Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cT_o21vigUWC7m6BlqYKjsQ9nB4.roa
File: cT_o21vigUWC7m6BlqYKjsQ9nB4.roa (raw, json)
Hash identifier: E1vqxPzQRnP0u4deGs/4CXvREFM2pyyq/JZLUa4obtg=
Subject key identifier: 71:3F:E8:DB:5B:E2:81:45:82:EE:6E:81:96:A6:0A:8E:C4:3D:9C:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BBA272080BAA5AA36049FE9DC0BE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cT_o21vigUWC7m6BlqYKjsQ9nB4.roa
Signing time: Thu 02 Jan 2025 17:51:23 +0000
ROA not before: Thu 02 Jan 2025 17:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210624
IP address blocks: 85.217.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:bb:a2:72:08:0b:aa:5a:a3:60:49:fe:9d:c0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=713fe8db5be2814582ee6e8196a60a8ec43d9c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:f3:e6:c4:8c:10:04:b9:64:c1:9f:56:f4:
39:dc:43:a2:53:37:24:5b:46:f2:a6:10:46:6b:63:
3e:cc:21:94:6b:22:5d:d2:a3:ca:93:83:7b:f0:11:
73:60:f6:08:74:f7:18:ee:20:1b:a4:22:58:a7:00:
be:c9:3f:c5:14:a9:65:82:be:99:e3:66:0e:0e:3e:
e8:e4:1f:17:ef:51:da:13:4e:df:e6:65:20:13:be:
47:56:0f:c6:88:34:4b:07:3d:e5:80:0e:2a:c1:5c:
bb:7b:1c:0d:5f:18:55:3f:7e:04:a6:f0:63:89:30:
25:1e:8a:ad:be:62:6f:e4:90:4d:e2:ca:23:26:93:
5c:2b:d6:1a:7a:60:5d:0c:30:75:6a:4b:14:5e:51:
a6:08:e8:c8:35:72:86:d5:bf:a1:50:07:10:d2:54:
cb:93:8b:18:aa:44:f7:6c:1e:62:87:8c:98:da:4f:
f5:84:6d:dd:e0:42:ac:f4:f3:69:c9:4d:aa:82:1c:
fc:25:e0:35:de:30:ec:70:6c:88:e0:39:fa:c0:14:
c3:48:b5:f8:ad:b8:a8:25:26:ed:c2:2a:31:02:46:
6a:40:3d:6e:4d:de:59:d7:6a:61:67:4a:cd:00:d7:
a4:64:11:ac:0a:20:19:66:2f:e0:9a:64:93:ea:4d:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:E8:DB:5B:E2:81:45:82:EE:6E:81:96:A6:0A:8E:C4:3D:9C:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cT_o21vigUWC7m6BlqYKjsQ9nB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3c:d3:09:a8:b4:e3:2f:af:20:75:f4:13:5b:09:aa:3b:49:
5b:43:5d:1c:d7:c4:d0:8c:47:b2:54:c2:93:61:48:43:8a:e4:
81:28:63:85:5e:44:a2:21:41:82:1c:84:06:8a:e6:86:c6:49:
4d:d7:f6:04:85:3b:3f:c0:cb:3c:82:67:ca:3a:bd:9d:c3:d4:
00:e6:af:22:3c:63:e5:55:bf:ec:e6:34:18:5c:bf:e4:96:61:
1f:42:98:56:b4:3e:57:57:90:c0:2e:95:3f:72:01:78:cc:44:
8d:84:78:23:1b:1b:11:30:7c:93:b9:ce:98:88:29:af:da:54:
9c:e0:7d:93:a8:59:38:48:4e:20:ca:d6:11:0f:55:22:64:87:
07:10:c6:6b:8a:86:23:30:5e:d4:68:22:d5:ae:1c:de:93:34:
dd:5b:09:fb:da:75:7e:c4:67:d2:f0:76:72:d0:e3:b5:24:85:
43:9f:60:35:95:ee:df:5c:2e:56:60:4b:fe:41:ef:61:b7:0c:
cf:0c:2d:a2:fb:84:fe:f6:af:92:4d:dd:89:61:1c:7e:d6:c3:
1c:74:42:50:68:58:31:64:14:1b:42:5d:7d:d0:b8:bf:2c:76:
91:6f:4a:28:83:3b:c0:0f:92:8e:0f:9c:8f:1f:d8:66:bd:76:
dc:93:b0:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJLuicggLqlqjYEn+ncC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTNmZThkYjViZTI4MTQ1ODJlZTZlODE5NmE2MGE4ZWM0M2Q5YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1bz5sSMEAS5ZMGfVvQ53EOiUzck
W0byphBGa2M+zCGUayJd0qPKk4N78BFzYPYIdPcY7iAbpCJYpwC+yT/FFKllgr6Z
42YODj7o5B8X71HaE07f5mUgE75HVg/GiDRLBz3lgA4qwVy7exwNXxhVP34EpvBj
iTAlHoqtvmJv5JBN4sojJpNcK9YaemBdDDB1aksUXlGmCOjINXKG1b+hUAcQ0lTL
k4sYqkT3bB5ih4yY2k/1hG3d4EKs9PNpyU2qghz8JeA13jDscGyI4Dn6wBTDSLX4
rbioJSbtwioxAkZqQD1uTd5Z12phZ0rNANekZBGsCiAZZi/gmmST6k31YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHE/6Ntb4oFFgu5ugZamCo7EPZweMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvY1RfbzIxdmlnVVdDN202QmxxWUtqc1E5bkI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdm9MA0G
CSqGSIb3DQEBCwUAA4IBAQA8PNMJqLTjL68gdfQTWwmqO0lbQ10c18TQjEeyVMKT
YUhDiuSBKGOFXkSiIUGCHIQGiuaGxklN1/YEhTs/wMs8gmfKOr2dw9QA5q8iPGPl
Vb/s5jQYXL/klmEfQphWtD5XV5DALpU/cgF4zESNhHgjGxsRMHyTuc6YiCmv2lSc
4H2TqFk4SE4gytYRD1UiZIcHEMZrioYjMF7UaCLVrhzekzTdWwn72nV+xGfS8HZy
0OO1JIVDn2A1le7fXC5WYEv+Qe9htwzPDC2i+4T+9q+STd2JYRx+1sMcdEJQaFgx
ZBQbQl190Li/LHaRb0oogzvAD5KOD5yPH9hmvXbck7Db
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:02 2025 by rpki-client