Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/1-K4Qi087lrzvjbVOKyn3qBc1YDQ.roa
File: 1-K4Qi087lrzvjbVOKyn3qBc1YDQ.roa (raw, json)
Hash identifier: BN7XzO6W1te47rGpgTSOjeqKmqwz59riUfU96uugQpE=
Subject key identifier: F8:AE:10:8B:4F:3B:96:BC:EF:8D:B5:4E:2B:29:F7:A8:17:35:60:34
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0194AEB41C418D5FFBB988CCBB5246DA80DB
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/1-K4Qi087lrzvjbVOKyn3qBc1YDQ.roa
Signing time: Tue 28 Jan 2025 20:57:06 +0000
ROA not before: Tue 28 Jan 2025 20:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 85.117.236.0/24 maxlen: 24
85.117.237.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.73.200.0/22 maxlen: 22
185.73.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:b4:1c:41:8d:5f:fb:b9:88:cc:bb:52:46:da:80:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 28 20:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8ae108b4f3b96bcef8db54e2b29f7a817356034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:bd:a8:8c:72:4c:cc:cf:4f:0d:ad:2d:ea:
45:7c:76:4f:9b:37:87:67:cd:dd:36:f6:81:a4:ec:
9d:11:94:82:7d:ed:b1:14:0f:24:ff:39:09:9c:7b:
ce:58:90:5e:b6:7c:a4:80:20:07:9e:97:3c:d2:7b:
8a:dc:59:e3:be:1c:4c:7f:3a:51:a1:67:23:13:18:
30:43:1a:49:6a:4e:ad:75:20:e3:bb:ea:9d:b1:79:
59:5c:a5:ba:26:92:29:48:6c:21:20:fb:54:cf:1a:
4d:34:a5:8d:0c:84:91:e6:cb:2d:bc:61:94:0c:3f:
c9:10:7a:79:11:0f:33:05:a2:e0:41:34:79:81:ca:
50:8f:de:57:bc:f7:c5:7b:ee:5d:75:f3:fb:f6:e2:
b1:13:63:f0:27:8d:da:aa:99:f4:36:ef:d7:57:01:
ce:fb:c5:eb:fd:de:ee:4f:30:06:32:2b:e5:6f:fd:
7c:c8:2b:b9:62:50:ab:69:95:06:7a:97:8a:b1:f6:
e5:10:ef:c6:1e:9c:69:66:36:c6:a4:0f:4e:4b:e4:
5f:70:99:21:76:79:ad:8a:bb:f7:ef:19:b3:79:be:
18:80:03:36:65:d2:56:66:00:25:ea:f5:9d:24:ef:
09:d2:0f:7e:96:b9:d0:b2:3d:31:7f:f3:cf:f5:55:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:10:8B:4F:3B:96:BC:EF:8D:B5:4E:2B:29:F7:A8:17:35:60:34
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/1-K4Qi087lrzvjbVOKyn3qBc1YDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.236.0/23
185.17.113.0/24
185.73.200.0/22
Signature Algorithm: sha256WithRSAEncryption
99:de:26:cd:35:34:06:21:4d:6b:e4:d7:d4:9a:2b:5b:d5:c8:
06:19:f6:85:14:aa:89:9a:aa:f1:97:75:db:9c:47:ba:c6:0b:
71:b4:00:55:de:2f:5a:7f:97:75:95:b2:46:a2:d8:03:8f:6d:
75:37:e7:5e:08:7d:f5:e4:63:b1:c4:0d:9c:32:c0:32:fd:e6:
d8:c8:70:e8:12:d7:55:0a:c7:6e:19:ed:c3:fb:2d:76:83:ec:
1a:0a:f5:8b:d7:ec:45:5a:aa:68:6e:3e:5f:fd:02:ec:8a:25:
60:ce:15:0b:4a:9f:8c:2a:ae:72:5f:f6:d7:9a:54:94:53:23:
49:9b:dc:29:0c:2f:6f:16:b2:8a:f0:f2:37:db:98:17:1b:c5:
9b:b9:b9:65:ae:93:97:fd:29:76:fb:7e:aa:5b:5f:90:e8:80:
d1:96:3b:f1:51:86:ce:af:e5:20:ed:4a:3c:0e:b5:e9:46:59:
03:22:22:ea:2d:1a:24:55:39:94:c6:90:61:1d:e2:1e:fe:3e:
05:e9:54:46:f9:71:84:39:45:9a:2f:7d:e2:f1:7b:ca:d8:34:
c1:df:d7:22:fd:e5:d4:36:58:9a:1b:f5:30:da:2a:88:6c:aa:
21:b8:64:9e:18:b0:02:a8:03:a6:14:44:f1:78:27:6e:63:81:
89:91:76:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:13 2025 by rpki-client