Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ROq0Za9aeWF9_Kgah4pqXgyHQ5I.roa
File: ROq0Za9aeWF9_Kgah4pqXgyHQ5I.roa (raw, json)
Hash identifier: 457dtzUaDI+fc7DId5KEl8p0XEFkD/6ftiOWqujTZpo=
Subject key identifier: 44:EA:B4:65:AF:5A:79:61:7D:FC:A8:1A:87:8A:6A:5E:0C:87:43:92
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01877002901F181F81BAB93897484930DAF5
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ROq0Za9aeWF9_Kgah4pqXgyHQ5I.roa
Signing time: Tue 11 Apr 2023 11:10:28 +0000
ROA not before: Tue 11 Apr 2023 11:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:02:90:1f:18:1f:81:ba:b9:38:97:48:49:30:da:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 11 11:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44eab465af5a79617dfca81a878a6a5e0c874392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:21:96:ff:f0:59:b4:90:c2:cb:6c:5b:2b:
31:02:fc:40:73:17:77:46:1b:3b:8c:8f:c6:66:9b:
1a:7a:c6:d1:10:d8:33:56:d2:81:d7:80:9a:67:ab:
6a:6e:45:0c:4f:10:29:4d:d0:2e:1d:4f:36:07:9e:
8f:cb:b8:84:4f:de:67:e1:ce:b2:48:50:9c:bc:d4:
ab:59:e0:de:6c:60:75:9b:3d:49:c9:9f:19:3e:77:
26:be:77:bb:41:e6:a7:69:3c:78:74:6f:63:91:09:
54:0c:29:30:bf:96:88:0a:d9:0a:6c:ad:24:14:af:
20:d1:3f:1a:ac:f5:9d:bf:10:d1:05:3e:bf:2f:be:
ef:b7:af:64:cf:5d:9d:2e:2e:8e:4d:ed:99:84:39:
d7:ca:91:f1:f1:99:50:15:d2:2c:b6:59:11:ae:8a:
7f:23:0d:f5:12:cc:d1:a0:bd:af:2d:3a:4a:2f:70:
65:a2:ac:d8:2b:8f:9a:14:61:09:e8:66:74:d5:53:
aa:d0:3f:0b:e2:ef:56:e6:73:70:74:ad:51:c3:aa:
d7:7f:12:e6:49:1f:8e:a8:b1:5e:a8:6e:aa:1f:5e:
ce:41:98:10:d3:a1:7b:e4:a8:a1:b9:61:87:13:b3:
f0:bf:10:2f:5c:b3:2d:ff:80:11:c9:27:04:32:39:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:B4:65:AF:5A:79:61:7D:FC:A8:1A:87:8A:6A:5E:0C:87:43:92
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ROq0Za9aeWF9_Kgah4pqXgyHQ5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.61.0/24
85.158.63.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d2:b2:2e:ba:cb:c5:ce:dd:4f:08:35:38:8c:6f:a9:f4:dc:
91:44:cb:32:df:24:e4:4c:3a:ac:38:9f:83:20:3f:a8:dc:d0:
bb:9c:87:b8:7c:fc:8f:be:69:ab:43:fc:9f:be:c9:e1:2d:dd:
c5:03:15:d8:8e:ce:3e:38:f2:83:b5:5e:1e:2e:af:d5:91:71:
b3:74:90:b2:05:73:64:48:27:be:64:40:66:1e:1c:09:5a:b8:
27:f7:fe:1a:0e:e7:72:05:6b:02:7e:5c:72:7f:e3:9d:1c:71:
30:fd:d1:d0:30:a7:95:d4:c0:5e:79:80:78:20:a6:fd:20:04:
73:2b:09:c6:55:a5:9b:dc:92:63:bb:a7:4f:77:83:d9:63:c1:
67:00:2d:8c:7d:a7:e1:e1:e9:dd:8d:06:5e:5e:6e:22:cd:ba:
9e:92:5b:83:04:1b:e0:66:ec:d4:c1:d7:7e:3b:9b:48:8f:64:
8c:39:2d:d0:1b:20:4f:5e:55:01:d2:39:f4:30:20:65:3e:49:
4a:55:39:19:cf:19:9c:26:3a:50:0a:bb:bc:d0:e8:90:d8:29:
c4:51:62:f1:a0:17:02:2d:24:80:b8:59:dc:43:30:21:72:b0:
72:c6:3c:cb:ae:1f:91:22:02:65:7f:a0:84:7a:35:a9:1e:d7:
e3:f0:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:47:29 2025 by rpki-client