Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/b9uFZXxchqu_WU8UVL2lcEelg1M.roa
File: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (raw, json)
Hash identifier: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=
Subject key identifier: 6F:DB:85:65:7C:5C:86:AB:BF:59:4F:14:54:BD:A5:70:47:A5:83:53
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 0194206801B6337E62699D663BD835F95F28
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/b9uFZXxchqu_WU8UVL2lcEelg1M.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34752
IP address blocks: 85.116.32.0/19 maxlen: 19
91.102.248.0/21 maxlen: 21
2a01:7b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:01:b6:33:7e:62:69:9d:66:3b:d8:35:f9:5f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fdb85657c5c86abbf594f1454bda57047a58353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:c2:88:cf:b3:9d:e5:17:ec:26:0d:55:7a:
f0:df:5a:e5:a5:16:b8:2c:9f:c8:19:b6:ae:f1:a5:
1d:5f:b7:08:78:1f:77:2b:a0:84:1a:1c:d8:c6:16:
08:77:14:b0:01:a6:26:ce:5b:9f:bd:82:20:85:d8:
77:fc:4f:81:c6:cc:74:66:a2:73:b4:c6:cd:ed:6f:
ae:40:17:b3:8f:e6:0c:4c:a0:b5:31:e1:74:06:e6:
b1:fc:06:b4:00:89:b9:8d:f8:c1:52:37:70:da:bc:
28:3b:d4:4f:44:95:12:c6:08:61:e2:91:6b:2d:c0:
e4:a4:fa:f6:be:3a:1c:35:5b:e3:30:60:8e:da:6b:
72:1b:32:70:05:83:19:b4:e6:7c:08:75:53:d8:ca:
7e:85:e3:84:63:bc:77:da:3b:49:29:3c:da:f2:71:
08:74:e4:08:4f:aa:d7:28:30:e8:36:1e:24:23:f1:
fb:09:a5:8e:ee:f6:76:32:1f:cc:08:d5:db:ba:3f:
76:00:36:dc:c9:fd:cb:6a:19:b7:32:8a:9f:37:4d:
7d:d6:a9:6c:35:4d:d1:ec:42:fc:27:0d:5a:59:70:
ec:51:bd:c2:cc:80:d2:fa:aa:3b:ea:fb:1d:f6:8b:
02:a1:c4:d0:f9:fd:3f:9e:0b:e2:28:ed:9d:7c:63:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:85:65:7C:5C:86:AB:BF:59:4F:14:54:BD:A5:70:47:A5:83:53
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/b9uFZXxchqu_WU8UVL2lcEelg1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.32.0/19
91.102.248.0/21
IPv6:
2a01:7b0::/32
Signature Algorithm: sha256WithRSAEncryption
34:8f:ba:a9:7a:48:f9:24:3a:e0:28:1d:fa:a6:73:b5:d0:94:
4c:0a:08:a8:b6:e5:8f:9a:e6:4f:34:75:c7:99:28:3b:d0:98:
cc:62:2c:e8:41:48:28:bd:2b:3e:1b:e2:45:89:ae:bf:6d:41:
e9:c8:39:9e:8e:d4:8c:25:c4:89:45:f3:95:54:e6:a3:52:88:
83:c3:43:4c:04:54:1b:86:05:23:a9:60:06:a9:30:40:6b:c1:
23:c2:c6:a7:95:cd:42:e0:9b:49:7c:7c:91:71:40:60:a1:ea:
e8:50:63:3d:16:57:63:3d:7e:e2:ce:36:ff:e6:cb:fb:e8:21:
2a:0f:7a:14:ea:97:5e:2e:90:cc:73:50:b3:5c:3c:13:02:be:
db:9d:79:e7:f3:18:a8:25:27:fb:68:29:bd:1d:b8:1e:a8:29:
9a:cf:e8:88:5e:31:93:83:69:aa:c8:e7:6f:d9:72:f8:22:e8:
ab:d9:36:02:f4:13:05:16:18:25:65:7d:e2:88:1d:29:ed:d2:
28:a3:00:92:2a:54:1d:5d:22:ad:1c:f9:ec:16:ca:15:46:01:
b6:70:d8:70:37:19:83:a9:7a:87:4b:0b:37:49:35:76:ee:fd:
c0:5e:8d:3d:d2:44:77:1a:56:43:0f:38:77:9e:07:49:19:90:
db:61:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:39 2025 by rpki-client