Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa
File: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (raw, json)
Hash identifier: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=
Subject key identifier: 45:2E:75:69:08:0E:83:62:06:EC:A7:77:81:89:92:D8:12:AD:FA:6A
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D337D39758C535F568F8B6C96EAB
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa
Signing time: Thu 02 Jan 2025 17:52:35 +0000
ROA not before: Thu 02 Jan 2025 17:52:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213035
IP address blocks: 85.202.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d3:37:d3:97:58:c5:35:f5:68:f8:b6:c9:6e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=452e7569080e836206eca777818992d812adfa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:9c:16:89:77:4f:ff:0c:1a:26:a2:e3:de:
cf:82:59:0d:cc:de:72:74:96:c8:71:e5:a2:16:d4:
77:c7:52:e2:bf:e9:58:b2:c0:10:ee:e3:85:da:e8:
2d:f9:54:46:71:7a:b1:88:00:0b:9f:2f:22:b6:84:
b2:2c:ef:be:d5:b2:81:d3:9e:ba:a6:2b:02:b8:52:
d4:be:0a:d2:25:7d:03:22:2c:36:7e:94:5b:4b:46:
96:a4:cf:5f:9b:10:fc:21:30:69:94:9f:07:18:73:
06:36:3d:bf:6a:4e:42:08:02:3f:84:fe:62:11:bb:
da:25:16:f3:87:bf:9c:4b:2d:da:3f:99:84:2e:23:
44:6f:d3:30:2e:97:6e:1e:23:a1:47:6b:28:c0:41:
1a:6a:99:bc:1c:c5:12:28:8e:3e:a7:a5:dd:9c:c5:
b2:d4:0e:06:b5:3b:3a:22:61:2b:d9:fb:16:35:03:
82:39:05:df:20:6f:c7:b1:02:a2:77:7a:f2:71:27:
40:48:c7:17:10:7e:6b:ba:3b:cd:41:ef:f5:bd:bf:
99:56:1a:5d:c5:0c:47:f2:4f:9b:54:a2:9c:97:e2:
47:8b:3a:1b:ac:6b:70:13:27:0f:07:f6:17:bd:10:
d2:d0:70:b2:f3:e0:33:e8:2b:52:5f:77:d5:5c:56:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:75:69:08:0E:83:62:06:EC:A7:77:81:89:92:D8:12:AD:FA:6A
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.170.0/23
Signature Algorithm: sha256WithRSAEncryption
13:a5:13:e8:b2:7f:e1:d8:81:4f:fb:79:b7:3e:6f:db:9b:39:
68:f4:97:78:e2:49:c6:22:9b:9d:01:ac:3d:74:c4:73:1f:4c:
6d:b2:7c:4a:ac:ef:cb:b7:63:59:2d:ef:96:fc:97:0c:f1:4b:
ec:65:f6:78:29:1e:a3:ce:c3:03:1a:70:97:c3:54:92:0a:b6:
85:bc:ae:e4:3b:c9:f7:32:b3:52:3d:ff:69:39:b1:ba:d5:f2:
8c:66:20:56:ce:98:10:59:79:4f:e3:ef:e7:2e:85:cc:7b:ed:
71:51:20:c8:a9:b6:9f:62:f4:5e:95:45:a7:18:33:58:66:ac:
01:6a:b2:08:42:61:f4:26:37:b9:0b:3c:90:69:aa:65:5d:3e:
8e:83:fe:9d:e4:8b:82:bf:e0:6e:d9:69:7f:c8:cb:21:a8:d5:
ce:6a:94:8a:88:36:2f:c2:0e:02:d5:b5:0f:dd:08:33:87:61:
c3:e4:d5:ad:84:c7:20:c4:fb:65:a7:ae:80:00:5f:79:2d:20:
7b:7e:8c:8b:55:44:57:09:9f:42:87:fb:cb:47:81:4b:9e:71:
44:31:4f:39:98:28:c3:c8:5e:62:7a:22:72:f4:52:64:ba:a2:
18:f7:42:0d:a0:50:15:18:74:b8:ff:93:7f:fb:25:85:43:6d:
92:21:06:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJdM305dYxTX1aPi2yW6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk
MTRjYzYwHhcNMjUwMTAyMTc1MjM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTJlNzU2OTA4MGU4MzYyMDZlY2E3Nzc4MTg5OTJkODEyYWRmYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlmcFol3T/8MGiai497PglkNzN5y
dJbIceWiFtR3x1Liv+lYssAQ7uOF2ugt+VRGcXqxiAALny8itoSyLO++1bKB0566
pisCuFLUvgrSJX0DIiw2fpRbS0aWpM9fmxD8ITBplJ8HGHMGNj2/ak5CCAI/hP5i
EbvaJRbzh7+cSy3aP5mELiNEb9MwLpduHiOhR2sowEEaapm8HMUSKI4+p6XdnMWy
1A4GtTs6ImEr2fsWNQOCOQXfIG/HsQKid3rycSdASMcXEH5rujvNQe/1vb+ZVhpd
xQxH8k+bVKKcl+JHizobrGtwEycPB/YXvRDS0HCy8+Az6CtSX3fVXFYjDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUudWkIDoNiBuynd4GJktgSrfpqMB8GA1UdIwQY
MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt
ZDFiYjZiNGRkNzAxLzEvUlM1MWFRZ09nMklHN0tkM2dZbVMyQkt0LW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx
LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVcqqMA0G
CSqGSIb3DQEBCwUAA4IBAQATpRPosn/h2IFP+3m3Pm/bmzlo9Jd44knGIpudAaw9
dMRzH0xtsnxKrO/Lt2NZLe+W/JcM8UvsZfZ4KR6jzsMDGnCXw1SSCraFvK7kO8n3
MrNSPf9pObG61fKMZiBWzpgQWXlP4+/nLoXMe+1xUSDIqbafYvRelUWnGDNYZqwB
arIIQmH0Jje5CzyQaaplXT6Og/6d5IuCv+Bu2Wl/yMshqNXOapSKiDYvwg4C1bUP
3Qgzh2HD5NWthMcgxPtlp66AAF95LSB7foyLVURXCZ9Ch/vLR4FLnnFEMU85mCjD
yF5ieiJy9FJkuqIY90INoFAVGHS4/5N/+yWFQ22SIQbX
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:46:13 2025 by rpki-client