Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/Fxt8kpu3dchFE_dB5dOR2zZH26o.roa
File: Fxt8kpu3dchFE_dB5dOR2zZH26o.roa (raw, json)
Hash identifier: AXPqgbOMZJMcBBZWRc/JLb8TwoukuoCsmemBbSizpL8=
Subject key identifier: 17:1B:7C:92:9B:B7:75:C8:45:13:F7:41:E5:D3:91:DB:36:47:DB:AA
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01942747E320881669C4BF8566115FBEC4BB
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/Fxt8kpu3dchFE_dB5dOR2zZH26o.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 85.28.32.0/23 maxlen: 23
85.28.34.0/24 maxlen: 24
85.28.35.0/24 maxlen: 24
85.28.36.0/22 maxlen: 22
85.28.40.0/23 maxlen: 23
85.28.42.0/24 maxlen: 24
85.28.43.0/24 maxlen: 24
85.28.44.0/23 maxlen: 23
85.28.48.0/22 maxlen: 22
85.28.52.0/23 maxlen: 23
85.28.54.0/23 maxlen: 23
85.28.56.0/24 maxlen: 24
85.28.57.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
85.28.59.0/24 maxlen: 24
85.28.60.0/22 maxlen: 22
85.28.60.0/24 maxlen: 24
85.28.62.0/24 maxlen: 24
109.238.200.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
109.238.205.0/24 maxlen: 24
194.31.156.0/22 maxlen: 22
194.31.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e3:20:88:16:69:c4:bf:85:66:11:5f:be:c4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=171b7c929bb775c84513f741e5d391db3647dbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:0f:3d:8d:50:84:8e:f5:a5:bc:c9:70:0d:
ff:90:39:25:b2:57:e4:ee:b4:37:a5:b4:90:89:4a:
19:06:0b:29:35:41:4f:89:8d:8e:f0:83:67:65:cd:
e7:1c:ef:89:04:dc:f4:f1:8b:da:f3:b4:43:2e:04:
b8:e3:70:73:7b:99:04:f8:04:de:02:f5:3f:b1:b2:
ff:43:0d:87:3d:38:88:6b:a0:29:89:c0:cd:49:ef:
20:6d:d2:29:75:ca:aa:1f:41:7a:d0:e1:9f:25:47:
aa:57:92:a5:0c:31:9b:44:c9:28:a8:4c:bc:4e:77:
8f:2c:14:f5:7b:45:ca:93:28:b8:34:b1:ee:bc:c3:
9f:d0:33:cb:2a:c1:2d:2a:bc:63:79:8e:eb:11:b2:
7a:97:ee:69:51:81:09:0a:59:c7:4a:24:7b:b5:37:
61:a4:3e:ca:67:bf:3d:6a:d1:16:21:47:89:4a:c3:
0b:dd:2a:43:0c:88:c7:8a:de:ae:71:65:09:18:65:
2d:2a:07:6d:7f:df:6d:bf:9b:fc:40:0a:9c:e8:f7:
a3:99:51:21:f8:61:3c:c1:90:7b:ab:9e:f9:90:af:
3f:c1:f6:63:85:36:27:e5:1a:a2:ac:0f:18:31:72:
d4:9f:de:51:a6:a5:3a:85:65:20:61:75:16:a9:8f:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:7C:92:9B:B7:75:C8:45:13:F7:41:E5:D3:91:DB:36:47:DB:AA
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/Fxt8kpu3dchFE_dB5dOR2zZH26o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.32.0-85.28.45.255
85.28.48.0/20
109.238.200.0/24
109.238.203.0/24
109.238.205.0/24
194.31.156.0/22
Signature Algorithm: sha256WithRSAEncryption
18:e4:ff:bd:70:7c:65:e3:32:02:c3:14:64:ca:cd:16:7e:fd:
d6:ff:ba:94:e5:81:61:bb:79:b6:c0:7c:a5:12:4e:3a:bb:84:
5a:90:ca:33:c3:60:93:74:62:c7:de:49:81:0e:2b:fc:40:08:
ab:b9:1d:57:5b:a2:3b:28:52:e2:0e:c7:54:29:db:e4:fe:46:
0e:97:3f:d6:35:26:4d:21:5c:2f:db:0f:2a:d6:39:c8:78:24:
4e:a6:15:c2:65:2a:26:6a:4a:a3:ac:06:f9:d7:de:04:86:6b:
09:ff:dd:61:78:5d:d9:8e:88:50:a4:6d:9e:0a:cf:a4:b3:a4:
60:15:e8:81:ec:1b:26:db:6b:27:db:fa:6a:be:1d:b0:ba:80:
52:03:66:95:54:12:c9:d2:60:68:aa:17:5f:f6:a3:be:e2:4d:
62:23:30:30:42:fa:c4:d6:af:96:2a:59:67:fa:ba:52:b9:0e:
83:70:e7:27:a0:77:cb:11:8b:d8:52:dc:44:92:83:6f:36:05:
24:b4:95:69:7d:ad:aa:2b:25:81:54:78:35:8e:6e:ae:71:2e:
97:95:0f:8f:21:c5:58:36:bd:11:2e:50:6a:ec:c8:f0:6d:33:
4b:bf:15:ef:c3:13:53:d0:3e:60:32:01:68:98:3a:28:ba:17:
07:7f:00:9e
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQnR+MgiBZpxL+FZhFfvsS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjUwMTAyMTM1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzFiN2M5MjliYjc3NWM4NDUxM2Y3NDFlNWQzOTFkYjM2NDdkYmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn80PPY1QhI71pbzJcA3/kDklslfk
7rQ3pbSQiUoZBgspNUFPiY2O8INnZc3nHO+JBNz08Yva87RDLgS443Bze5kE+ATe
AvU/sbL/Qw2HPTiIa6ApicDNSe8gbdIpdcqqH0F60OGfJUeqV5KlDDGbRMkoqEy8
TnePLBT1e0XKkyi4NLHuvMOf0DPLKsEtKrxjeY7rEbJ6l+5pUYEJClnHSiR7tTdh
pD7KZ789atEWIUeJSsML3SpDDIjHit6ucWUJGGUtKgdtf99tv5v8QAqc6PejmVEh
+GE8wZB7q575kK8/wfZjhTYn5RqirA8YMXLUn95RpqU6hWUgYXUWqY8jSQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFBcbfJKbt3XIRRP3QeXTkds2R9uqMB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvRnh0OGtwdTNkY2hGRV9kQjVkT1IyelpIMjZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAVVHCAD
BAFVHCwDBARVHDADBABt7sgDBABt7ssDBABt7s0DBALCH5wwDQYJKoZIhvcNAQEL
BQADggEBABjk/71wfGXjMgLDFGTKzRZ+/db/upTlgWG7ebbAfKUSTjq7hFqQyjPD
YJN0YsfeSYEOK/xACKu5HVdbojsoUuIOx1Qp2+T+Rg6XP9Y1Jk0hXC/bDyrWOch4
JE6mFcJlKiZqSqOsBvnX3gSGawn/3WF4XdmOiFCkbZ4Kz6SzpGAV6IHsGybbayfb
+mq+HbC6gFIDZpVUEsnSYGiqF1/2o77iTWIjMDBC+sTWr5YqWWf6ulK5DoNw5yeg
d8sRi9hS3ESSg282BSS0lWl9raorJYFUeDWObq5xLpeVD48hxVg2vREuUGrsyPBt
M0u/Fe/DE1PQPmAyAWiYOii6Fwd/AJ4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:25 2025 by rpki-client