Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa
File: Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa (raw, json)
Hash identifier: 62kAAv2Hh6q7YMgpvoYSR/SU5a88o0FYbuA/sB0zQYU=
Subject key identifier: 29:AD:29:8E:E5:36:7A:58:92:17:A9:00:03:8A:07:69:9A:04:BE:C0
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D658D24AE11B701DB689B6DBA974AB
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201382
IP address blocks: 85.91.105.0/24 maxlen: 24
85.91.108.0/22 maxlen: 22
85.91.108.0/24 maxlen: 24
85.91.123.0/24 maxlen: 24
213.208.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:58:d2:4a:e1:1b:70:1d:b6:89:b6:db:a9:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29ad298ee5367a589217a900038a07699a04bec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:9a:46:2a:87:eb:7d:ec:89:c6:4b:c6:ef:
9e:c4:79:a6:56:a4:ed:6a:5b:bf:68:03:9f:ec:89:
44:8c:a1:25:d1:23:e5:36:92:80:0c:63:4c:a5:da:
11:6c:f1:f9:36:d7:fb:15:13:b8:79:0f:82:69:cc:
63:ca:ad:f2:ce:9a:d3:a4:79:71:ad:ad:d0:a9:5b:
1d:47:da:62:89:7e:12:97:80:70:5c:f4:bc:e4:0d:
27:8f:da:9c:72:e0:d3:b8:29:bf:7b:84:ab:60:7e:
90:1a:e7:2f:f4:85:ba:c3:fe:ec:94:8e:de:a7:26:
00:aa:50:a6:a4:1a:f6:4b:60:a3:60:2e:5b:d9:74:
ae:08:0d:0c:0f:79:9a:a3:28:fb:f7:8c:64:7e:50:
98:a0:25:b8:83:76:79:d9:39:06:9b:49:40:79:e6:
94:7f:1d:d9:a4:b1:08:1a:07:54:46:84:bd:d7:74:
4a:28:48:8d:53:6e:2c:e3:eb:08:b6:c8:38:18:b5:
0b:71:7c:d5:d9:38:72:66:07:25:47:3a:16:d5:9a:
ec:fc:23:ba:13:04:64:80:24:4f:fe:28:5c:b6:c5:
09:4b:ee:91:fe:fc:18:c7:7d:f2:98:a2:81:2f:10:
2f:9f:31:f9:e8:46:bf:9d:d0:23:eb:7b:7a:71:6b:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:29:8E:E5:36:7A:58:92:17:A9:00:03:8A:07:69:9A:04:BE:C0
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.105.0/24
85.91.108.0/22
85.91.123.0/24
213.208.171.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6c:6a:a4:ea:f6:c9:7d:dd:9b:03:7f:8d:d5:5c:10:68:c6:
f6:c4:e7:83:f7:5d:e1:f6:56:d8:81:e0:60:83:31:f1:fa:80:
80:0e:6e:a5:96:47:b4:e4:42:bf:d6:09:17:50:f3:ac:58:d2:
04:da:60:39:cd:5a:73:5f:30:3d:9b:80:fb:8f:b7:0d:34:65:
ba:2a:b1:e1:de:41:cc:b2:d8:5f:e9:15:f1:69:f5:38:9e:e0:
af:13:f2:7e:4f:df:d8:0a:0f:fb:6d:6f:45:52:74:92:10:d5:
c0:3f:b8:5c:c5:de:a1:30:11:e7:5f:d2:da:64:7a:c3:36:c4:
ab:de:94:da:22:e7:c5:c7:5c:e4:db:dc:b8:2a:5d:c6:b9:1c:
81:27:53:47:2c:09:92:fb:53:1b:68:4c:d4:7d:e9:a4:0b:06:
46:29:a2:b5:cf:2a:04:8c:df:a0:e4:ad:ad:a5:a3:a7:43:de:
f0:d9:2f:38:44:7a:11:8d:8b:40:12:4b:89:01:94:cb:06:bd:
52:4d:e2:e5:ec:bd:14:4a:89:11:30:62:30:9e:6c:1e:f7:94:
3b:b3:16:58:4e:88:d4:9c:dc:43:7d:4f:02:f4:7d:23:04:4d:
f9:31:6b:ef:63:a8:98:af:51:97:a8:13:8d:db:1c:84:59:66:
96:a9:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:39 2025 by rpki-client