Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-GEsloWsIA1riTZJ7U7H9J7088.roa
File: 1-GEsloWsIA1riTZJ7U7H9J7088.roa (raw, json)
Hash identifier: 38RdBIJOjP7X3OaubxFtDlTM4wwowWFBI4vrACR+NHI=
Subject key identifier: D7:E1:84:B2:5A:16:B0:80:35:AE:24:D9:27:B5:3B:1F:D2:7B:D3:CF
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B600964BEFF6E0D8952736ABD09914
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-GEsloWsIA1riTZJ7U7H9J7088.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213944
IP address blocks: 85.133.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:00:96:4b:ef:f6:e0:d8:95:27:36:ab:d0:99:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7e184b25a16b08035ae24d927b53b1fd27bd3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:eb:57:0a:a6:42:17:20:5d:0b:4e:37:ef:
f9:ca:3d:cc:1c:41:4f:f0:23:88:59:66:bb:16:0b:
28:0d:51:47:38:a9:b8:aa:f6:63:49:9a:4d:fe:4a:
43:6c:5f:72:5a:16:63:4a:70:ed:8a:5b:51:a2:d1:
16:47:55:15:8d:5b:5e:67:61:51:90:99:05:7a:24:
d4:7b:b6:92:54:71:c3:ea:07:f0:3d:bc:c9:de:b2:
d7:0e:54:d6:04:8a:78:7e:0e:3d:db:0c:09:26:5c:
01:01:ba:96:d7:94:03:34:4d:79:4c:ac:bf:d7:c0:
1c:0b:85:6b:e0:51:2c:5e:bf:8c:a0:63:bb:68:f4:
12:a7:97:04:fa:6f:62:79:be:e9:c7:b4:58:2f:a2:
92:e8:56:7e:d9:95:d1:ae:96:d3:91:c0:95:2c:ab:
1f:27:16:fe:ab:5a:05:8c:bb:f0:aa:6d:a9:11:fa:
07:6f:44:6c:33:06:cd:66:18:4b:e0:a0:1d:3b:4e:
54:d0:d0:5e:6e:e6:07:d8:de:c4:e3:1d:27:ce:cf:
70:e2:10:94:7b:3a:cc:7b:8e:ad:e9:e3:4d:66:6c:
ca:06:83:fc:4f:22:51:bc:1c:8c:63:c0:22:a6:0f:
b7:7f:1d:ad:f1:18:85:00:da:c9:d6:1c:70:c3:61:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:84:B2:5A:16:B0:80:35:AE:24:D9:27:B5:3B:1F:D2:7B:D3:CF
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-GEsloWsIA1riTZJ7U7H9J7088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:34:a1:bb:33:af:89:e6:32:62:fe:f4:46:87:c9:7c:46:d0:
c8:52:21:00:82:b5:11:fb:b7:92:54:91:c8:3a:8f:00:4d:79:
c5:c9:ff:10:35:85:3c:41:7b:31:c3:18:a7:aa:6b:ed:87:4e:
51:4e:eb:9e:1f:02:9e:eb:bf:a7:9e:d7:f4:ee:8c:b5:13:f0:
9a:a8:26:14:c6:85:58:1a:de:6f:76:4d:db:2e:c7:3d:8d:f2:
2d:6e:99:84:b8:77:5c:33:c2:11:19:e6:62:d7:f9:35:de:28:
6a:4f:3e:bd:db:29:a6:d0:d8:98:12:cb:b0:4d:b3:e1:6b:cd:
ed:3f:a5:02:be:55:33:4b:71:44:7e:57:db:63:14:c5:fd:54:
28:16:8d:bf:44:28:dc:ae:89:0e:e6:9c:4e:e6:07:61:3a:34:
fc:ac:c9:88:91:e9:e2:1d:32:8c:60:a0:87:d3:49:e5:90:36:
ef:b0:f4:73:6a:c1:85:59:27:86:9e:1d:d4:d1:37:81:1e:46:
4d:a7:fa:11:8d:51:c2:1b:10:36:14:f0:53:dd:ac:69:ca:52:
0e:23:09:99:45:bb:84:68:dd:54:ba:bf:1a:c1:a7:f3:99:cb:
67:5e:a2:8e:18:bc:aa:77:18:93:68:be:08:d6:d1:14:45:41:
14:4a:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:20 2025 by rpki-client