Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/SaXO2k_RD79NU2l7XYSpiLJj45Y.roa
File: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (raw, json)
Hash identifier: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=
Subject key identifier: 49:A5:CE:DA:4F:D1:0F:BF:4D:53:69:7B:5D:84:A9:88:B2:63:E3:96
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 0194258F5E0DAD3CD115732C7C3D2C51CF50
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/SaXO2k_RD79NU2l7XYSpiLJj45Y.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44489
IP address blocks: 85.119.88.0/21 maxlen: 21
89.239.0.0/19 maxlen: 24
2a02:4000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5e:0d:ad:3c:d1:15:73:2c:7c:3d:2c:51:cf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49a5ceda4fd10fbf4d53697b5d84a988b263e396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:9c:82:2a:27:8d:c8:4c:2a:f0:28:39:69:
a3:da:a6:75:67:17:75:02:f2:e4:ec:e3:4d:dd:d6:
81:0a:0d:a7:03:61:9a:c5:66:c3:fa:e8:6b:8c:b6:
3e:07:fc:8c:92:51:ad:8e:77:b3:2d:47:af:c8:13:
42:e8:fa:74:f5:0a:6a:97:60:91:e3:80:03:96:b9:
d9:12:ec:0d:68:af:63:65:cc:b6:02:d0:40:e9:c9:
fe:14:38:c7:ca:49:99:be:46:0a:a2:eb:f3:a0:e8:
c2:be:df:07:e2:db:a9:49:38:8b:db:5f:fe:21:40:
20:1a:2a:1b:67:78:64:9a:50:da:a9:a4:a4:50:8f:
2d:df:18:63:94:95:95:3d:9e:ec:d8:57:62:7a:2b:
73:d7:b0:b6:2b:43:66:75:f2:c4:b9:f8:69:41:7b:
ae:42:50:2e:79:bd:cd:01:ab:8c:0d:f1:32:0a:c6:
5e:65:04:23:8d:60:e3:43:ec:a7:7b:e0:7c:3d:f5:
f4:9a:df:15:8b:8f:c5:f3:e3:c4:ee:b9:93:8f:7a:
56:0a:50:19:ec:24:b8:ab:59:eb:5b:ad:d4:c9:72:
50:44:c2:72:14:26:2b:7f:dc:4c:88:17:de:54:a4:
06:df:17:31:e4:ac:41:d6:24:8d:4a:07:a7:bc:b9:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A5:CE:DA:4F:D1:0F:BF:4D:53:69:7B:5D:84:A9:88:B2:63:E3:96
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/SaXO2k_RD79NU2l7XYSpiLJj45Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.88.0/21
89.239.0.0/19
IPv6:
2a02:4000::/32
Signature Algorithm: sha256WithRSAEncryption
5f:28:9d:e5:49:d0:9e:9b:85:d4:63:0e:8c:39:3c:df:e1:05:
35:80:99:a1:0e:62:2f:cd:14:7b:96:fe:7a:43:d2:9b:d2:9c:
3c:80:b6:cb:c7:d8:27:05:a7:ac:df:22:7f:7d:9b:9f:aa:6d:
d5:4c:47:cb:41:33:56:9c:86:c2:55:7a:15:41:d6:78:13:c5:
02:d3:03:18:c3:d0:f6:f7:53:05:79:d3:e8:82:4d:e2:e7:0c:
40:e8:82:a6:d5:89:0e:73:9c:b3:e5:f2:c7:e0:30:90:90:8d:
b3:38:21:60:f4:54:5a:e9:cd:b6:e2:3f:c7:7b:41:13:98:e5:
e4:f5:dc:0d:33:6f:09:5e:15:c2:21:1a:27:88:79:fc:9e:96:
54:8b:7b:68:84:71:54:35:e2:0d:f5:70:3e:2a:3c:46:52:64:
42:c9:de:01:6d:9f:c6:06:a0:6a:1c:21:7e:11:e5:c2:0f:56:
85:25:85:67:6a:b4:b3:20:60:11:22:dd:38:85:54:bc:4a:2c:
fb:0f:56:b8:da:c5:f2:f0:5a:58:7a:44:4b:bc:00:87:25:5d:
b4:18:72:64:e2:ac:b3:5e:98:62:49:8a:95:4f:e3:69:cc:9e:
20:db:18:d1:d7:a8:fa:3a:c1:b1:be:24:8a:ef:a8:4f:38:24:
ab:2c:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net