Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/9uepVP8jCNblGgDml0purQuCeuI.roa
File: 9uepVP8jCNblGgDml0purQuCeuI.roa (raw, json)
Hash identifier: krAEUA7J3c4hHlcNHTYBnr7lBIoDvqw3IUws2vLaSSg=
Subject key identifier: F6:E7:A9:54:FF:23:08:D6:E5:1A:00:E6:97:4A:6E:AD:0B:82:7A:E2
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0195C799F489BC9B90BF7079EE3EB64D42B9
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/9uepVP8jCNblGgDml0purQuCeuI.roa
Signing time: Mon 24 Mar 2025 10:01:50 +0000
ROA not before: Mon 24 Mar 2025 10:01:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 85.28.43.0/24 maxlen: 24
85.28.44.0/23 maxlen: 23
85.28.57.0/24 maxlen: 24
85.28.59.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:99:f4:89:bc:9b:90:bf:70:79:ee:3e:b6:4d:42:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Mar 24 10:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6e7a954ff2308d6e51a00e6974a6ead0b827ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:19:fc:b3:15:cb:ee:ef:a4:b7:99:05:4d:
28:e0:74:53:d7:54:98:ec:c9:2e:2a:71:95:5d:a3:
f9:2b:94:87:8e:bd:a8:65:1c:71:29:0f:e5:ac:9a:
66:41:dc:58:d2:72:45:26:13:bd:91:57:3e:77:47:
9e:b2:7f:ac:dc:93:58:2f:c6:1a:14:8f:7d:c6:64:
33:22:3d:6d:2f:2e:95:f2:c1:4a:50:d0:6d:ad:cd:
bb:86:ed:b8:61:64:4a:41:af:94:b6:57:b9:83:02:
56:33:99:c1:09:3b:83:f4:7a:a1:63:ef:5c:3a:f2:
f2:1d:06:dc:8b:1c:3e:db:48:78:08:3c:6b:e8:14:
35:fb:a8:01:58:7f:29:6b:d9:24:22:99:91:d1:5d:
c3:2e:25:89:72:11:89:e3:b5:84:c2:ba:8f:60:fd:
79:5a:4c:9e:f2:fe:5b:2c:3b:c9:eb:87:f4:87:34:
23:72:7b:d9:d9:ba:ce:bb:a8:12:11:ad:97:b5:87:
14:e5:17:e5:15:e7:a0:fe:79:ff:9e:f2:87:18:1b:
75:60:03:45:72:f1:f8:ed:5c:84:e9:7b:b1:94:08:
43:56:24:3b:32:6f:93:8c:76:3a:9f:6a:45:59:ad:
53:b4:ef:55:38:af:6f:cf:df:42:93:62:77:ea:8f:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E7:A9:54:FF:23:08:D6:E5:1A:00:E6:97:4A:6E:AD:0B:82:7A:E2
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/9uepVP8jCNblGgDml0purQuCeuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.43.0-85.28.45.255
85.28.57.0/24
85.28.59.0/24
109.238.203.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ef:7e:8b:6f:6f:cf:3c:03:b5:82:47:b2:ae:c2:f7:16:4d:
cb:40:89:99:44:ae:1b:17:c9:fd:7c:62:a2:3a:88:bd:59:b3:
75:ad:bc:e2:0a:40:e5:aa:45:28:74:93:18:54:0b:1f:86:00:
f6:a0:b9:27:af:d5:c5:4a:50:2d:ba:d1:d7:0b:81:8a:04:26:
51:4d:28:39:93:54:d2:44:5c:dd:da:31:8c:c0:2a:08:6a:65:
79:63:ec:18:cd:11:c7:d4:9a:36:50:e2:6b:25:8f:07:0f:ed:
c8:c4:22:ef:ac:0f:10:97:49:fe:d4:9d:61:60:c2:0d:cb:9d:
33:70:c6:e1:f6:d0:fe:1f:24:1d:2f:f5:89:72:45:d1:e4:bc:
a1:bb:70:4c:83:2b:9e:8a:f4:ef:4a:f2:37:5d:62:13:5a:d4:
1d:37:d6:ea:79:15:8e:eb:fa:ff:01:08:46:1d:79:3d:f1:70:
7b:a8:fa:d2:e0:4f:39:ae:60:ed:a1:fa:94:2e:64:3d:90:0f:
b0:23:bc:6c:06:c2:68:e7:51:73:cc:49:3f:6f:41:39:c9:e1:
67:bc:ea:98:e3:d6:91:ff:d6:16:12:ea:6f:c7:1d:b3:ef:43:
6d:2a:ec:6c:26:7c:a0:7d:47:1d:08:e2:8d:84:ad:72:ff:9b:
57:50:c9:cf
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZXHmfSJvJuQv3B57j62TUK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjUwMzI0MTAwMTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmU3YTk1NGZmMjMwOGQ2ZTUxYTAwZTY5NzRhNmVhZDBiODI3YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojcZ/LMVy+7vpLeZBU0o4HRT11SY
7MkuKnGVXaP5K5SHjr2oZRxxKQ/lrJpmQdxY0nJFJhO9kVc+d0eesn+s3JNYL8Ya
FI99xmQzIj1tLy6V8sFKUNBtrc27hu24YWRKQa+Utle5gwJWM5nBCTuD9HqhY+9c
OvLyHQbcixw+20h4CDxr6BQ1+6gBWH8pa9kkIpmR0V3DLiWJchGJ47WEwrqPYP15
Wkye8v5bLDvJ64f0hzQjcnvZ2brOu6gSEa2XtYcU5RflFeeg/nn/nvKHGBt1YANF
cvH47VyE6XuxlAhDViQ7Mm+TjHY6n2pFWa1TtO9VOK9vz99Ck2J36o/C8wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFPbnqVT/IwjW5RoA5pdKbq0LgnriMB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvOXVlcFZQOGpDTmJsR2dEbWwwcHVyUXVDZXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBABVHCsD
BAFVHCwDBABVHDkDBABVHDsDBABt7sswDQYJKoZIhvcNAQELBQADggEBAIXvfotv
b888A7WCR7KuwvcWTctAiZlErhsXyf18YqI6iL1Zs3WtvOIKQOWqRSh0kxhUCx+G
APaguSev1cVKUC260dcLgYoEJlFNKDmTVNJEXN3aMYzAKghqZXlj7BjNEcfUmjZQ
4msljwcP7cjEIu+sDxCXSf7UnWFgwg3LnTNwxuH20P4fJB0v9YlyRdHkvKG7cEyD
K56K9O9K8jddYhNa1B031up5FY7r+v8BCEYdeT3xcHuo+tLgTzmuYO2h+pQuZD2Q
D7AjvGwGwmjnUXPMST9vQTnJ4We86pjj1pH/1hYS6m/HHbPvQ20q7GwmfKB9Rx0I
4o2ErXL/m1dQyc8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:53:34 2025 by rpki-client