Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/u4CCGzRBUDV4ICzxZZsgpN0rCgU.roa
File: u4CCGzRBUDV4ICzxZZsgpN0rCgU.roa (raw, json)
Hash identifier: F+9MOoKikOT/3OyChT4cKIUsU5jrZT5efG1sIOqxXHE=
Subject key identifier: BB:80:82:1B:34:41:50:35:78:20:2C:F1:65:9B:20:A4:DD:2B:0A:05
Certificate issuer: /CN=53b7c7709ed6bdc3a295c7355a503eb8d61fd232
Certificate serial: 01857343B1005A5E42F821AE69A83AE4F516
Authority key identifier: 53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/u4CCGzRBUDV4ICzxZZsgpN0rCgU.roa
Signing time: Mon 02 Jan 2023 16:14:54 +0000
ROA not before: Mon 02 Jan 2023 16:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 85.8.154.0/24 maxlen: 24
85.8.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:b1:00:5a:5e:42:f8:21:ae:69:a8:3a:e4:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b7c7709ed6bdc3a295c7355a503eb8d61fd232
Validity
Not Before: Jan 2 16:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb80821b3441503578202cf1659b20a4dd2b0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:b6:46:22:e5:55:3b:46:c2:1d:a0:7b:20:
28:8b:f6:09:c9:ec:17:59:24:87:09:67:35:25:4e:
5e:2b:39:99:3c:3c:5f:08:76:ed:d3:60:24:7d:71:
b0:78:9a:3a:7a:53:d3:64:1c:1c:f5:37:99:78:93:
ad:aa:09:fd:df:a0:f2:ab:6e:c5:f9:b5:b9:03:c1:
07:99:59:5b:5f:32:44:2b:f8:2a:10:a7:f5:1e:f0:
ae:82:58:0d:c6:45:9d:99:9e:b4:ad:c7:c8:18:da:
7b:f1:76:77:ae:ce:80:0c:aa:1f:d5:44:34:15:b2:
71:68:74:bf:32:46:5f:8c:f8:e1:9a:7f:31:02:80:
b0:47:83:d8:50:ab:80:f2:84:91:4f:be:62:50:9d:
7d:4e:16:ab:63:6f:f8:6a:5f:79:ea:89:5d:3c:9d:
48:75:65:53:c2:3d:e4:f6:b4:b9:0b:df:1c:fd:1f:
4d:b6:d0:dd:39:df:53:07:14:af:f7:b9:84:03:0e:
80:7b:3f:c1:bd:3a:5e:8f:62:01:83:b3:16:c0:93:
a3:ef:58:41:28:0e:f9:f6:25:18:1c:46:67:d7:cd:
24:24:45:b3:89:7c:84:65:ad:2b:94:d3:9a:ac:49:
04:1c:ef:c9:d5:4a:a8:be:a1:55:3e:64:2d:d3:8d:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:82:1B:34:41:50:35:78:20:2C:F1:65:9B:20:A4:DD:2B:0A:05
X509v3 Authority Key Identifier:
keyid:53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/u4CCGzRBUDV4ICzxZZsgpN0rCgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.153.0-85.8.154.255
Signature Algorithm: sha256WithRSAEncryption
25:ee:ec:b2:3b:1f:15:db:a3:fe:7b:f1:3c:0d:e0:cd:de:88:
90:c1:1f:ef:85:86:09:21:d0:a0:a7:68:a6:6d:83:d5:5b:84:
f2:b9:94:60:d0:63:3e:cf:1f:c6:ea:98:0a:97:50:e3:4c:45:
eb:78:4f:1a:a0:f8:43:19:de:15:44:ad:37:9a:76:8c:8f:5f:
a1:51:36:22:b3:b3:f3:dd:ab:5e:54:3d:b2:26:3a:49:ae:5f:
1a:b2:31:79:b3:b6:7b:00:63:a7:ef:af:2e:c5:92:a0:a8:07:
f4:1e:50:54:e3:f5:90:8b:ea:a3:da:90:21:ff:30:8c:d5:2e:
28:bd:7b:df:17:0b:9a:3e:e3:6a:05:b2:fc:81:3d:de:40:fd:
a8:6b:25:ee:3c:9a:3e:ca:f2:3e:77:16:b7:c8:d6:06:12:be:
07:d2:17:fd:67:5d:c6:45:23:e4:fe:87:7f:4c:95:ea:9a:cc:
0e:be:59:bb:c0:f3:59:11:a4:60:47:84:d7:33:5f:35:fb:e3:
85:ed:8d:57:8a:0e:ae:75:5d:6b:55:2a:7f:84:12:e3:bc:49:
af:14:9c:e1:b7:58:e3:03:0b:ca:5e:fb:15:c8:be:ec:83:c5:
91:ef:cd:cf:11:a7:45:97:f3:fc:30:ae:f6:d5:b3:ee:2a:84:
4b:99:2a:55
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVzQ7EAWl5C+CGuaag65PUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjdjNzcwOWVkNmJkYzNhMjk1YzczNTVhNTAzZWI4ZDYx
ZmQyMzIwHhcNMjMwMTAyMTYxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjgwODIxYjM0NDE1MDM1NzgyMDJjZjE2NTliMjBhNGRkMmIwYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWS2RiLlVTtGwh2geyAoi/YJyewX
WSSHCWc1JU5eKzmZPDxfCHbt02AkfXGweJo6elPTZBwc9TeZeJOtqgn936Dyq27F
+bW5A8EHmVlbXzJEK/gqEKf1HvCuglgNxkWdmZ60rcfIGNp78XZ3rs6ADKof1UQ0
FbJxaHS/MkZfjPjhmn8xAoCwR4PYUKuA8oSRT75iUJ19TharY2/4al956oldPJ1I
dWVTwj3k9rS5C98c/R9NttDdOd9TBxSv97mEAw6Aez/BvTpej2IBg7MWwJOj71hB
KA759iUYHEZn180kJEWziXyEZa0rlNOarEkEHO/J1UqovqFVPmQt042+RwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLuAghs0QVA1eCAs8WWbIKTdKwoFMB8GA1UdIwQY
MBaAFFO3x3Ce1r3DopXHNVpQPrjWH9IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdmSGNKN1d2Y09pbGNjMVdsQS11TllmMGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kN2FlZDgtNGE0MS00ZGYxLWFlODct
ZWUzNzBhYzYxOTBiLzEvdTRDQ0d6UkJVRFY0SUN6eFpac2dwTjByQ2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kN2FlZDgtNGE0MS00ZGYxLWFlODctZWUzNzBhYzYxOTBi
LzEvVTdmSGNKN1d2Y09pbGNjMVdsQS11TllmMGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVCJkD
BABVCJowDQYJKoZIhvcNAQELBQADggEBACXu7LI7HxXbo/578TwN4M3eiJDBH++F
hgkh0KCnaKZtg9VbhPK5lGDQYz7PH8bqmAqXUONMRet4Txqg+EMZ3hVErTeadoyP
X6FRNiKzs/Pdq15UPbImOkmuXxqyMXmztnsAY6fvry7FkqCoB/QeUFTj9ZCL6qPa
kCH/MIzVLii9e98XC5o+42oFsvyBPd5A/ahrJe48mj7K8j53FrfI1gYSvgfSF/1n
XcZFI+T+h39MleqazA6+WbvA81kRpGBHhNczXzX744XtjVeKDq51XWtVKn+EEuO8
Sa8UnOG3WOMDC8pe+xXIvuyDxZHvzc8Rp0WX8/wwrvbVs+4qhEuZKlU=
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:27 2025 by rpki-client