Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/xY4E3yQDPueuZRFyGHMpuwD_2xI.roa
File: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (raw, json)
Hash identifier: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=
Subject key identifier: C5:8E:04:DF:24:03:3E:E7:AE:65:11:72:18:73:29:BB:00:FF:DB:12
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019420D5FF4EF2AAF117993613E32A3DB7B4
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/xY4E3yQDPueuZRFyGHMpuwD_2xI.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209354
IP address blocks: 85.208.204.0/24 maxlen: 24
85.208.205.0/24 maxlen: 24
85.208.206.0/24 maxlen: 24
85.208.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ff:4e:f2:aa:f1:17:99:36:13:e3:2a:3d:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c58e04df24033ee7ae651172187329bb00ffdb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:04:97:64:84:91:51:67:29:49:d1:80:99:
e5:e4:e1:5d:4e:7a:15:f5:6e:07:de:2a:0f:b1:38:
af:86:6c:f4:2f:35:a5:20:69:43:49:8b:7c:8c:6f:
03:68:f7:a4:92:02:89:fe:78:1a:e9:07:c7:a6:8c:
d4:fb:b9:3e:83:b7:3a:96:86:b0:cf:38:8a:84:04:
55:b0:7b:95:e0:ce:72:84:6f:16:ba:a6:1e:38:a6:
9e:0a:e2:a5:d5:1c:75:99:82:db:66:31:59:ef:b9:
0c:02:77:bd:54:e6:a6:dc:2b:d3:4b:93:61:b6:8a:
b7:a3:da:cb:f4:30:a7:2a:78:03:88:d6:46:76:99:
ba:19:1f:f3:25:b1:e2:92:63:6a:fd:0b:d0:6d:bf:
5e:75:ba:5c:06:da:67:00:0b:43:90:fa:cd:09:db:
1e:76:f0:86:78:46:1d:3d:e5:27:d4:c3:77:7d:cf:
7b:ff:87:59:bb:e5:ae:44:e8:fc:31:21:69:d2:21:
21:7e:6b:38:0f:6b:44:08:83:06:2c:d7:4c:bb:3f:
9d:92:be:fa:ed:03:02:52:fa:48:ea:ae:02:da:8e:
ec:b7:90:38:db:8d:a8:7a:47:a0:d7:ab:4e:4a:5a:
6c:01:7e:af:5b:41:83:5c:93:6f:26:b3:ed:67:72:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:04:DF:24:03:3E:E7:AE:65:11:72:18:73:29:BB:00:FF:DB:12
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/xY4E3yQDPueuZRFyGHMpuwD_2xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.204.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a7:46:72:73:af:c9:d4:49:eb:7b:2a:c8:e5:6d:44:32:fe:
44:b8:2e:39:b5:b0:1e:74:19:b9:63:d8:31:29:19:81:74:12:
4b:d5:39:f4:c0:4e:68:1d:4e:ea:eb:85:6b:70:4c:c9:62:e6:
f6:cf:93:3b:09:cf:7e:45:61:52:c5:ac:28:46:d6:be:d4:84:
bd:5f:36:36:78:fb:dd:7c:72:f1:76:93:ec:b2:32:5c:26:fa:
d6:05:70:c9:78:56:83:4c:74:77:1a:57:bd:40:ab:51:67:43:
10:43:94:1d:70:eb:42:7a:b6:8b:06:cd:ce:54:4b:e1:70:55:
08:39:ee:8e:be:50:71:33:00:b4:36:b9:64:e3:a7:c5:6f:eb:
4b:fc:b8:8c:48:3a:ec:2b:50:cd:d0:71:e0:39:68:b0:b7:56:
b1:64:66:32:08:04:10:41:4d:e9:5a:4b:28:ef:6e:94:e8:2c:
b6:fb:9d:84:99:cf:05:3d:68:c8:a5:ac:92:04:0a:02:d1:9e:
c9:37:1a:f3:b0:41:67:21:a7:81:9a:ee:64:fe:df:fd:77:8b:
d2:4d:bb:00:dc:44:36:56:a8:20:e3:8d:0f:82:be:00:36:99:
dc:69:9b:9e:22:a2:16:e6:89:a0:a2:ee:bd:72:e5:39:0e:75:
04:49:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net