Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/2bbjZnItd_WfSUsxeSim-v-qB-g.roa
File: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (raw, json)
Hash identifier: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=
Subject key identifier: D9:B6:E3:66:72:2D:77:F5:9F:49:4B:31:79:28:A6:FA:FF:AA:07:E8
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 019421B25441DAC2BC2C999305C248CED7B9
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/2bbjZnItd_WfSUsxeSim-v-qB-g.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35019
IP address blocks: 85.158.128.0/21 maxlen: 21
85.158.128.0/24 maxlen: 24
85.158.129.0/24 maxlen: 24
85.158.130.0/24 maxlen: 24
85.158.131.0/24 maxlen: 24
85.158.132.0/24 maxlen: 24
85.158.133.0/24 maxlen: 24
85.158.134.0/24 maxlen: 24
85.158.135.0/24 maxlen: 24
185.156.236.0/22 maxlen: 22
185.156.236.0/24 maxlen: 24
185.156.237.0/24 maxlen: 24
185.156.238.0/24 maxlen: 24
185.156.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:54:41:da:c2:bc:2c:99:93:05:c2:48:ce:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9b6e366722d77f59f494b317928a6faffaa07e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:7a:83:40:07:10:bc:09:62:1b:eb:7f:55:
f1:4d:4a:2a:4b:9d:2e:1a:b8:a8:1a:b2:40:51:61:
67:df:c4:a4:dd:52:9e:6d:72:85:2c:a4:63:ec:21:
cc:a3:13:ac:67:a8:f8:1a:d6:ad:9a:4f:21:f1:02:
b3:c4:93:a8:96:2a:94:dc:5b:89:bc:82:79:a9:29:
d1:05:a2:51:71:d8:6a:d1:4e:1b:9f:73:a2:5c:6e:
23:29:b9:0e:1d:81:4e:96:44:93:9a:d4:f0:08:9b:
83:2a:07:46:d9:90:3e:23:f0:90:08:f7:a7:f4:31:
40:91:52:df:46:fc:b8:65:6b:57:20:03:45:5b:08:
db:65:50:32:2a:42:42:54:f3:ec:eb:6f:79:f9:55:
ae:8e:01:e0:11:6a:55:44:4c:41:65:69:80:40:7d:
c1:59:ca:8f:0e:5c:f0:53:44:81:a7:0a:57:87:48:
bd:ed:cd:0f:33:bc:15:e4:dd:e2:cb:ab:bd:f9:29:
22:b7:26:ef:79:0d:fe:4a:41:0f:99:99:85:3e:88:
1a:09:2f:82:e9:8b:c3:3b:a3:47:39:5f:79:f5:9e:
9e:bb:6d:bc:c5:99:73:65:b0:89:aa:ca:c2:c5:e9:
d8:4c:26:27:a7:08:0e:3b:fb:ea:54:00:13:ae:57:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B6:E3:66:72:2D:77:F5:9F:49:4B:31:79:28:A6:FA:FF:AA:07:E8
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/2bbjZnItd_WfSUsxeSim-v-qB-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.128.0/21
185.156.236.0/22
Signature Algorithm: sha256WithRSAEncryption
20:92:9a:8a:ec:76:13:6a:db:ea:21:b2:cb:ed:1e:6b:da:1f:
00:35:72:49:7b:6b:ea:3d:80:c1:98:d3:fe:65:a3:0a:e4:19:
66:44:ee:8b:68:2f:33:b8:cc:92:ff:50:eb:e7:ef:a8:a3:30:
a1:9d:ba:51:61:8b:a7:dc:fb:57:c0:1d:d2:ec:c0:11:41:d8:
8b:29:9f:4a:01:dc:be:5b:95:1e:5e:30:b5:b4:3f:b8:73:5a:
f8:5a:55:0c:9e:4e:dc:0d:49:03:d5:13:dd:6c:66:3c:21:2e:
e7:c0:39:12:e1:79:c2:16:bd:21:10:d5:84:c3:a9:18:f2:0d:
c9:4b:7a:dd:8e:d1:e7:6f:b2:e7:da:0c:6b:75:98:8b:43:0c:
2a:eb:de:a8:b4:1f:a5:ad:dc:5f:f7:c8:cc:17:02:bb:79:6f:
b6:b2:48:b4:62:ea:29:9f:ed:e8:26:e9:6f:c0:ef:a1:5b:01:
19:58:cf:2a:b7:d7:d1:b9:e1:c3:19:61:97:a1:4f:8b:2f:c1:
37:33:6b:a3:6a:78:96:40:34:88:1e:f8:4f:fd:69:26:0f:78:
d2:9d:2d:b3:59:6b:b2:7c:1f:26:71:c1:6a:69:ec:7e:9f:66:
a8:54:c5:89:7d:d4:4c:43:9d:b8:a2:0d:df:37:fa:f6:0b:d0:
2b:87:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:04 2025 by rpki-client