Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/8D4nHWbrxa4LMrteZKswft15Ubc.roa
File: 8D4nHWbrxa4LMrteZKswft15Ubc.roa (raw, json)
Hash identifier: He/s/LCduWYytOAbci1/a/w6a3udHX5vgmJxc1muikE=
Subject key identifier: F0:3E:27:1D:66:EB:C5:AE:0B:32:BB:5E:64:AB:30:7E:DD:79:51:B7
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 0194214428C0ED25BA22B079282394225FBD
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/8D4nHWbrxa4LMrteZKswft15Ubc.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8145
IP address blocks: 85.208.92.0/22 maxlen: 22
85.208.92.0/24 maxlen: 24
85.208.93.0/24 maxlen: 24
85.208.94.0/24 maxlen: 24
2a09:84c0::/30 maxlen: 30
2a09:84c0::/32 maxlen: 32
2a09:84c0:200::/40 maxlen: 40
2a09:84c0:400::/40 maxlen: 40
2a09:84c0:600::/40 maxlen: 40
2a09:84c1::/32 maxlen: 32
2a09:84c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:28:c0:ed:25:ba:22:b0:79:28:23:94:22:5f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f03e271d66ebc5ae0b32bb5e64ab307edd7951b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:ea:24:5a:d4:dd:6d:09:b6:a3:c2:7e:20:
4b:5e:96:1d:89:ab:22:d3:2b:31:bd:0f:9b:53:ed:
04:da:ed:7c:d4:17:3a:4f:87:4d:9c:48:03:c5:64:
1a:52:77:44:34:9b:9a:ec:ac:44:26:dc:bd:3f:0f:
1f:e8:1b:45:db:bd:81:38:b7:78:00:c8:7b:35:d0:
1b:03:0e:87:ca:c5:f1:e4:6c:ae:96:46:3c:1a:bb:
ff:80:47:b4:40:c2:2b:cc:0e:bb:90:00:d2:78:fd:
b5:6e:6a:31:d2:c3:21:9f:de:92:9b:1e:7f:ed:4a:
5d:00:b5:4a:24:a8:b4:9f:c8:af:75:4b:8b:fc:8d:
5e:ba:b9:54:b4:2e:1f:49:ac:bf:c8:7c:67:0d:5c:
d2:26:b3:19:bd:8b:ca:4a:16:b1:c5:08:e4:01:bd:
29:b4:e4:bf:2b:07:96:be:6d:63:1e:35:7a:90:af:
b4:81:7d:e9:34:05:8f:84:05:a0:80:af:52:17:24:
c8:dd:6a:5a:ea:09:7d:8c:5b:88:5d:6d:fa:ba:09:
00:03:9e:60:fd:54:2a:d4:cf:75:71:23:a5:93:03:
a9:81:a2:47:bb:ce:0b:58:da:8d:d8:05:81:9d:f6:
9f:18:69:72:91:ae:24:73:c1:53:6c:39:36:62:f0:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3E:27:1D:66:EB:C5:AE:0B:32:BB:5E:64:AB:30:7E:DD:79:51:B7
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/8D4nHWbrxa4LMrteZKswft15Ubc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.92.0/22
IPv6:
2a09:84c0::/30
Signature Algorithm: sha256WithRSAEncryption
74:38:2d:ba:14:76:dc:d7:31:ca:cb:07:ff:6b:e1:38:ec:1a:
8d:ec:23:b5:5d:e4:77:03:a3:cb:5d:9e:bf:e4:d1:3e:69:70:
be:e4:8d:a9:59:6a:18:2e:b0:b3:24:e3:64:54:66:f4:a3:08:
26:72:cc:0a:af:5e:7c:20:52:cd:c9:25:b7:01:32:08:cc:14:
8c:05:25:b9:c6:50:da:99:87:1f:58:c8:b0:74:71:c7:c2:51:
8d:87:f0:64:ed:3b:1f:39:e0:82:0b:b6:ef:54:36:41:e0:7a:
cb:38:8a:ec:dc:a0:c8:db:1a:ce:d1:32:44:d5:6c:09:1d:2b:
e9:5b:66:c1:1c:86:df:1f:46:37:ef:c0:1b:29:5b:34:70:f7:
16:57:d5:ec:05:16:9d:ef:4d:86:cd:63:a5:fa:02:e6:e6:62:
86:ab:40:cc:6c:35:c7:33:5c:43:ad:14:b2:87:db:02:0b:e8:
a3:cc:78:e2:d1:93:90:4c:d1:34:73:47:9b:c3:65:96:f1:8d:
39:8c:95:f3:08:b0:68:2e:0f:35:7f:c3:9d:8d:45:27:0a:70:
19:82:2b:0b:15:6d:65:12:27:23:aa:ca:62:06:49:3a:6c:33:
04:57:2e:72:8c:48:23:44:00:2c:ff:9c:ec:ad:72:8b:69:3e:
b8:56:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net