Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/DpBq14ju-sMiK3daEy8ixQQfVTk.roa
File: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (raw, json)
Hash identifier: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=
Subject key identifier: 0E:90:6A:D7:88:EE:FA:C3:22:2B:77:5A:13:2F:22:C5:04:1F:55:39
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01941FFA22F1FC4EF7C951093F990416E522
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/DpBq14ju-sMiK3daEy8ixQQfVTk.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62294
IP address blocks: 85.222.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:22:f1:fc:4e:f7:c9:51:09:3f:99:04:16:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e906ad788eefac3222b775a132f22c5041f5539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:3a:06:e9:8e:63:ac:49:65:b6:2f:c5:b0:
59:8e:38:67:14:c5:21:23:8a:1f:92:51:28:a9:09:
bc:3a:4e:56:50:1b:0a:95:66:d6:73:6d:2e:8c:4e:
55:9a:e4:31:4d:60:8e:9c:10:89:47:01:03:7e:60:
28:13:fb:15:fb:c2:67:95:00:f0:1f:5a:d8:82:1d:
e0:25:c3:8e:69:bb:a0:26:7f:d0:65:9b:c2:40:d5:
e8:23:1e:e8:45:1b:47:f8:7d:59:07:5c:71:51:92:
d9:ff:c0:ea:4e:5f:f6:8b:a2:89:bc:74:9b:1b:95:
4d:be:46:86:60:e9:7d:2f:78:68:a4:7c:ae:70:c1:
6a:23:a8:16:31:be:69:9e:98:bc:f4:da:67:52:7a:
24:cd:8e:82:6c:c0:c4:73:64:d5:1a:9d:d9:0a:5b:
ae:74:18:26:8f:1a:36:2c:7a:56:ab:ab:3b:fc:a5:
2e:51:a0:e6:ca:85:3c:84:f5:ea:38:f5:c4:55:2c:
c0:2f:ee:fc:28:a7:b7:df:2e:6f:2c:a0:f5:b1:c1:
31:3d:71:ed:f5:d0:18:43:41:d4:70:12:af:4f:90:
a5:ee:47:ed:77:ce:b9:31:fd:c9:cd:0d:c9:33:3f:
b9:18:8c:85:4f:e4:77:9a:b8:d9:03:cf:84:3f:55:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:6A:D7:88:EE:FA:C3:22:2B:77:5A:13:2F:22:C5:04:1F:55:39
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/DpBq14ju-sMiK3daEy8ixQQfVTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.164.0/22
Signature Algorithm: sha256WithRSAEncryption
53:70:e3:f8:80:8e:66:74:ed:16:14:98:6a:e4:c8:7e:3e:6b:
5c:1c:4d:f6:b9:05:dc:00:4d:67:ec:e0:10:7f:4f:37:7b:c3:
90:b3:f9:e5:2f:f6:56:31:59:1b:8a:fe:81:41:55:fb:b6:7b:
5f:e1:7f:f2:e2:0c:52:cc:04:99:29:68:06:e8:76:0b:55:db:
c3:d0:4c:e3:50:ba:4b:d8:ea:06:5e:d9:5c:35:dc:07:f1:ad:
24:e6:b4:a5:32:d5:3b:d2:87:74:b1:56:d5:44:78:89:b8:32:
2c:f7:a2:d4:cf:47:62:df:c7:22:96:cc:28:9d:47:ce:c5:cd:
97:d8:c5:94:8c:00:2d:33:87:94:9a:10:4d:c5:db:e2:a7:65:
af:5c:88:f1:6f:a1:07:f9:36:d7:9d:69:26:68:7f:44:70:d6:
f8:20:a8:ab:2f:69:6a:21:58:dd:c8:60:be:1c:9d:fb:55:f3:
00:71:44:1f:7a:f9:6e:26:ce:2b:a7:90:2b:fa:34:d7:7b:df:
16:04:35:e1:3f:9d:42:c2:ad:0f:f1:fa:1f:84:b7:e9:72:b9:
c1:9c:46:b3:3b:02:ca:aa:0d:af:7e:f0:ca:5e:a1:e4:b6:73:
89:fc:56:db:d6:35:58:93:1c:a0:4e:cb:e2:59:ee:8b:ac:b8:
8d:cf:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net