 32
85.117.237.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0b:d2:91:4e:f4:8e:bb:c8:df:92:36:d0:9e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=841dc6f829cc9d059b08377cf99bfecbacc90915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:23:af:94:da:64:dd:6b:1c:62:93:ff:80:
b2:12:c0:89:51:b4:97:80:6a:62:61:c5:1f:78:52:
66:ef:04:5c:38:35:65:2c:ac:d6:0f:3b:8f:51:53:
e1:56:5f:6a:5a:ab:e5:72:f7:5e:fe:1b:00:19:5f:
c4:af:92:03:80:cf:d1:1a:44:27:e1:9b:20:d8:61:
f5:84:ed:72:d0:db:47:3c:b9:b3:72:15:6d:78:ef:
12:f2:2c:44:d2:5d:cf:5e:45:e5:f0:3e:51:91:74:
c5:8b:bd:5c:99:7d:d3:57:b4:b7:89:3b:b9:91:1b:
4c:6f:4f:4f:24:f0:a4:49:41:ad:d1:09:98:84:a4:
f1:14:a4:8a:4b:07:9d:5b:0f:05:3c:09:94:04:e2:
be:43:3f:a1:20:7f:e8:c2:56:ca:ac:42:ec:a2:db:
6f:68:59:ea:d4:77:f3:0e:28:5c:5c:94:fa:b9:aa:
35:e4:9f:74:ad:4a:9e:b1:fb:88:10:67:68:99:39:
d3:84:cc:e2:84:e1:c8:9e:c6:4f:82:37:7b:52:de:
20:78:b1:29:99:d1:73:19:85:68:e0:bb:65:83:a3:
c6:0e:48:2c:3f:e2:a0:fa:80:5c:c7:f7:11:5e:57:
3f:79:2d:20:ba:89:fe:15:50:46:6c:f3:e5:80:01:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:C6:F8:29:CC:9D:05:9B:08:37:7C:F9:9B:FE:CB:AC:C9:09:15
X509v3 Authority Key Identifier:
keyid:EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/hB3G-CnMnQWbCDd8-Zv-y6zJCRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.236.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:f2:d3:be:f3:09:c1:4d:a8:28:16:0f:50:46:2a:e1:75:dc:
07:40:2c:2a:79:50:67:1f:dd:80:55:d3:19:e0:1a:89:15:60:
33:69:6f:ed:d4:fe:87:a5:5b:43:9a:4f:75:36:e3:8a:49:5e:
e3:0b:78:32:3c:38:4e:c9:0c:aa:42:a7:a8:be:69:16:df:a0:
0a:60:97:07:20:42:81:7c:9e:ba:f4:15:ca:d2:a5:2d:bd:cc:
2f:17:47:84:0e:10:54:b4:35:55:c8:e4:95:ec:8f:bf:ac:19:
f8:99:6a:0a:87:ed:0b:47:f7:bd:39:9c:f6:5f:b6:7c:d9:c4:
30:75:c5:4a:55:6a:ed:32:7d:0f:2a:7a:61:45:2a:59:aa:a3:
6d:e4:e0:7b:c8:98:59:2c:a1:2f:dd:25:65:2c:f2:36:eb:c9:
32:14:56:07:49:58:9b:cf:9a:a2:f7:5e:54:19:da:c9:56:4a:
e4:a6:dd:dd:2f:1f:eb:21:59:64:a2:cf:5a:44:a2:f4:d1:09:
26:9f:c6:64:93:86:4d:ba:b3:bc:87:ff:f7:11:2f:1b:7f:64:
a6:1e:65:68:1a:92:4b:e6:74:68:d0:46:b2:90:2f:d0:4c:07:
70:be:30:4b:81:a5:4d:c2:d4:6d:a3:6b:47:d1:ee:c6:50:3e:
3f:79:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:43:43 2025 by rpki-client