Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/u2lc14tvu5h_9CLcTYmJhXN1dS4.roa
File: u2lc14tvu5h_9CLcTYmJhXN1dS4.roa (raw, json)
Hash identifier: ZEZqgy+vq22Eq2BMU3CLjDKDUayQshMITeCdx49A4Io=
Subject key identifier: BB:69:5C:D7:8B:6F:BB:98:7F:F4:22:DC:4D:89:89:85:73:75:75:2E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5F9CC1AB0B96A7A6FF8292C577748
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/u2lc14tvu5h_9CLcTYmJhXN1dS4.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 85.133.197.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f9:cc:1a:b0:b9:6a:7a:6f:f8:29:2c:57:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb695cd78b6fbb987ff422dc4d8989857375752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:aa:94:15:c0:9a:2a:86:44:a8:a0:75:e4:
55:5f:25:21:ff:bf:e0:fb:95:b4:bc:67:23:d7:6c:
8f:0e:95:b8:1e:b4:a4:17:88:2c:19:7d:28:3f:f3:
8e:57:0c:1b:af:73:8e:10:8e:eb:56:8e:dc:71:06:
39:6f:44:62:e5:d1:19:42:02:c4:6e:c2:d9:32:ce:
c9:8e:59:e9:7c:03:1f:c6:62:c5:a9:25:44:67:0f:
02:75:6c:64:b9:23:23:79:ed:39:3b:b3:77:2f:df:
0d:71:87:38:fb:19:7c:ca:2a:36:be:a6:c6:15:1c:
d7:17:7f:50:e7:14:64:e9:3a:04:6e:3c:db:5f:2c:
98:61:64:32:46:27:ae:3a:fa:a1:6f:8d:da:1d:1d:
55:1c:c1:62:0e:e6:6e:4e:3c:5a:1f:41:4e:98:1e:
5e:58:9e:26:6d:61:4a:f9:69:ae:48:df:fa:96:bf:
ae:56:cf:81:3e:be:12:1a:c8:3f:61:c5:f3:72:99:
c5:7d:e0:18:22:94:57:08:cc:7e:3a:96:df:c2:53:
6a:61:8f:e6:ec:a4:95:e6:c0:38:02:d3:c1:cc:0d:
2f:99:e7:53:e2:c1:44:89:18:5e:92:50:0b:5c:f3:
5c:2f:e4:c5:a2:e8:f4:c4:0c:a7:80:13:6d:49:bb:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:5C:D7:8B:6F:BB:98:7F:F4:22:DC:4D:89:89:85:73:75:75:2E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/u2lc14tvu5h_9CLcTYmJhXN1dS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.197.0/24
85.133.227.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1c:38:13:47:51:7b:5a:0e:59:7b:cf:b1:6b:f9:8e:4b:a6:
c4:94:ec:6f:6f:d6:d1:d3:ca:02:99:f2:86:71:f1:34:a0:eb:
36:e9:e1:80:32:48:75:0b:49:01:7b:08:66:fd:04:f8:ce:b9:
3d:fd:1b:ee:7b:3e:ac:6d:bd:bc:ff:36:43:82:91:8b:a1:fc:
57:51:f4:1d:2e:50:94:9b:25:84:18:30:bc:47:d6:ba:00:8a:
f5:0d:2c:4c:93:74:57:e5:53:17:15:68:78:d5:de:6d:69:85:
05:74:f4:03:ad:42:1d:58:e4:46:f0:69:63:5b:ce:05:33:aa:
16:e8:c8:49:86:b7:24:da:a9:8c:c7:ab:91:1a:1d:84:b4:8f:
f1:73:f7:57:89:fd:27:a2:b5:d6:97:e3:f7:cb:66:1c:7f:94:
b8:6d:da:1b:6e:6c:05:0f:92:7c:23:a2:7b:b3:1e:a8:3e:ac:
3e:b4:29:f4:f3:3a:76:1b:a2:d8:96:47:a8:03:09:02:f3:51:
9b:98:c8:5d:f4:5a:c7:de:89:f8:f3:8e:8e:72:78:d2:ec:67:
cd:92:63:60:98:6d:26:a3:36:57:89:46:96:40:d7:e0:0a:2e:
b2:fe:49:c5:26:d8:db:27:c3:1b:af:46:9b:74:48:f2:eb:fb:
76:79:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:54 2025 by rpki-client