Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa
File: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (raw, json)
Hash identifier: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=
Subject key identifier: 4A:5D:A0:DC:2A:D2:B7:D2:97:E2:77:FB:46:A6:E5:03:18:73:C3:36
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 019420D6636708B524366C423FDB7357B862
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208669
IP address blocks: 85.202.92.0/24 maxlen: 24
85.202.93.0/24 maxlen: 24
85.202.94.0/24 maxlen: 24
85.202.95.0/24 maxlen: 24
2a10:1900::/32 maxlen: 32
2a10:1901::/32 maxlen: 32
2a10:1902::/32 maxlen: 32
2a10:1903::/32 maxlen: 32
2a10:1904::/32 maxlen: 32
2a10:1905::/32 maxlen: 32
2a10:1906::/32 maxlen: 32
2a10:1907::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:63:67:08:b5:24:36:6c:42:3f:db:73:57:b8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5da0dc2ad2b7d297e277fb46a6e5031873c336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:fd:54:3d:0b:2d:73:e5:92:e1:74:91:4f:
fa:79:c2:66:45:48:02:2e:01:c1:8a:94:f1:57:70:
fd:e5:2b:7e:f1:7b:da:44:f3:d9:6a:e5:e9:9d:48:
24:71:66:c3:b3:7a:bc:bb:f9:7f:7e:91:cb:cf:fd:
bd:4f:79:19:8c:88:c4:d8:e6:83:1b:dc:7f:8b:9c:
2c:64:e8:f4:d7:7f:77:d8:b5:9a:3f:ab:58:26:05:
a8:bc:96:d3:af:5f:fe:5a:14:ca:48:db:a0:e9:c3:
6d:7e:6d:4e:eb:77:45:f7:af:03:63:44:58:08:7c:
66:57:2a:fc:18:8d:ca:8d:4d:9b:b2:82:fc:e1:4c:
7a:ca:63:2f:32:74:3b:c9:69:43:fb:48:94:87:6f:
17:bd:3c:2b:9a:df:ab:55:94:ea:90:d6:bb:a5:22:
f6:88:14:6d:47:aa:da:57:64:37:12:12:e6:11:74:
99:50:7a:87:01:fb:d5:e2:eb:60:c0:ef:f6:4d:9c:
9b:7a:72:73:bf:9e:b5:0e:b4:b8:b6:18:b5:bf:be:
e5:bd:bd:a4:e4:11:7a:fc:db:6c:fe:cf:43:f1:38:
ee:6a:7b:43:cd:de:24:68:35:12:e5:2e:9d:40:e0:
6d:05:bc:98:20:cc:2b:4f:23:25:33:e4:05:ca:b4:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:A0:DC:2A:D2:B7:D2:97:E2:77:FB:46:A6:E5:03:18:73:C3:36
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.92.0/22
IPv6:
2a10:1900::/29
Signature Algorithm: sha256WithRSAEncryption
3b:22:d8:f7:8c:66:00:48:e0:61:bb:09:97:03:f5:e9:c4:18:
2e:aa:ff:90:d7:93:3e:6a:0f:42:77:6c:c9:1c:72:ff:e6:0b:
c7:18:33:15:a8:2b:8a:7c:ea:9f:45:09:c1:24:ba:66:46:d7:
49:83:2f:ff:93:ad:88:2a:57:da:83:2b:9e:2e:3d:64:41:0c:
ce:e0:5b:4e:40:fb:6c:7e:84:c2:2f:0f:af:f7:18:84:01:36:
9b:b1:a1:86:90:d0:78:33:5f:6c:12:dd:32:2a:16:91:6f:ce:
bb:ed:51:62:27:55:9f:0f:40:8c:3a:c4:93:e3:e4:60:15:bf:
16:e0:9a:7e:e8:97:f7:15:e8:07:52:2e:07:d3:05:82:f1:a7:
f5:76:6d:c8:79:61:9e:61:6f:13:fa:c2:2f:c0:41:05:57:99:
30:a4:f6:6d:51:0f:68:c9:9e:29:11:6d:53:a4:b5:7b:df:b6:
68:2f:27:bd:d5:86:e5:f2:e1:d0:ef:f4:5a:d6:18:e4:49:ef:
38:10:14:8b:5b:c9:35:b0:69:dd:0c:57:aa:e6:c7:15:c9:c8:
c0:d3:0b:b3:b3:76:cf:7c:9e:d9:b5:2f:6a:45:86:dd:2b:f2:
20:93:15:b8:d9:42:59:99:d9:2a:fe:de:6f:05:75:17:41:5b:
de:be:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:37 2025 by rpki-client on console.sobornost.net