Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa
File: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (raw, json)
Hash identifier: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=
Subject key identifier: F9:3F:02:29:E8:01:3C:EB:F1:E6:B6:50:41:54:C7:27:5D:4D:65:F8
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0194266BEB837A50809689CD4C9051F78A61
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41211
IP address blocks: 85.112.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:83:7a:50:80:96:89:cd:4c:90:51:f7:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93f0229e8013cebf1e6b6504154c7275d4d65f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:6b:21:0b:bc:d3:ec:42:49:75:12:a0:64:
28:3f:5b:d9:03:d1:dc:5c:df:c7:a5:c8:20:08:b0:
cd:be:0a:6c:2f:83:96:e3:9e:1a:bb:04:b8:97:04:
b1:02:bd:b8:a2:db:50:44:89:31:0d:45:37:8b:1c:
c9:3d:b2:7e:ed:fc:0a:03:80:fd:69:c3:a2:37:0d:
4b:fa:59:1c:78:bd:65:95:b5:d2:aa:58:18:06:ab:
0c:cd:cc:9a:c2:1d:bc:35:c4:03:9a:61:0b:c2:2e:
ba:e3:de:f1:86:ba:34:0f:cd:de:28:87:1d:17:36:
d4:84:d0:a9:85:10:b7:74:a7:62:59:c4:af:47:99:
a1:f6:e0:4a:49:43:8e:f4:3a:c5:0e:62:ab:2c:e0:
37:c6:85:13:90:f6:4e:c5:0e:ac:94:23:19:1e:56:
ed:e7:21:4d:be:5b:cf:42:b9:89:e2:d7:41:59:39:
96:bd:65:d2:6f:3b:4c:4c:e0:b5:58:72:22:2d:02:
f1:ac:79:3d:28:88:b7:fe:ad:30:9a:ac:f5:c0:c1:
c1:85:f4:41:bb:f0:a6:b6:c1:d1:53:61:fa:ef:a4:
30:8c:d0:53:1a:4d:d2:49:d5:17:3f:b1:5a:58:17:
e0:60:23:56:ff:72:0a:5d:0b:cf:33:b6:ef:d6:82:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:02:29:E8:01:3C:EB:F1:E6:B6:50:41:54:C7:27:5D:4D:65:F8
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.81.0/24
Signature Algorithm: sha256WithRSAEncryption
53:12:be:a3:f0:d3:af:d8:c7:ff:ff:45:57:f1:6e:b8:fc:c4:
a0:67:04:79:b4:65:8c:61:81:1e:b1:8d:2e:d2:6e:6f:6c:ad:
2b:81:99:8d:05:d6:f6:44:34:cf:21:75:86:b3:8a:8d:90:02:
a7:42:65:56:94:bc:22:82:af:e0:f5:0e:64:2b:17:b9:ff:98:
36:df:2b:2d:6b:7d:42:eb:6d:52:f8:9f:c6:6e:b8:bd:18:f2:
3b:68:2e:68:44:6f:e3:0d:f2:57:27:bb:2c:98:b6:2e:08:c6:
2b:fb:fe:09:a1:01:ec:8e:d3:2e:f4:ab:6f:39:c6:72:d6:59:
8b:13:4d:ab:cd:d0:79:95:fc:c7:06:ed:b4:61:cc:22:ac:ca:
e8:b5:45:62:46:27:aa:e8:12:d3:46:7d:82:e6:c2:c4:ca:9a:
3b:cb:6c:c9:52:65:26:a2:ef:0b:ca:0a:4d:50:db:40:fb:d7:
92:26:1e:0d:d1:5d:65:d7:3b:c3:0f:1e:25:0e:d0:ef:18:ab:
7e:d8:e6:0a:3c:f3:90:b1:d8:46:98:4b:ff:28:d5:df:50:13:
3d:d0:bd:a4:a6:1f:ef:0e:4d:60:57:7f:d0:87:04:f2:6e:ba:
6b:27:72:6f:b3:23:61:b5:93:c3:56:13:0e:57:bb:76:ae:2c:
2c:ed:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:38 2025 by rpki-client