Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa
File: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (raw, json)
Hash identifier: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=
Subject key identifier: 47:4F:BF:2C:5E:8A:53:4B:9F:05:D2:47:2E:BE:43:D8:EB:02:66:C3
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 019420D653E0500AC08F4C3D7E18E8BF1668
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50563
IP address blocks: 85.209.180.0/22 maxlen: 22
85.209.180.0/23 maxlen: 23
85.209.180.0/24 maxlen: 24
85.209.181.0/24 maxlen: 24
85.209.182.0/23 maxlen: 23
85.209.182.0/24 maxlen: 24
85.209.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:e0:50:0a:c0:8f:4c:3d:7e:18:e8:bf:16:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=474fbf2c5e8a534b9f05d2472ebe43d8eb0266c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:e1:95:a4:5d:21:69:4c:59:64:ed:6f:82:
d4:57:87:c8:dc:48:2b:b5:44:62:07:49:bc:1a:ad:
9a:31:99:f8:ba:43:ae:84:f0:9b:21:ed:05:75:44:
76:1d:c2:b3:91:81:6e:f3:bc:87:20:0c:25:c9:a1:
36:a6:d9:c3:6e:b3:c2:c6:bc:65:5c:36:7f:bc:d7:
e2:8d:82:d7:c7:cf:6f:24:44:ae:ea:97:07:7c:80:
15:06:81:f2:d5:b0:05:9a:b1:93:62:92:c8:a4:8c:
8e:6d:49:52:76:55:2b:e9:45:7b:43:21:19:9d:ed:
e6:09:fb:f2:64:d4:bb:f1:17:4b:c1:f3:9e:1d:c8:
f5:f1:51:c7:eb:e1:44:e4:e7:38:bc:9f:c6:b4:38:
62:e0:37:8b:b5:5f:40:09:09:40:2c:78:c5:1c:84:
2e:c0:dc:61:19:c0:5b:d3:e4:9a:3e:cd:84:c3:f7:
a5:95:01:70:bf:7a:e8:9c:d1:ef:b2:63:bd:6a:0c:
ec:f7:b6:c7:39:ae:e3:b0:bd:db:9a:70:c8:22:69:
b0:44:89:0e:2b:05:9f:4a:23:09:bb:0d:3f:6d:87:
44:45:40:d3:5e:eb:95:6f:f4:e5:c4:17:a5:48:7e:
15:5b:5e:a8:96:89:0f:75:93:d2:e3:49:7e:82:c5:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:BF:2C:5E:8A:53:4B:9F:05:D2:47:2E:BE:43:D8:EB:02:66:C3
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.180.0/22
Signature Algorithm: sha256WithRSAEncryption
38:92:a0:52:7f:a0:57:8c:df:a3:29:94:9a:77:1a:78:59:a5:
2f:3f:46:9f:e2:f2:15:4d:6e:ce:51:f2:59:f1:f0:9b:09:0f:
03:31:cc:6e:ac:40:70:71:1a:dd:4c:1f:74:e5:4f:a2:1e:8e:
b9:bb:5e:06:6d:af:38:ff:44:ab:e5:81:62:05:f2:a2:8f:65:
80:8a:cb:17:9a:e8:65:dc:12:df:9e:07:6c:7d:04:56:06:27:
82:a1:bc:b5:bb:f3:cb:9c:da:8d:10:22:a5:7d:3b:8a:dc:d5:
0f:8a:b8:e5:49:60:f7:77:6a:e6:b2:a2:5e:6e:31:e8:40:f8:
bc:d5:2a:3a:79:b7:3c:50:c8:2d:96:cc:bf:54:c7:26:16:f4:
d1:92:13:7f:7a:4e:3d:65:9b:db:03:84:25:c4:c1:21:0e:51:
b4:ff:9f:80:aa:5d:4c:0b:f2:39:ac:43:b3:ac:81:1d:70:c9:
64:d3:9d:dc:6a:a5:8a:e6:7e:17:c0:31:9a:59:f8:5f:42:20:
34:10:48:2a:fa:05:12:58:1f:41:8a:9b:fe:11:42:c1:ea:54:
2e:be:4a:6e:e0:6b:ba:8f:00:49:7b:f9:a7:f9:71:88:1f:24:
31:24:41:fe:f0:99:b8:aa:40:d2:da:cf:0c:e2:b5:8f:7a:f4:
65:89:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:40 2025 by rpki-client