Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/PFeWbSIp2oj_TqrDumfnTLH73EM.roa
File: PFeWbSIp2oj_TqrDumfnTLH73EM.roa (raw, json)
Hash identifier: UcYYjAHi4KJALU4CMr3iLInfrvyna7odLqJtuWtrvBI=
Subject key identifier: 3C:57:96:6D:22:29:DA:88:FF:4E:AA:C3:BA:67:E7:4C:B1:FB:DC:43
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 0194959F83FE0D60F50758F944F5AB8C875E
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/PFeWbSIp2oj_TqrDumfnTLH73EM.roa
Signing time: Fri 24 Jan 2025 00:04:06 +0000
ROA not before: Fri 24 Jan 2025 00:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216244
IP address blocks: 185.85.72.0/24 maxlen: 24
185.85.73.0/24 maxlen: 24
185.85.74.0/24 maxlen: 24
185.85.75.0/24 maxlen: 24
185.160.28.0/24 maxlen: 24
185.160.29.0/24 maxlen: 24
185.160.31.0/24 maxlen: 24
2a05:abc0::/29 maxlen: 29
2a05:abc0::/48 maxlen: 48
2a05:abc0:1::/48 maxlen: 48
2a05:abc0:2::/48 maxlen: 48
2a05:abc0:3::/48 maxlen: 48
2a05:abc0:4::/48 maxlen: 48
2a05:abc0:5::/48 maxlen: 48
2a05:abc0:6::/48 maxlen: 48
2a05:abc0:7::/48 maxlen: 48
2a05:abc0:8::/48 maxlen: 48
2a05:abc0:9::/48 maxlen: 48
2a05:abc0:a::/48 maxlen: 48
2a05:abc0:b::/48 maxlen: 48
2a05:abc0:c::/48 maxlen: 48
2a05:abc0:d::/48 maxlen: 48
2a05:abc0:e::/48 maxlen: 48
2a05:abc0:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:95:9f:83:fe:0d:60:f5:07:58:f9:44:f5:ab:8c:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 24 00:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c57966d2229da88ff4eaac3ba67e74cb1fbdc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:5a:5e:1b:9c:ed:22:4f:f7:e9:6f:ba:ee:
1b:f8:d2:83:21:f4:14:d6:aa:d4:1f:df:53:51:0a:
3b:cb:6a:5c:bb:54:41:9d:06:db:a8:a9:1c:9c:73:
ea:77:ec:dc:97:36:32:ee:64:c3:5a:fa:fd:ac:d1:
95:03:9f:90:fa:3b:64:4f:32:f2:25:a5:a5:6e:e8:
5b:c8:bd:b2:16:33:32:a5:07:64:1e:10:37:55:dc:
ab:69:e1:6e:92:37:35:a5:4f:ac:31:80:3e:bb:02:
d7:70:bc:97:c6:fe:db:96:e6:70:fa:e5:50:54:b3:
b5:07:f8:79:04:35:8a:10:7d:ac:1f:91:ab:9a:8a:
ee:29:5f:8a:90:05:1a:e4:7f:40:b8:13:7b:fd:a8:
89:27:08:2e:bd:ec:7b:b4:59:f2:6c:f9:d1:8e:8d:
cb:70:21:2c:d3:31:a4:59:87:85:a1:c2:6c:54:db:
94:21:98:0d:88:6a:1f:75:53:ff:e2:4a:94:b3:99:
ac:c4:42:73:96:fd:0c:91:a1:93:64:07:40:00:a1:
99:f0:ca:e7:d0:d2:3f:97:a7:b2:34:f8:ae:a3:86:
fb:31:cb:6e:6b:f1:1e:bd:16:bd:85:81:97:c4:7d:
3c:ad:b3:0f:9d:95:8f:5a:3d:e4:f8:be:60:5a:f1:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:96:6D:22:29:DA:88:FF:4E:AA:C3:BA:67:E7:4C:B1:FB:DC:43
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/PFeWbSIp2oj_TqrDumfnTLH73EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.72.0/22
185.160.28.0/23
185.160.31.0/24
IPv6:
2a05:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
44:17:09:46:f8:b5:68:30:47:50:5f:49:6b:62:67:f3:ac:00:
dc:6d:9a:38:e3:44:1e:8d:79:15:6d:1c:ed:bb:2f:aa:d3:98:
27:a7:2e:eb:c4:11:75:85:64:91:c3:cc:1d:cb:dd:bf:a2:51:
4b:7c:c2:6f:fd:69:b8:73:3c:6d:4c:a8:4c:c2:53:21:66:3e:
7b:0a:93:ad:79:8d:10:f0:02:9b:c0:cd:05:2e:8b:3b:27:53:
5d:0d:dd:ee:34:9f:7d:b3:8a:cc:ef:28:44:da:3b:7c:1f:c7:
75:5b:00:5a:30:b1:4e:c1:d0:f2:5a:2d:88:dd:80:37:d0:a1:
05:81:f5:e6:49:12:f4:b6:e9:c4:5f:e5:b6:bd:e8:e9:29:ef:
37:b4:a0:15:ec:87:40:8e:59:3a:32:d3:c9:ee:df:27:68:39:
42:ab:25:0a:97:a9:96:ea:9b:d2:51:7e:13:5e:93:74:f7:e7:
b6:b4:00:d6:60:b4:59:6b:9c:7a:97:c8:2c:36:f3:cd:12:7f:
74:91:81:b1:00:04:f3:c1:f8:65:64:e9:62:30:14:64:e1:a4:
58:49:0b:cf:c7:3b:52:b9:8f:5f:43:65:be:27:f0:e9:ba:dc:
a0:e6:c9:01:33:0d:14:4d:c0:2c:93:34:08:45:c7:38:c3:78:
83:d9:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:49 2025 by rpki-client