Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7hreE0GspdlfkSYynGqBZDfSVFw.roa
File: 7hreE0GspdlfkSYynGqBZDfSVFw.roa (raw, json)
Hash identifier: RiwF15+v/2Y3Ay+77xIvdc2ien9VI6RRcI4itMMAOas=
Subject key identifier: EE:1A:DE:13:41:AC:A5:D9:5F:91:26:32:9C:6A:81:64:37:D2:54:5C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2ECE762F1EFF40027157FBF85B108
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7hreE0GspdlfkSYynGqBZDfSVFw.roa
Signing time: Thu 02 Jan 2025 01:48:13 +0000
ROA not before: Thu 02 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35913
IP address blocks: 85.254.84.0/23 maxlen: 23
85.254.124.0/23 maxlen: 23
85.254.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ec:e7:62:f1:ef:f4:00:27:15:7f:bf:85:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee1ade1341aca5d95f9126329c6a816437d2545c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:8e:8f:69:ca:40:cf:9e:47:57:6f:24:f1:
cf:5b:c6:81:07:4b:cb:bb:a9:ab:41:6a:93:5c:d8:
d6:25:8c:68:21:20:b4:0d:b2:78:4f:27:62:a3:7e:
bd:99:97:f6:ef:22:a5:58:96:1a:10:8b:8f:8a:d5:
ae:39:37:09:b0:75:3a:be:27:54:50:96:b9:cc:b5:
d2:66:ab:33:57:ad:08:c3:7e:c5:a2:20:01:f6:e7:
64:5a:c8:84:66:bd:36:36:f2:1a:12:48:68:25:a8:
f8:d5:84:13:5e:36:3b:b6:f4:26:b4:86:cb:07:75:
37:73:c0:2e:d9:60:c1:41:7a:b8:7a:63:91:55:63:
a8:7f:33:89:b0:f6:e0:3f:f6:2a:ee:f8:16:3c:d1:
fd:da:8f:0a:51:b0:68:c4:9b:f0:9b:35:fa:f6:4c:
b4:a1:94:2b:d1:0d:6c:38:2d:b2:b8:aa:ef:aa:7e:
c9:25:8a:3a:af:b8:b6:d0:62:d6:a1:36:2c:aa:69:
3c:f6:c0:39:6a:dd:02:3e:a3:e8:c8:fc:fc:43:f0:
a2:fd:4a:7e:3e:d2:26:1f:be:3d:6a:3b:ed:10:93:
ac:87:54:a3:61:ad:5f:7d:4b:c8:4f:ef:73:c5:e4:
45:62:6f:1f:ef:9d:9f:41:9b:84:46:ca:25:61:36:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:DE:13:41:AC:A5:D9:5F:91:26:32:9C:6A:81:64:37:D2:54:5C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/7hreE0GspdlfkSYynGqBZDfSVFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.84.0/23
85.254.124.0/23
85.254.140.0/24
Signature Algorithm: sha256WithRSAEncryption
76:49:65:33:76:70:c6:ea:19:ec:0c:e2:b6:53:bb:33:67:a1:
11:b8:ec:4c:9c:c2:0e:a9:ea:28:a2:a2:aa:08:4d:f7:6d:a2:
fe:94:4e:c1:b9:07:4c:eb:79:e8:2d:c7:4e:6d:08:65:5a:82:
81:58:cd:70:4c:81:cd:c6:89:16:5e:43:b0:e5:1a:2f:33:06:
29:bc:51:20:f8:62:e8:79:12:d1:c1:ff:5b:c9:8d:e0:23:55:
88:31:11:64:5f:72:1c:04:b3:c2:89:a8:88:46:75:56:af:d8:
10:27:25:7a:43:fa:6d:04:41:42:5e:da:59:10:bb:70:0b:63:
80:ae:77:f3:fa:1c:34:97:d8:43:bb:d6:2b:a9:70:9a:72:7c:
2a:e6:59:9b:cb:c7:2d:23:3b:35:93:10:72:b7:6d:45:48:d0:
3e:61:e3:aa:7d:56:dc:f5:27:7f:b7:44:32:ad:d7:65:ba:14:
59:22:33:58:9c:e4:97:e9:2c:65:7c:1d:b1:ac:8c:82:2a:23:
4b:82:26:c2:14:37:81:6c:0f:99:36:c5:a2:cd:27:fb:f0:43:
b4:6b:01:a3:6a:46:8e:ec:4a:65:6b:ee:46:9f:bc:e1:47:a9:
2b:3b:33:24:0c:e5:17:31:b5:cb:9c:93:a7:f3:ed:00:ac:14:
ff:30:76:a7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQksuznYvHv9AAnFX+/hbEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTFhZGUxMzQxYWNhNWQ5NWY5MTI2MzI5YzZhODE2NDM3ZDI1NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyyOj2nKQM+eR1dvJPHPW8aBB0vL
u6mrQWqTXNjWJYxoISC0DbJ4Tydio369mZf27yKlWJYaEIuPitWuOTcJsHU6vidU
UJa5zLXSZqszV60Iw37FoiAB9udkWsiEZr02NvIaEkhoJaj41YQTXjY7tvQmtIbL
B3U3c8Au2WDBQXq4emORVWOofzOJsPbgP/Yq7vgWPNH92o8KUbBoxJvwmzX69ky0
oZQr0Q1sOC2yuKrvqn7JJYo6r7i20GLWoTYsqmk89sA5at0CPqPoyPz8Q/Ci/Up+
PtImH749ajvtEJOsh1SjYa1ffUvIT+9zxeRFYm8f752fQZuERsolYTaF3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO4a3hNBrKXZX5EmMpxqgWQ30lRcMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvN2hyZUUwR3NwZGxma1NZeW5HcUJaRGZTVkZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVf5UAwQB
Vf58AwQAVf6MMA0GCSqGSIb3DQEBCwUAA4IBAQB2SWUzdnDG6hnsDOK2U7szZ6ER
uOxMnMIOqeoooqKqCE33baL+lE7BuQdM63noLcdObQhlWoKBWM1wTIHNxokWXkOw
5RovMwYpvFEg+GLoeRLRwf9byY3gI1WIMRFkX3IcBLPCiaiIRnVWr9gQJyV6Q/pt
BEFCXtpZELtwC2OArnfz+hw0l9hDu9YrqXCacnwq5lmby8ctIzs1kxByt21FSNA+
YeOqfVbc9Sd/t0QyrddluhRZIjNYnOSX6SxlfB2xrIyCKiNLgibCFDeBbA+ZNsWi
zSf78EO0awGjakaO7Epla+5Gn7zhR6krOzMkDOUXMbXLnJOn8+0ArBT/MHan
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:21 2025 by rpki-client