Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/B2yHxHbEm9GmCNVxvcrZFxarDHM.roa
File: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (raw, json)
Hash identifier: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=
Subject key identifier: 07:6C:87:C4:76:C4:9B:D1:A6:08:D5:71:BD:CA:D9:17:16:AB:0C:73
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01942747E3E1FBF1262F5D8246AEE732542E
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/B2yHxHbEm9GmCNVxvcrZFxarDHM.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213296
IP address blocks: 85.28.48.0/22 maxlen: 22
85.28.52.0/22 maxlen: 22
85.28.52.0/23 maxlen: 23
85.28.54.0/23 maxlen: 23
85.28.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e3:e1:fb:f1:26:2f:5d:82:46:ae:e7:32:54:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076c87c476c49bd1a608d571bdcad91716ab0c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:5b:df:ac:22:bc:bb:2e:84:c2:8a:3b:2a:
74:bd:33:fb:08:41:d8:2c:34:36:9e:db:d0:b5:a0:
51:00:ff:40:fa:9d:fd:5a:c5:8e:8c:fe:10:81:d7:
4e:f2:99:d8:e1:b6:3b:f3:d1:9d:8c:58:f5:c4:db:
d4:40:6d:6b:b0:92:aa:b2:75:c5:a1:5b:07:2d:fd:
b7:a3:ee:cb:ca:78:94:b5:5e:e9:71:d9:21:1c:04:
ee:45:98:60:50:db:40:6b:fb:d3:86:00:67:3a:ca:
3b:9b:15:6b:27:fa:e3:69:75:44:dd:2b:df:68:86:
cf:9d:cb:00:ef:51:9a:be:35:b3:a6:dc:b1:7d:3c:
91:3b:8a:54:f3:f1:cc:4b:4a:e4:4f:bf:e3:4e:88:
b3:99:66:83:04:20:5d:f4:91:99:32:2e:fe:1b:05:
0d:3c:b2:90:11:fc:f1:1a:28:71:48:7c:ae:1a:39:
b3:01:96:91:0c:b6:f1:29:91:a4:7e:a7:8f:75:e8:
2a:54:0c:3c:20:8a:21:da:b9:e5:01:40:07:89:bf:
29:ca:70:4e:a9:15:67:bd:11:fd:89:cf:f6:72:6f:
05:17:54:01:6f:79:f4:b4:63:52:80:82:be:29:d0:
c1:1e:ab:6d:2d:ea:f2:76:07:50:00:0a:36:17:94:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:87:C4:76:C4:9B:D1:A6:08:D5:71:BD:CA:D9:17:16:AB:0C:73
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/B2yHxHbEm9GmCNVxvcrZFxarDHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.48.0-85.28.59.255
Signature Algorithm: sha256WithRSAEncryption
bc:aa:55:4d:65:dd:98:99:47:5f:3f:55:15:9d:b0:f3:23:00:
b3:50:5c:12:e9:12:5b:15:b8:36:c0:5a:b9:32:14:cb:c8:82:
b5:c5:ab:8c:c8:69:5f:f2:54:ed:96:eb:66:28:31:62:cc:f9:
eb:35:c0:d3:58:3a:b6:c4:3f:f7:01:3c:87:83:e1:6c:a7:64:
70:82:ce:9d:58:da:9d:1f:3f:9b:32:99:d2:b1:d3:2c:6b:e1:
ec:ab:9b:f7:73:2a:50:03:5c:bc:68:d1:dc:29:3f:72:69:81:
19:c8:81:05:fa:47:9c:7c:60:e6:8d:e4:ef:57:c0:63:72:ed:
50:7e:b0:5f:5b:33:a1:22:3b:60:a5:9d:36:33:9c:93:61:63:
83:47:04:c3:7e:04:3f:64:34:39:a4:4c:dd:38:0a:26:6f:34:
d7:37:49:c5:c6:6f:6b:b8:5a:43:1e:8e:b2:c3:72:77:0d:67:
be:99:ef:18:04:dc:24:a2:7a:17:45:df:09:6d:10:aa:03:ca:
f1:9f:14:43:61:31:81:9d:2e:19:67:db:07:c5:99:1a:ab:26:
01:65:2f:1c:39:b7:3b:bf:05:9a:98:91:79:e1:eb:2a:e8:1f:
6d:7d:4c:25:79:b7:a8:c3:cd:dd:2d:53:a6:f3:75:55:7c:6d:
40:09:99:2b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQnR+Ph+/EmL12CRq7nMlQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjUwMTAyMTM1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzZjODdjNDc2YzQ5YmQxYTYwOGQ1NzFiZGNhZDkxNzE2YWIwYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Rb36wivLsuhMKKOyp0vTP7CEHY
LDQ2ntvQtaBRAP9A+p39WsWOjP4QgddO8pnY4bY789GdjFj1xNvUQG1rsJKqsnXF
oVsHLf23o+7LyniUtV7pcdkhHATuRZhgUNtAa/vThgBnOso7mxVrJ/rjaXVE3Svf
aIbPncsA71GavjWzptyxfTyRO4pU8/HMS0rkT7/jToizmWaDBCBd9JGZMi7+GwUN
PLKQEfzxGihxSHyuGjmzAZaRDLbxKZGkfqePdegqVAw8IIoh2rnlAUAHib8pynBO
qRVnvRH9ic/2cm8FF1QBb3n0tGNSgIK+KdDBHqttLerydgdQAAo2F5RmVQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAdsh8R2xJvRpgjVcb3K2RcWqwxzMB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvQjJ5SHhIYkVtOUdtQ05WeHZjclpGeGFyREhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARVHDAD
BAJVHDgwDQYJKoZIhvcNAQELBQADggEBALyqVU1l3ZiZR18/VRWdsPMjALNQXBLp
ElsVuDbAWrkyFMvIgrXFq4zIaV/yVO2W62YoMWLM+es1wNNYOrbEP/cBPIeD4Wyn
ZHCCzp1Y2p0fP5symdKx0yxr4eyrm/dzKlADXLxo0dwpP3JpgRnIgQX6R5x8YOaN
5O9XwGNy7VB+sF9bM6EiO2ClnTYznJNhY4NHBMN+BD9kNDmkTN04CiZvNNc3ScXG
b2u4WkMejrLDcncNZ76Z7xgE3CSiehdF3wltEKoDyvGfFENhMYGdLhln2wfFmRqr
JgFlLxw5tzu/BZqYkXnh6yroH219TCV5t6jDzd0tU6bzdVV8bUAJmSs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:36 2025 by rpki-client