Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Fs8DFJaG_rLsoG9ro1LNJvZ-PNE.roa
File: Fs8DFJaG_rLsoG9ro1LNJvZ-PNE.roa (raw, json)
Hash identifier: B/cG1KD97n9scXc7XTAWqcKnFWkyrg7F17qooSiNq2g=
Subject key identifier: 16:CF:03:14:96:86:FE:B2:EC:A0:6F:6B:A3:52:CD:26:F6:7E:3C:D1
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F7142C907FBFFC70145FF067B76D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Fs8DFJaG_rLsoG9ro1LNJvZ-PNE.roa
Signing time: Thu 02 Jan 2025 01:48:15 +0000
ROA not before: Thu 02 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 85.254.47.0/24 maxlen: 24
85.254.62.0/24 maxlen: 24
85.254.104.0/24 maxlen: 24
85.254.105.0/24 maxlen: 24
85.254.106.0/24 maxlen: 24
85.254.107.0/24 maxlen: 24
85.254.108.0/24 maxlen: 24
85.254.109.0/24 maxlen: 24
85.254.110.0/24 maxlen: 24
85.254.111.0/24 maxlen: 24
85.254.116.0/24 maxlen: 24
85.254.122.0/24 maxlen: 24
159.148.125.0/24 maxlen: 24
159.148.138.0/24 maxlen: 24
159.148.150.0/24 maxlen: 24
159.148.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f7:14:2c:90:7f:bf:fc:70:14:5f:f0:67:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16cf03149686feb2eca06f6ba352cd26f67e3cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:a9:d8:28:76:e4:9c:56:d0:15:57:88:29:
63:12:f5:2b:73:7a:9e:ab:10:d3:82:bd:81:a6:40:
66:ee:09:7f:4f:e0:18:27:e6:7e:b8:51:67:d7:c8:
1d:a2:61:03:cb:1b:50:aa:ba:76:f9:72:cf:8e:4f:
d5:a5:ca:3c:fe:f8:d7:98:6b:37:26:7a:86:c2:3a:
12:13:4c:b0:88:3b:73:13:40:65:9c:6c:50:40:55:
62:10:aa:84:c1:24:b6:f4:09:53:46:fc:6f:89:84:
c4:b2:94:16:77:e8:c3:67:83:a1:ac:41:07:d2:12:
b7:13:06:d5:81:eb:ac:2e:7b:04:cb:56:18:d7:6b:
4b:fc:8e:1e:ed:83:33:93:13:c7:01:a5:d7:2d:6f:
7d:26:f2:a6:6b:37:1d:e6:b2:c8:48:cd:b5:ce:ca:
0b:4a:a2:7c:d8:26:85:90:e2:83:64:eb:35:08:6b:
0c:ea:0a:d9:20:62:82:8c:ef:ef:18:ef:ad:a6:58:
7d:4e:e2:4f:4a:b8:cf:53:4b:26:ab:9d:a3:1e:07:
03:f2:04:54:fa:d3:0d:b5:79:5f:03:16:73:6d:b6:
85:fc:e6:94:66:75:53:28:3f:79:f4:3b:8c:9c:fd:
5e:8d:32:f3:de:2e:b1:b7:7f:e2:a7:9a:ed:7a:0c:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:03:14:96:86:FE:B2:EC:A0:6F:6B:A3:52:CD:26:F6:7E:3C:D1
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Fs8DFJaG_rLsoG9ro1LNJvZ-PNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.47.0/24
85.254.62.0/24
85.254.104.0/21
85.254.116.0/24
85.254.122.0/24
159.148.125.0/24
159.148.138.0/24
159.148.150.0/24
159.148.222.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cc:db:7d:72:88:87:3c:92:a3:5e:1a:97:f7:10:10:85:22:
0a:2c:53:cc:5e:98:4b:5d:cc:43:7b:b9:31:6c:aa:ae:31:fb:
9f:08:e0:3c:8a:d4:4e:66:cf:62:20:57:ed:4e:e7:f3:00:8d:
af:8f:59:ae:de:41:75:39:04:4a:1c:44:cd:78:59:12:32:b7:
cc:15:28:85:46:29:7d:8d:b7:5c:5e:c8:e0:08:cb:e4:5c:99:
df:d0:72:df:d9:ce:96:64:bc:54:70:d7:87:4a:0b:0b:2e:c3:
22:e1:23:db:b6:dd:b4:b9:8f:ed:d8:78:b6:1e:4e:85:ce:39:
e4:e0:33:40:ac:8f:16:1a:3a:46:ed:4b:9b:49:00:d4:c5:ad:
aa:8c:ad:2f:42:03:c3:97:ca:bd:ef:ad:52:1e:75:42:37:87:
c9:40:fe:a6:6e:10:c1:3f:99:9e:f9:d3:92:47:0c:dd:e1:59:
dc:ce:c4:3e:14:0f:68:38:e6:8d:72:39:d8:cd:92:3d:4a:fc:
9b:04:a2:c6:1b:1b:1a:e4:c0:c1:e2:60:99:11:92:bc:bb:28:
c6:d2:20:57:7d:87:36:f4:9d:ae:36:f6:ec:f3:d2:a9:36:97:
f7:2f:ed:05:0c:b3:d0:e2:51:42:97:ca:31:b9:a2:0f:a0:17:
51:47:95:6d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQksvcULJB/v/xwFF/wZ7dtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmNmMDMxNDk2ODZmZWIyZWNhMDZmNmJhMzUyY2QyNmY2N2UzY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmip2Ch25JxW0BVXiCljEvUrc3qe
qxDTgr2BpkBm7gl/T+AYJ+Z+uFFn18gdomEDyxtQqrp2+XLPjk/Vpco8/vjXmGs3
JnqGwjoSE0ywiDtzE0BlnGxQQFViEKqEwSS29AlTRvxviYTEspQWd+jDZ4OhrEEH
0hK3EwbVgeusLnsEy1YY12tL/I4e7YMzkxPHAaXXLW99JvKmazcd5rLISM21zsoL
SqJ82CaFkOKDZOs1CGsM6grZIGKCjO/vGO+tplh9TuJPSrjPU0smq52jHgcD8gRU
+tMNtXlfAxZzbbaF/OaUZnVTKD959DuMnP1ejTLz3i6xt3/ip5rtegyPvQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFBbPAxSWhv6y7KBva6NSzSb2fjzRMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvRnM4REZKYUdfckxzb0c5cm8xTE5KdlotUE5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAVf4vAwQA
Vf4+AwQDVf5oAwQAVf50AwQAVf56AwQAn5R9AwQAn5SKAwQAn5SWAwQAn5TeMA0G
CSqGSIb3DQEBCwUAA4IBAQBZzNt9coiHPJKjXhqX9xAQhSIKLFPMXphLXcxDe7kx
bKquMfufCOA8itROZs9iIFftTufzAI2vj1mu3kF1OQRKHETNeFkSMrfMFSiFRil9
jbdcXsjgCMvkXJnf0HLf2c6WZLxUcNeHSgsLLsMi4SPbtt20uY/t2Hi2Hk6Fzjnk
4DNArI8WGjpG7UubSQDUxa2qjK0vQgPDl8q9761SHnVCN4fJQP6mbhDBP5me+dOS
Rwzd4VnczsQ+FA9oOOaNcjnYzZI9SvybBKLGGxsa5MDB4mCZEZK8uyjG0iBXfYc2
9J2uNvbs89KpNpf3L+0FDLPQ4lFCl8oxuaIPoBdRR5Vt
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:11 2025 by rpki-client