Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pAD4-89ZeYnN8QmR8W4SMMPNxIg.roa
File: pAD4-89ZeYnN8QmR8W4SMMPNxIg.roa (raw, json)
Hash identifier: Giyu9Wzw9+j9yiEcbIfaHuWRfspiJuV1apbyRnG0/ss=
Subject key identifier: A4:00:F8:FB:CF:59:79:89:CD:F1:09:91:F1:6E:12:30:C3:CD:C4:88
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01962059667626F3A6FA6002FB0407028EB7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pAD4-89ZeYnN8QmR8W4SMMPNxIg.roa
Signing time: Thu 10 Apr 2025 15:37:31 +0000
ROA not before: Thu 10 Apr 2025 15:37:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 85.208.8.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:59:66:76:26:f3:a6:fa:60:02:fb:04:07:02:8e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 15:37:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a400f8fbcf597989cdf10991f16e1230c3cdc488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:85:82:dc:b8:e2:75:6c:f8:aa:31:47:a4:
0d:0f:e9:e6:5b:c3:1b:bf:3c:7c:cc:e2:aa:e2:9a:
c8:6d:96:af:f7:34:b3:b2:ce:e0:d7:09:06:20:22:
5b:3f:96:65:2a:d3:91:91:f8:a3:10:e5:f2:d7:95:
0b:80:30:a2:e1:3c:62:a2:ec:26:5b:6f:f3:41:cb:
e2:ef:a1:a3:0b:11:8e:7c:7a:72:2c:32:3b:6f:55:
ea:ff:0e:54:f4:7d:ce:9b:1d:f0:86:58:4d:02:fa:
5c:61:c8:31:03:00:39:fd:09:14:93:d2:b1:09:2b:
97:8c:9e:44:ff:2c:9e:a0:e3:93:57:d6:7f:92:cf:
dc:f1:ed:69:0e:58:cf:1b:1d:32:2a:90:dd:15:7a:
bc:56:3d:22:69:ff:62:b6:4d:0e:b0:dd:f1:09:b1:
a2:09:ad:08:9b:00:9d:d1:f9:e6:d9:04:03:fb:e0:
38:32:50:eb:ea:5b:a6:90:45:e2:98:50:17:44:83:
af:58:86:95:4a:ef:b1:5c:15:c5:fc:10:c0:3f:4c:
97:4b:e3:c7:4d:2f:a4:b5:b3:64:02:9a:96:83:15:
4b:80:fe:14:58:c2:83:1b:a6:65:7c:61:95:e9:a1:
52:cc:a7:38:db:5b:40:23:dd:cb:ca:42:3f:77:ed:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:F8:FB:CF:59:79:89:CD:F1:09:91:F1:6E:12:30:C3:CD:C4:88
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pAD4-89ZeYnN8QmR8W4SMMPNxIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.8.0/24
89.106.2.0/24
Signature Algorithm: sha256WithRSAEncryption
99:69:81:22:49:65:17:66:bc:8b:8f:76:97:68:29:43:d6:0e:
a4:92:15:36:ce:f6:c2:22:54:fe:87:dc:a6:56:f4:1e:db:45:
82:64:57:97:5b:86:96:03:ed:87:4d:9c:f1:52:54:66:21:29:
30:9b:83:1a:fb:10:32:46:62:c0:25:57:4a:1b:ac:d1:1b:e9:
e8:de:aa:e0:79:29:81:3a:f2:4c:3a:f6:9c:b5:4d:aa:99:4c:
d5:93:83:4b:94:a1:0f:1c:5d:78:fb:10:c9:87:ac:23:ea:54:
59:c0:73:a6:d0:b3:eb:0a:57:0a:c6:6d:5c:57:67:a5:b9:3b:
5c:c6:d8:d3:f8:da:ce:49:98:e7:f4:ae:17:4b:48:1d:fb:64:
37:4c:2e:f2:e8:48:27:f2:af:5e:b5:f5:29:c3:2f:6b:28:d7:
54:c7:ee:21:15:cb:e3:21:68:8c:9c:86:c7:ab:30:4e:08:59:
cb:e0:9b:f4:7d:19:9c:5f:3f:2f:7f:af:c8:b5:01:27:6a:ee:
99:63:48:20:c5:af:b3:a3:1e:8d:ef:1f:8b:2e:5f:07:0c:d9:
d8:fd:20:a5:c8:17:69:5f:52:51:ad:70:84:fd:6b:d9:e3:58:
ba:6b:ed:82:1b:f1:75:77:12:36:f0:84:f8:50:78:46:f5:00:
b6:04:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net