Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/PxJa2tLKMemadUnIT_enJ3heFMo.roa
File: PxJa2tLKMemadUnIT_enJ3heFMo.roa (raw, json)
Hash identifier: iO/vWX3vYIUGsDiilxMNRfU/CwDM226gbEOalnDQuL4=
Subject key identifier: 3F:12:5A:DA:D2:CA:31:E9:9A:75:49:C8:4F:F7:A7:27:78:5E:14:CA
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0194206810C2353986D868A02294350C84B4
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/PxJa2tLKMemadUnIT_enJ3heFMo.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 85.239.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:10:c2:35:39:86:d8:68:a0:22:94:35:0c:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f125adad2ca31e99a7549c84ff7a727785e14ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:23:eb:22:0d:f7:d0:4c:80:be:9c:fe:42:76:
8f:7b:c5:7d:a0:6b:4b:3e:4e:11:f7:f8:44:c2:58:
bc:ad:8e:05:4e:06:1e:19:05:2d:30:e5:eb:42:ce:
2f:a1:2e:22:1c:9a:39:b0:21:66:31:83:5b:e9:a5:
04:1a:eb:e9:67:f5:b7:f9:2a:57:54:41:44:44:e3:
e4:2c:f2:d6:a3:af:cb:f4:d4:8b:30:3c:3b:3a:0e:
77:f6:cd:5f:bc:4a:47:c5:2d:f3:4a:1b:38:c0:2d:
4e:19:1c:8b:c3:87:fa:07:bc:7f:ff:2b:fc:af:c4:
44:56:78:df:23:ab:0e:b4:c4:97:5b:6f:20:a4:53:
af:0f:b4:3f:29:9b:0d:2b:a3:9f:07:29:c6:54:93:
9a:21:7f:3c:41:10:bf:db:04:4a:3c:21:a7:01:57:
7f:f4:9b:e7:f2:5b:7e:d9:aa:2e:19:95:7d:08:3d:
6e:b9:fe:5c:9b:a3:df:c4:b7:86:74:be:e2:d6:9f:
f4:74:6e:17:13:c0:94:6f:61:1c:f2:04:9e:31:00:
91:68:3a:ae:89:97:1e:5c:79:00:e4:15:15:bc:12:
74:de:ce:bd:6d:de:7b:7c:12:6e:2e:8b:22:91:a8:
28:5b:40:ac:c4:47:e6:76:f4:e3:5d:7c:4a:88:93:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:12:5A:DA:D2:CA:31:E9:9A:75:49:C8:4F:F7:A7:27:78:5E:14:CA
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/PxJa2tLKMemadUnIT_enJ3heFMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:7a:40:14:17:c4:40:6c:ec:06:f9:4e:af:5e:3b:c6:0d:bb:
40:62:75:ee:c0:ce:5f:bf:4b:b6:9b:ed:1e:d1:12:ef:18:3e:
26:16:9c:e9:dc:fa:39:ec:48:97:81:c0:50:38:68:6b:69:25:
b9:f7:da:f0:88:9f:98:c6:c1:cc:c6:56:27:a5:21:4d:6a:70:
58:74:20:df:87:c6:e1:53:96:9f:ac:60:11:dd:0a:b5:7d:d0:
0f:b4:88:a9:15:4e:71:df:c7:92:95:f7:17:86:87:a1:8e:02:
df:bd:62:91:43:ae:ab:aa:ad:11:1a:95:eb:67:4b:18:39:08:
c2:12:62:81:a7:3b:f7:a4:b5:e8:50:cf:88:d7:83:09:88:36:
83:0d:ca:0e:d0:fb:26:4d:d6:d0:e9:2b:ce:91:62:c5:b5:78:
27:03:3f:aa:bc:b0:6d:ce:1c:92:aa:16:fd:d2:bd:fe:b7:ef:
88:ea:f8:80:16:d8:40:17:ab:2e:40:90:a4:9f:f4:59:ad:7d:
73:4f:f3:8b:40:de:17:36:81:f3:2c:93:f3:f6:db:60:e6:34:
25:3c:05:21:c1:ff:8c:11:0b:de:0e:72:02:53:30:2d:86:7f:
39:1c:fc:6f:1f:a5:92:a5:8a:d4:91:08:f2:bd:ea:aa:fa:8f:
57:e1:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:24:59 2025 by rpki-client