Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s8LCAR8o_PL5O7sDVwkOlUV-3fE.roa
File: s8LCAR8o_PL5O7sDVwkOlUV-3fE.roa (raw, json)
Hash identifier: Br7yQ2vURvSqsXROx00rqB8VpuIHIW99rJY1NJCECTo=
Subject key identifier: B3:C2:C2:01:1F:28:FC:F2:F9:3B:BB:03:57:09:0E:95:45:7E:DD:F1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1E0B07DC7AC5C129E7C295706CF5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s8LCAR8o_PL5O7sDVwkOlUV-3fE.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39347
IP address blocks: 85.120.224.0/21 maxlen: 24
85.121.48.0/21 maxlen: 24
85.121.120.0/21 maxlen: 24
85.121.208.0/21 maxlen: 24
85.121.240.0/21 maxlen: 24
85.122.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:0b:07:dc:7a:c5:c1:29:e7:c2:95:70:6c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c2c2011f28fcf2f93bbb0357090e95457eddf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:85:4a:82:f1:0f:0a:e6:ff:04:53:0b:c6:
25:60:40:cd:66:0a:d3:11:ac:49:18:64:68:fa:04:
b0:66:79:e7:f6:4a:af:48:da:c6:49:fd:85:b3:10:
4f:8d:b5:b5:77:78:5a:45:04:0b:e2:8e:65:72:ff:
05:27:c2:2d:95:79:7e:71:40:50:6a:21:7c:a1:d9:
57:ef:c2:17:ac:91:e5:b5:cf:c8:d2:28:b6:dc:51:
53:18:a0:86:6f:27:6c:e6:5a:6e:3b:ea:84:fa:2d:
c4:dd:a7:b6:b2:a3:7f:38:65:1c:03:5f:15:6d:da:
42:9d:a8:75:14:1b:e0:0d:ec:20:6b:20:3c:22:f8:
88:0e:f6:d8:e5:0d:4c:ea:3c:0d:f5:a0:bc:bb:b5:
e4:dd:18:d2:04:cf:fa:5a:6e:a0:10:74:fa:4a:93:
8e:4b:a4:d2:5a:ee:57:f9:d7:37:ba:3e:0b:83:f9:
64:06:76:cd:0a:9e:a2:11:52:f7:d4:ab:8a:cc:df:
07:ab:be:85:ca:22:c4:a8:1f:37:e5:5e:c4:41:d6:
e5:2e:bb:3c:7f:5a:f0:08:34:72:bf:0b:fa:94:2c:
5e:56:12:0f:82:b2:b1:6e:6b:52:bc:b4:b0:6e:fd:
0d:fd:7f:c5:11:30:9d:19:df:ba:25:42:05:9c:36:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C2:C2:01:1F:28:FC:F2:F9:3B:BB:03:57:09:0E:95:45:7E:DD:F1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s8LCAR8o_PL5O7sDVwkOlUV-3fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.224.0/21
85.121.48.0/21
85.121.120.0/21
85.121.208.0/21
85.121.240.0/21
85.122.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:b2:30:ce:75:cb:33:b2:92:db:4a:94:ab:41:f4:c1:54:a3:
64:41:11:ed:0e:e3:db:98:65:bb:a3:3c:d9:05:72:a6:e4:c8:
a7:44:24:9c:02:19:6b:d8:05:46:e5:5f:36:9c:fb:f0:c3:bf:
6f:3c:16:d7:a5:4f:66:ac:6d:31:51:27:a0:43:b3:28:71:41:
fe:68:77:fb:ee:7f:5e:80:50:4f:b9:55:02:15:91:30:68:99:
0d:40:3f:5d:b2:74:00:4c:a6:6f:a8:7a:a6:41:86:b4:c9:56:
ee:19:93:86:ab:f7:26:80:4c:da:fb:66:48:3f:27:5d:6b:52:
88:c0:e4:22:6c:ff:a1:b5:e4:88:af:dd:d8:c7:a7:b1:d2:30:
3c:33:71:18:e2:07:b2:6a:31:90:30:8c:5e:7f:46:1a:ba:8b:
6f:de:49:ba:d4:53:9b:25:fe:9f:94:aa:57:b0:41:ab:04:4f:
e2:7e:d8:cb:d4:94:a9:84:09:b9:98:61:cf:b8:21:df:94:f0:
84:1c:93:d7:a9:e1:3c:6e:10:cb:e3:72:d2:29:9a:7c:ac:32:
fe:98:20:2f:e7:74:49:e7:fa:38:0f:63:59:51:df:88:e8:b4:
74:59:85:b1:8e:c8:73:0c:b6:c5:3b:ec:2d:be:6b:85:b5:8e:
89:02:ef:ae
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQfjB4LB9x6xcEp58KVcGz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2MyYzIwMTFmMjhmY2YyZjkzYmJiMDM1NzA5MGU5NTQ1N2VkZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06FSoLxDwrm/wRTC8YlYEDNZgrT
EaxJGGRo+gSwZnnn9kqvSNrGSf2FsxBPjbW1d3haRQQL4o5lcv8FJ8ItlXl+cUBQ
aiF8odlX78IXrJHltc/I0ii23FFTGKCGbyds5lpuO+qE+i3E3ae2sqN/OGUcA18V
bdpCnah1FBvgDewgayA8IviIDvbY5Q1M6jwN9aC8u7Xk3RjSBM/6Wm6gEHT6SpOO
S6TSWu5X+dc3uj4Lg/lkBnbNCp6iEVL31KuKzN8Hq76FyiLEqB835V7EQdblLrs8
f1rwCDRyvwv6lCxeVhIPgrKxbmtSvLSwbv0N/X/FETCdGd+6JUIFnDaQvwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLPCwgEfKPzy+Tu7A1cJDpVFft3xMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvczhMQ0FSOG9fUEw1TzdzRFZ3a09sVVYtM2ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDVXjgAwQD
VXkwAwQDVXl4AwQDVXnQAwQDVXnwAwQCVXp4MA0GCSqGSIb3DQEBCwUAA4IBAQC4
sjDOdcszspLbSpSrQfTBVKNkQRHtDuPbmGW7ozzZBXKm5MinRCScAhlr2AVG5V82
nPvww79vPBbXpU9mrG0xUSegQ7MocUH+aHf77n9egFBPuVUCFZEwaJkNQD9dsnQA
TKZvqHqmQYa0yVbuGZOGq/cmgEza+2ZIPydda1KIwOQibP+hteSIr93Yx6ex0jA8
M3EY4geyajGQMIxef0Yauotv3km61FObJf6flKpXsEGrBE/iftjL1JSphAm5mGHP
uCHflPCEHJPXqeE8bhDL43LSKZp8rDL+mCAv53RJ5/o4D2NZUd+I6LR0WYWxjshz
DLbFO+wtvmuFtY6JAu+u
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:27 2025 by rpki-client