Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/f9JCdqsJLWfadd987fFlDNk7mdM.roa
File: f9JCdqsJLWfadd987fFlDNk7mdM.roa (raw, json)
Hash identifier: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=
Subject key identifier: 7F:D2:42:76:AB:09:2D:67:DA:75:DF:7C:ED:F1:65:0C:D9:3B:99:D3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 01942067EA1B32A66A4677EBBFB4A4FC317D
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/f9JCdqsJLWfadd987fFlDNk7mdM.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209345
IP address blocks: 85.208.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ea:1b:32:a6:6a:46:77:eb:bf:b4:a4:fc:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd24276ab092d67da75df7cedf1650cd93b99d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:28:9b:40:37:08:b4:42:91:82:e6:f2:f0:
e9:ba:51:10:fa:42:8e:d6:f6:8b:49:81:9d:6f:7b:
89:dc:cd:c4:c1:b5:eb:13:b3:5e:8d:9c:91:4e:b9:
f7:dd:b4:51:a6:af:ff:f2:d0:16:46:7e:09:95:c7:
83:16:20:79:75:b9:26:00:20:46:45:79:9f:18:ff:
b6:86:e1:e5:19:43:6d:c2:b2:23:77:59:1e:b9:0a:
b0:fb:36:71:54:ab:90:b8:c6:d8:2e:7c:6b:22:db:
7b:a0:0f:b3:05:a5:24:89:7d:b6:ec:8f:ce:cd:15:
9b:cf:d5:6b:01:83:26:c9:5a:d4:8e:2b:77:d6:87:
e2:93:71:29:51:86:fd:c9:d1:d2:ef:82:14:6c:62:
5a:82:90:82:79:1d:25:81:a8:b3:1a:09:01:d4:68:
a4:be:20:49:35:8c:a2:b5:a3:67:b9:43:60:2a:33:
0a:6d:50:3d:19:0a:a1:b4:62:3f:de:cf:3a:2f:77:
2a:f0:7f:51:32:14:9b:3f:5a:76:f9:52:a7:82:e5:
f4:20:77:02:34:d4:81:ac:25:6c:b1:57:c7:7a:f2:
40:35:42:71:59:e0:57:d7:a4:11:7f:87:18:57:31:
de:d1:6d:e6:86:c1:0d:3f:79:9c:81:72:91:e8:68:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:42:76:AB:09:2D:67:DA:75:DF:7C:ED:F1:65:0C:D9:3B:99:D3
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/f9JCdqsJLWfadd987fFlDNk7mdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1a:a2:65:88:9d:11:bd:a2:e6:7c:6d:a5:17:ce:6b:b6:48:
51:a3:b5:a8:7e:34:6e:e8:7c:92:9c:5a:9a:8b:c2:3c:38:0d:
8f:4f:c6:aa:c6:36:85:19:79:7e:23:c7:22:40:81:26:a0:53:
23:66:95:6c:6d:3b:0c:e5:ca:2f:45:96:7a:b7:a7:3a:a2:22:
90:9e:8c:af:8b:5f:71:3b:88:6e:32:fc:e0:92:7e:19:68:7e:
46:2a:42:c4:97:f6:9a:9c:1b:24:d2:3e:94:b6:93:07:4a:47:
cf:94:af:3a:57:08:45:40:3b:ce:33:0c:e6:36:fb:99:2b:ee:
07:17:9c:92:be:1d:84:94:b4:83:65:2d:4c:78:4d:57:63:e5:
d5:b1:e6:10:5a:13:41:bc:c0:75:9c:15:bd:b9:5c:de:0c:db:
86:83:64:15:f2:5d:4b:2b:3b:e5:77:7a:d2:15:25:50:8b:cc:
22:80:01:4a:aa:a1:15:96:a3:e4:16:cf:d7:cd:a7:12:48:db:
52:5c:75:78:11:89:d8:fe:ec:77:35:d1:cf:fe:a8:42:44:5c:
34:12:57:1c:73:4d:2e:de:80:83:1c:d5:51:eb:62:2a:f4:57:
f1:b2:6d:67:66:9e:52:d4:b8:c4:5b:75:29:56:a9:fb:8a:5c:
ec:7d:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:33 2025 by rpki-client