Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/nJekGUdzLnW-TjQjig7_IehTMxo.roa
File: nJekGUdzLnW-TjQjig7_IehTMxo.roa (raw, json)
Hash identifier: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=
Subject key identifier: 9C:97:A4:19:47:73:2E:75:BE:4E:34:23:8A:0E:FF:21:E8:53:33:1A
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 019425FDB7C051A35E50FDB80123A11D078C
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/nJekGUdzLnW-TjQjig7_IehTMxo.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60070
IP address blocks: 85.208.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b7:c0:51:a3:5e:50:fd:b8:01:23:a1:1d:07:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c97a41947732e75be4e34238a0eff21e853331a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:ef:e8:68:64:97:0c:93:36:14:b4:d1:ff:
3f:f4:d3:6e:71:2c:9b:69:b7:ec:ce:7e:90:d5:4d:
70:9c:c1:a6:11:cd:5c:70:19:d5:59:59:7c:35:06:
eb:af:5e:7b:8a:46:07:de:78:59:da:d5:de:56:81:
ed:0c:c9:02:76:a0:38:c8:34:27:85:57:d1:c9:e9:
bb:c5:e2:10:94:4e:14:fe:b7:21:fa:3a:1d:98:d1:
33:c7:f4:6f:e9:37:ba:81:2c:2e:e6:28:4d:d7:40:
e2:20:f1:8a:90:e2:3c:cf:28:ce:26:fd:55:27:e9:
01:ce:9d:64:25:55:31:9c:c6:bb:89:15:9f:1e:50:
b9:15:47:27:c6:68:67:29:b0:81:31:7c:26:a5:9b:
6b:b3:2b:df:39:35:a2:fb:79:7b:99:16:e4:30:2e:
ce:e9:3e:37:38:94:1a:b8:37:8f:42:c6:3b:fe:cd:
b0:7a:79:08:51:a5:d0:99:94:8c:4c:24:1c:09:39:
6c:0a:da:64:7c:04:b9:d6:8a:9a:0b:9f:f5:6b:31:
a7:e3:9d:0f:c5:4a:54:e7:7c:df:3e:ef:53:1c:4c:
a3:b9:84:d2:9b:8b:4e:c9:db:98:5c:10:0d:99:21:
0f:c3:27:93:2d:c0:a6:85:85:0c:58:fd:6c:f3:6e:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:97:A4:19:47:73:2E:75:BE:4E:34:23:8A:0E:FF:21:E8:53:33:1A
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/nJekGUdzLnW-TjQjig7_IehTMxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:13:4c:e0:74:8f:10:7e:4f:82:bc:4c:57:81:d9:8c:af:e5:
a2:f4:ce:50:33:86:e3:83:be:96:8b:05:97:d1:8f:e3:fc:c0:
a7:0f:c9:bb:c9:f8:39:c8:33:56:9a:b6:24:4f:18:66:c1:7d:
bc:6e:42:14:6b:77:2f:8d:b9:6e:38:19:48:ab:03:b9:ae:63:
48:f5:f2:9e:af:60:7e:e0:55:83:ec:3e:37:20:d7:be:c8:fc:
56:5e:b1:b8:5d:60:4f:fb:d8:74:9d:b7:42:b8:ce:c9:8b:7a:
7b:f7:f4:9e:e7:a0:5d:c5:8b:93:28:2a:86:18:26:47:38:8f:
4f:a4:38:50:96:be:38:e5:55:f4:dd:5b:5c:41:a8:b6:c3:22:
bb:ed:b7:0c:44:0b:3a:cf:e0:d1:9e:ae:44:3f:25:b1:75:12:
d0:c8:12:26:85:51:71:e4:94:98:ae:60:98:f1:59:0e:dc:d6:
f8:65:0e:e0:32:60:32:37:01:5d:02:da:fb:c7:93:74:82:73:
62:54:69:ed:01:79:91:c2:30:f6:f5:33:66:ea:c7:f6:d7:92:
7c:2d:9d:2e:08:2f:fe:89:48:d1:95:ec:f8:6c:00:5a:85:9f:
95:54:86:55:de:53:7c:01:7b:b5:88:ec:4b:cd:98:36:a2:ff:
52:4c:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:03 2025 by rpki-client