Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/iYAJK9Z1vSabwblAeb2bbovBgWQ.roa
File: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (raw, json)
Hash identifier: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=
Subject key identifier: 89:80:09:2B:D6:75:BD:26:9B:C1:B9:40:79:BD:9B:6E:8B:C1:81:64
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 0194266BA462D411859991A6C9281A3EB74D
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/iYAJK9Z1vSabwblAeb2bbovBgWQ.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209886
IP address blocks: 85.235.88.0/22 maxlen: 22
85.235.88.0/23 maxlen: 23
85.235.90.0/23 maxlen: 23
2a10:1ac0::/29 maxlen: 29
2a10:1ac0::/30 maxlen: 30
2a10:1ac4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a4:62:d4:11:85:99:91:a6:c9:28:1a:3e:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8980092bd675bd269bc1b94079bd9b6e8bc18164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:0e:a7:50:eb:55:e6:ea:64:cd:b2:27:3c:
fd:50:31:9a:43:5e:dd:40:27:25:47:b6:f3:8d:e0:
eb:a8:19:59:f5:f9:db:00:10:d8:50:ee:9b:62:33:
f7:2b:1f:c1:3c:41:ed:33:8f:d6:e5:a5:5c:6a:ab:
fa:83:ee:e2:5c:36:0d:3f:10:4d:25:b0:21:73:b5:
00:00:43:db:c3:9f:26:a0:d4:50:68:1a:5e:9a:f9:
d1:e2:c6:c6:1c:de:e8:18:ee:0e:60:17:48:a0:34:
fe:18:dd:06:ee:a0:6f:09:34:46:1c:18:77:56:44:
ef:83:04:c8:be:d3:83:94:69:de:81:fe:1b:b8:25:
ee:e3:ac:34:39:f2:71:3d:7e:9f:86:40:9f:8b:a8:
9f:51:ce:da:9b:18:30:4d:72:92:c9:df:3b:99:46:
42:5e:b0:b2:7e:f2:36:81:73:52:94:ba:88:28:ea:
bb:33:c0:f7:4b:af:ed:b2:1f:b7:80:67:04:eb:41:
46:f7:59:45:ab:4b:8c:dc:32:b1:33:69:51:20:00:
62:f1:e0:86:1e:82:da:b0:46:41:60:ab:28:25:4b:
14:64:68:6f:01:bb:c1:d3:bd:03:84:e8:b5:28:9e:
70:4a:24:7e:5f:6c:45:32:81:7e:27:a6:36:07:ea:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:80:09:2B:D6:75:BD:26:9B:C1:B9:40:79:BD:9B:6E:8B:C1:81:64
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/iYAJK9Z1vSabwblAeb2bbovBgWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.88.0/22
IPv6:
2a10:1ac0::/29
Signature Algorithm: sha256WithRSAEncryption
78:55:ee:32:34:74:75:3c:f1:1a:32:76:17:1e:8c:8b:54:ab:
53:6b:8e:ce:f6:34:d5:30:81:19:8d:f6:84:7e:89:9c:33:7e:
b6:11:97:eb:e6:2f:d0:8e:20:d6:d1:a0:02:29:d7:35:03:13:
77:60:a7:77:a5:c5:4d:bd:79:88:8e:22:9f:22:ce:b2:04:5a:
31:31:3f:fb:a2:24:54:26:19:b0:e9:11:84:a6:39:8c:3c:14:
7d:fd:c6:05:60:80:63:2a:6e:92:21:1c:e9:f4:da:60:46:f5:
f6:b1:2c:1a:a0:88:cd:a9:ac:f9:83:52:b9:fe:f4:e0:0c:c6:
31:ca:1f:88:ff:d8:c3:c7:b3:2a:21:41:82:49:77:b8:42:93:
95:b4:d6:3d:d9:4a:a5:3f:68:8f:b0:54:cb:f5:f8:ef:70:9b:
fe:c2:a5:c0:24:92:94:af:44:4a:61:24:1d:ed:96:6e:77:a9:
9a:5c:77:20:31:e9:51:1c:57:35:88:6b:5b:8f:19:a5:34:17:
b7:4e:04:32:d5:0f:b7:40:95:e9:ef:c0:e9:2b:c9:cb:12:13:
bb:8c:57:0d:47:51:45:e2:67:16:c8:1d:57:5b:6d:92:66:ce:
a2:1f:05:f3:3d:3c:92:13:d4:2c:09:91:6b:a6:05:79:16:bc:
38:87:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:51 2025 by rpki-client