Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/xR8JRniMXIcnxz5B1H7wwKMwL8E.roa
File: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (raw, json)
Hash identifier: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=
Subject key identifier: C5:1F:09:46:78:8C:5C:87:27:C7:3E:41:D4:7E:F0:C0:A3:30:2F:C1
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 0194221FE273214383011F120DAA05B9F3F7
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/xR8JRniMXIcnxz5B1H7wwKMwL8E.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208769
IP address blocks: 85.208.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:73:21:43:83:01:1f:12:0d:aa:05:b9:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c51f0946788c5c8727c73e41d47ef0c0a3302fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:5d:a8:39:14:33:d1:10:fe:a3:e5:11:22:
2d:5c:e4:2b:a0:4b:2b:55:fd:33:42:d5:48:48:15:
9f:c8:24:5d:83:a5:a4:0b:b7:25:d3:2c:9e:fa:ae:
c3:c3:6c:23:2f:6a:f5:47:ff:81:d5:28:02:e5:57:
6f:f2:a5:e3:f3:eb:70:d0:d7:d1:20:d4:fe:39:9c:
2b:88:d1:a2:e8:83:05:a3:21:26:ac:41:00:f1:32:
1f:42:e2:7c:6d:07:c8:42:c5:53:7f:af:ac:0a:6d:
d8:93:3d:0e:00:de:fd:66:6d:ec:99:c8:ca:01:3a:
df:e4:ca:77:87:a9:b5:81:98:49:b4:f6:ab:49:f0:
7d:19:f2:de:97:47:24:95:32:1b:b6:8c:1a:16:22:
f9:6a:0a:f2:e4:cf:13:60:56:8f:b2:b0:36:f5:32:
77:3d:85:59:7b:07:5c:6d:96:a7:4e:10:f0:39:af:
48:dd:c8:db:70:3f:89:60:c0:87:22:5e:2d:84:e5:
25:ae:4f:4f:82:fe:cb:58:de:e1:1f:f7:02:a1:f8:
94:cc:ed:52:60:31:42:23:21:2d:fc:1a:75:7b:71:
94:d2:d5:66:b9:d7:25:79:c2:bc:19:80:f8:35:62:
bd:22:53:99:98:6e:f9:52:2d:eb:c8:18:80:be:d5:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:09:46:78:8C:5C:87:27:C7:3E:41:D4:7E:F0:C0:A3:30:2F:C1
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/xR8JRniMXIcnxz5B1H7wwKMwL8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.102.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7e:64:a7:68:11:4c:82:9f:6d:38:4e:24:55:16:96:81:3f:
ef:10:e8:b2:e7:1b:67:9a:98:a4:e7:89:30:61:7a:6f:6d:91:
d1:53:a9:f8:f7:8a:fd:47:8e:5f:d9:3f:08:57:f2:37:2e:d9:
44:1f:c2:2e:17:ce:e5:2f:a9:79:e3:ae:1c:7d:5c:01:87:04:
58:b7:a9:56:e2:c8:10:54:63:73:35:4c:9d:17:aa:aa:42:dc:
df:af:fa:ee:48:fd:42:d4:60:ff:79:9e:eb:43:47:10:e9:ea:
bd:7e:dd:d3:11:0a:c0:ba:77:8e:d9:55:9d:65:d9:81:c8:7b:
47:33:e2:a8:6b:55:7e:75:60:ca:c1:39:f2:6b:e1:c0:1c:59:
66:86:86:e9:87:63:86:f2:91:ef:fd:e7:be:71:cd:7f:30:ca:
ef:75:59:b8:e4:7a:f1:19:9b:3b:99:b6:96:30:4c:bc:dc:70:
1a:7e:fd:c3:00:4f:c6:8d:28:6f:e8:69:50:01:b9:e7:ea:93:
d1:bc:b7:b7:03:a3:00:5a:4c:2e:f2:43:62:b2:7e:95:88:ea:
cb:1c:7f:5f:d0:3e:66:26:02:6d:97:4b:d8:08:e1:f5:72:2a:
1a:31:9c:01:29:eb:b0:eb:3c:55:b3:75:42:44:b5:70:65:15:
c6:ca:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:26:58 2025 by rpki-client