Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1n4zqREiVi_zyO8th06gwQ6t7Q4.roa
File: 1n4zqREiVi_zyO8th06gwQ6t7Q4.roa (raw, json)
Hash identifier: u6qcIJFarJsryV9y4Uk/4cSWlZDFVztJhUfnXjItf0Y=
Subject key identifier: D6:7E:33:A9:11:22:56:2F:F3:C8:EF:2D:87:4E:A0:C1:0E:AD:ED:0E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3F388373C6C422E486DFA3796172
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1n4zqREiVi_zyO8th06gwQ6t7Q4.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209882
IP address blocks: 85.120.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3f:38:83:73:c6:c4:22:e4:86:df:a3:79:61:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d67e33a91122562ff3c8ef2d874ea0c10eaded0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:23:a7:b8:f9:c2:71:7d:99:80:e9:bf:7a:
83:85:b0:94:b7:4c:3b:22:6d:d6:49:50:35:80:9f:
0b:cf:a1:f9:1a:9d:b0:39:24:7e:69:fd:65:55:78:
37:b9:42:8f:2c:9c:d7:1d:dc:b4:4e:54:25:a5:22:
18:e3:dd:e3:5f:75:da:73:9c:5e:fa:1e:c8:ef:0d:
6e:f1:ff:fe:19:28:6c:07:3d:be:89:45:6c:d1:8f:
3c:22:fe:a8:d3:11:25:65:4e:45:6f:76:d1:80:7a:
c2:43:f4:aa:cf:ab:a5:96:3e:dd:ec:cb:52:d0:ed:
e1:39:8b:95:f3:8e:66:2f:b3:e9:0c:28:51:1b:14:
62:ba:01:c4:61:01:dd:82:25:2c:40:c7:8e:cb:a1:
e7:cc:e9:3b:55:ce:77:31:23:4e:33:96:d8:43:eb:
38:8c:fd:16:24:fc:46:ed:d6:c0:2e:bd:12:00:5c:
fe:6b:5a:c3:30:13:0a:c6:b8:1f:0f:08:6c:6e:1b:
d4:93:c4:df:66:98:50:69:bc:23:a0:c9:1f:57:f4:
62:b5:8f:01:ae:7c:3e:ba:33:2d:28:e2:54:f4:8d:
7d:73:4f:fc:bb:30:45:31:93:0a:3e:d9:42:e3:3a:
09:ca:10:2e:2a:c9:76:2e:9c:64:70:ed:f0:5c:1b:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:33:A9:11:22:56:2F:F3:C8:EF:2D:87:4E:A0:C1:0E:AD:ED:0E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1n4zqREiVi_zyO8th06gwQ6t7Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.30.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9c:94:ad:1e:a2:1a:08:1a:58:e6:a0:cd:53:44:71:c1:b5:
f2:91:5a:24:bd:43:d3:ad:d5:fb:1b:69:07:18:4b:6d:6d:17:
64:a6:78:8c:2d:4c:ac:71:8e:7c:33:51:9d:59:dd:df:d5:53:
e8:3f:49:62:d6:da:fa:ae:0b:27:6b:fd:4b:64:f1:1a:85:c9:
39:e3:65:5e:33:c6:67:0d:5e:0d:cc:1d:ce:1f:42:df:a3:05:
c6:a5:02:d6:1a:5f:70:2c:25:f9:ef:46:3a:dc:1d:15:22:cc:
e7:f5:ff:57:1c:8c:5e:2e:10:80:8a:f1:76:7d:d0:19:0b:f7:
be:72:a3:07:59:0b:94:cb:77:b0:e2:a6:cd:4a:58:9b:b0:47:
fb:4d:8f:7c:f0:19:c2:d2:1a:82:14:d9:01:37:8c:dd:b2:0b:
89:21:c2:b9:df:06:53:4f:9d:f3:44:2d:06:f7:2a:12:36:c2:
a3:91:00:a3:ec:f9:87:c4:36:3b:c9:5f:69:2e:b5:e6:e6:d9:
04:b2:47:7b:01:fc:53:b2:e2:78:48:e4:8f:2f:f1:52:20:9e:
3f:bb:45:16:cd:fd:fe:8a:87:bb:c5:9b:f4:de:07:43:71:45:
5a:e9:29:8c:75:89:e6:9e:11:ae:01:e7:ee:d0:e0:74:f2:0f:
c2:a6:25:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjD84g3PGxCLkht+jeWFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjdlMzNhOTExMjI1NjJmZjNjOGVmMmQ4NzRlYTBjMTBlYWRlZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqIjp7j5wnF9mYDpv3qDhbCUt0w7
Im3WSVA1gJ8Lz6H5Gp2wOSR+af1lVXg3uUKPLJzXHdy0TlQlpSIY493jX3Xac5xe
+h7I7w1u8f/+GShsBz2+iUVs0Y88Iv6o0xElZU5Fb3bRgHrCQ/Sqz6ullj7d7MtS
0O3hOYuV845mL7PpDChRGxRiugHEYQHdgiUsQMeOy6HnzOk7Vc53MSNOM5bYQ+s4
jP0WJPxG7dbALr0SAFz+a1rDMBMKxrgfDwhsbhvUk8TfZphQabwjoMkfV/RitY8B
rnw+ujMtKOJU9I19c0/8uzBFMZMKPtlC4zoJyhAuKsl2LpxkcO3wXBti9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZ+M6kRIlYv88jvLYdOoMEOre0OMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvMW40enFSRWlWaV96eU84dGgwNmd3UTZ0N1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXgeMA0G
CSqGSIb3DQEBCwUAA4IBAQBYnJStHqIaCBpY5qDNU0RxwbXykVokvUPTrdX7G2kH
GEttbRdkpniMLUyscY58M1GdWd3f1VPoP0li1tr6rgsna/1LZPEahck542VeM8Zn
DV4NzB3OH0LfowXGpQLWGl9wLCX570Y63B0VIszn9f9XHIxeLhCAivF2fdAZC/e+
cqMHWQuUy3ew4qbNSlibsEf7TY988BnC0hqCFNkBN4zdsguJIcK53wZTT53zRC0G
9yoSNsKjkQCj7PmHxDY7yV9pLrXm5tkEskd7AfxTsuJ4SOSPL/FSIJ4/u0UWzf3+
ioe7xZv03gdDcUVa6SmMdYnmnhGuAefu0OB08g/CpiXi
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:41 2025 by rpki-client