Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/B_tPzlcakKiFDBacnORzzWv1yTE.roa
File: B_tPzlcakKiFDBacnORzzWv1yTE.roa (raw, json)
Hash identifier: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=
Subject key identifier: 07:FB:4F:CE:57:1A:90:A8:85:0C:16:9C:9C:E4:73:CD:6B:F5:C9:31
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01942748061939D0D2DFC3640544AA4EDB23
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/B_tPzlcakKiFDBacnORzzWv1yTE.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21430
IP address blocks: 85.209.124.0/23 maxlen: 23
85.209.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:06:19:39:d0:d2:df:c3:64:05:44:aa:4e:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07fb4fce571a90a8850c169c9ce473cd6bf5c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:95:53:c4:d4:43:a6:cd:22:8d:bb:41:43:
98:87:68:58:0a:61:f1:2f:d4:5e:6c:ff:a5:44:22:
06:06:31:22:39:13:f5:1a:aa:61:68:1f:58:89:d3:
c9:8d:5b:35:d4:a5:d0:f5:93:e1:25:17:85:6a:d2:
66:d4:e3:eb:de:93:7a:c6:1c:57:cd:eb:33:bb:df:
51:c6:95:37:89:e3:1d:2c:7f:8d:aa:42:6c:08:e9:
51:94:a9:64:ff:f8:f8:0b:c6:10:22:56:61:b8:11:
60:fe:f7:96:91:92:89:83:05:2d:45:48:e6:85:0f:
ea:5f:cb:be:5a:48:ff:15:8a:f5:bc:09:a8:c3:26:
b7:ec:32:bf:ad:46:12:99:ea:9e:84:2f:70:d7:a6:
51:7c:0e:09:4e:0c:0b:75:9a:1a:34:4b:4f:c5:80:
9f:88:60:25:4e:66:ac:7a:a8:21:51:1c:76:12:cc:
c4:57:3a:7e:d4:08:74:a4:45:b4:d1:73:71:c3:f5:
b7:9a:11:a0:cb:ba:d1:08:d0:b3:15:4d:7a:11:0b:
5e:7a:50:ba:c4:fd:21:d7:77:2b:91:35:06:c0:17:
46:0d:1a:c9:28:1d:00:71:49:1e:53:03:18:d6:b0:
d1:25:75:59:1c:30:9f:c4:6b:b1:40:6a:05:b6:df:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:4F:CE:57:1A:90:A8:85:0C:16:9C:9C:E4:73:CD:6B:F5:C9:31
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/B_tPzlcakKiFDBacnORzzWv1yTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.124.0-85.209.126.255
Signature Algorithm: sha256WithRSAEncryption
38:54:ee:c1:ca:c1:60:b4:0f:c8:19:1a:4c:77:0c:64:cc:a2:
01:eb:3a:a8:78:8f:80:f5:a8:80:ce:f1:30:df:0c:d8:b8:f2:
1a:36:83:b9:3e:5c:1e:7c:97:86:bf:86:c9:0f:65:90:1d:a4:
d2:ea:10:ca:c7:1f:46:9e:15:8d:ec:2e:8a:52:49:88:47:e0:
ce:c4:ee:e8:7e:dc:71:3d:ed:6a:0a:8c:c9:80:30:00:d3:ee:
ae:c3:55:92:81:96:8c:77:a4:81:8d:65:d6:15:36:58:82:a2:
cf:90:4d:70:f6:3f:26:a3:4b:c1:a7:df:20:ef:d7:c8:70:db:
53:ec:f3:e2:bb:5e:33:1e:35:53:d5:04:f7:c3:d4:b3:e6:12:
86:25:5b:fc:57:f6:68:cd:f1:94:64:a5:fe:9c:d0:61:1c:25:
2e:3f:fe:41:af:66:b5:75:36:b7:f9:66:48:b1:48:3b:8f:f0:
f4:1b:d0:77:7a:ed:66:c7:18:b2:dd:5a:36:d1:32:55:63:59:
3e:24:b3:3f:33:a7:41:c3:b8:43:29:a3:d3:83:11:5f:47:9b:
fe:e4:61:4b:5e:df:61:9b:86:08:31:f6:03:3a:fc:14:61:f5:
60:1a:80:aa:55:bb:fe:10:f4:c7:fa:f1:87:4e:2e:c5:72:a0:
4d:00:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net