Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/eXrSGYAfIXfHl2NI60qroS39lcM.roa
File: eXrSGYAfIXfHl2NI60qroS39lcM.roa (raw, json)
Hash identifier: AsK9cjSKUNK6tsJDCv3vsEbCal1jeMHXKciXe4FwlU0=
Subject key identifier: 79:7A:D2:19:80:1F:21:77:C7:97:63:48:EB:4A:AB:A1:2D:FD:95:C3
Certificate issuer: /CN=7f94b73b4172fb31b76bb9f1467b36e5ab9a2edd
Certificate serial: 01856D5D275F01018AFBEE2B2955B57669C1
Authority key identifier: 7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5S3O0Fy-zG3a7nxRns25auaLt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/eXrSGYAfIXfHl2NI60qroS39lcM.roa
Signing time: Sun 01 Jan 2023 12:44:59 +0000
ROA not before: Sun 01 Jan 2023 12:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 85.8.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:27:5f:01:01:8a:fb:ee:2b:29:55:b5:76:69:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f94b73b4172fb31b76bb9f1467b36e5ab9a2edd
Validity
Not Before: Jan 1 12:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=797ad219801f2177c7976348eb4aaba12dfd95c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:07:52:60:df:7e:52:2f:66:94:be:e6:0f:
66:f2:e3:e9:94:9d:53:b2:59:ae:71:24:5f:be:3d:
02:6f:9d:e5:94:df:a9:e2:25:f8:24:2e:98:56:96:
df:58:36:b3:58:ae:95:9f:2b:fb:2d:f6:0c:97:ea:
d4:91:28:16:3a:5d:02:4b:e0:74:35:ca:99:32:aa:
8b:d0:c2:27:f1:74:41:dc:51:75:71:91:05:bf:c7:
af:07:f7:43:83:b6:ba:70:aa:0b:6e:df:25:18:47:
3d:5b:20:3c:de:4b:06:b8:1e:3f:ff:86:45:78:c7:
74:81:5e:14:e2:c8:39:c9:51:12:02:25:5b:3f:da:
e7:24:68:a5:59:72:a8:5e:51:99:fc:e0:50:ed:b6:
45:73:1f:68:50:18:4e:51:f6:21:3f:0e:92:3d:b6:
33:24:eb:04:b4:5d:06:4d:95:c4:01:45:92:8a:6d:
ca:bf:18:7b:5b:2f:db:f1:7d:de:64:f4:1b:2f:b6:
e8:5a:7f:af:d1:5a:f7:27:de:a6:e9:4d:b4:a8:12:
94:8f:0e:b5:e8:8c:61:99:92:9c:d0:5c:5d:43:09:
6d:4e:32:1b:08:73:b7:ab:cf:25:d2:59:a4:88:fb:
61:60:05:6b:58:f2:da:ad:29:c1:9f:be:c1:18:af:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:D2:19:80:1F:21:77:C7:97:63:48:EB:4A:AB:A1:2D:FD:95:C3
X509v3 Authority Key Identifier:
keyid:7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5S3O0Fy-zG3a7nxRns25auaLt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/eXrSGYAfIXfHl2NI60qroS39lcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/f5S3O0Fy-zG3a7nxRns25auaLt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.130.0/24
Signature Algorithm: sha256WithRSAEncryption
43:57:19:b2:02:3b:5e:ff:1f:18:a3:ee:00:9a:d8:74:9b:92:
6a:a9:25:fb:51:a2:8e:70:ab:cc:ed:bc:9a:95:64:d6:4f:1d:
fd:d6:ac:0d:a5:81:9f:70:55:f3:0c:b9:63:e2:3a:17:c8:cf:
75:18:c1:c8:03:56:bc:56:be:54:3a:b1:5d:63:2f:23:63:8a:
27:93:3c:e3:fe:d5:ac:51:a9:94:45:21:cc:08:f6:19:e6:8e:
fb:30:7a:a2:89:35:f4:b3:60:64:2f:46:b3:b8:38:19:41:b3:
0f:2b:82:94:b9:58:de:39:26:f2:2b:6f:e1:07:cc:6e:8b:04:
95:41:67:0b:7b:09:20:ef:84:b8:61:4f:d6:aa:25:ec:f1:9e:
a0:6c:b4:a4:27:ec:fc:dc:92:cf:41:0b:19:12:8a:84:d1:cc:
cb:69:ca:20:5d:26:33:c0:4f:e7:3f:8c:e2:30:ec:01:16:43:
f6:14:0e:08:7d:44:51:96:91:2a:0e:76:ec:5a:8a:0e:c9:b4:
bb:3e:31:d2:ca:e8:b2:c1:45:7b:e6:a9:3d:17:46:ef:75:c1:
8f:8a:2f:07:cd:c8:4b:04:24:c1:57:7a:3f:b3:ca:04:c3:c5:
be:0f:2c:6a:59:8f:33:14:66:02:af:89:fe:56:1b:69:2a:0d:
1f:3a:5f:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXSdfAQGK++4rKVW1dmnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOTRiNzNiNDE3MmZiMzFiNzZiYjlmMTQ2N2IzNmU1YWI5
YTJlZGQwHhcNMjMwMTAxMTI0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTdhZDIxOTgwMWYyMTc3Yzc5NzYzNDhlYjRhYWJhMTJkZmQ5NWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGIHUmDfflIvZpS+5g9m8uPplJ1T
slmucSRfvj0Cb53llN+p4iX4JC6YVpbfWDazWK6Vnyv7LfYMl+rUkSgWOl0CS+B0
NcqZMqqL0MIn8XRB3FF1cZEFv8evB/dDg7a6cKoLbt8lGEc9WyA83ksGuB4//4ZF
eMd0gV4U4sg5yVESAiVbP9rnJGilWXKoXlGZ/OBQ7bZFcx9oUBhOUfYhPw6SPbYz
JOsEtF0GTZXEAUWSim3Kvxh7Wy/b8X3eZPQbL7boWn+v0Vr3J96m6U20qBKUjw61
6IxhmZKc0FxdQwltTjIbCHO3q88l0lmkiPthYAVrWPLarSnBn77BGK+YbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHl60hmAHyF3x5djSOtKq6Et/ZXDMB8GA1UdIwQY
MBaAFH+UtztBcvsxt2u58UZ7NuWrmi7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjVTM08wRnktekczYTdueFJuczI1YXVhTHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWUxZmMtM2ZlMi00Nzk5LThlZWYt
ZTAyMmRkMGZhM2UxLzEvZVhyU0dZQWZJWGZIbDJOSTYwcXJvUzM5bGNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMWUxZmMtM2ZlMi00Nzk5LThlZWYtZTAyMmRkMGZhM2Ux
LzEvZjVTM08wRnktekczYTdueFJuczI1YXVhTHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQiCMA0G
CSqGSIb3DQEBCwUAA4IBAQBDVxmyAjte/x8Yo+4Amth0m5JqqSX7UaKOcKvM7bya
lWTWTx391qwNpYGfcFXzDLlj4joXyM91GMHIA1a8Vr5UOrFdYy8jY4onkzzj/tWs
UamURSHMCPYZ5o77MHqiiTX0s2BkL0azuDgZQbMPK4KUuVjeOSbyK2/hB8xuiwSV
QWcLewkg74S4YU/WqiXs8Z6gbLSkJ+z83JLPQQsZEoqE0czLacogXSYzwE/nP4zi
MOwBFkP2FA4IfURRlpEqDnbsWooOybS7PjHSyuiywUV75qk9F0bvdcGPii8HzchL
BCTBV3o/s8oEw8W+DyxqWY8zFGYCr4n+VhtpKg0fOl/o
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:23 2025 by rpki-client