Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/p3nft8ejbU0dh6YAPevNXxZCbVs.roa
File: p3nft8ejbU0dh6YAPevNXxZCbVs.roa (raw, json)
Hash identifier: AZePs0rDDteyQrKzQePGfPHbAeHkSPxPApZ8iNtgs0U=
Subject key identifier: A7:79:DF:B7:C7:A3:6D:4D:1D:87:A6:00:3D:EB:CD:5F:16:42:6D:5B
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5C751FCF8963F3CD685016DDC246C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/p3nft8ejbU0dh6YAPevNXxZCbVs.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39113
IP address blocks: 85.8.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c7:51:fc:f8:96:3f:3c:d6:85:01:6d:dc:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a779dfb7c7a36d4d1d87a6003debcd5f16426d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:4a:4e:4e:ea:37:31:d9:a5:a9:47:fa:8c:
98:35:01:cc:4e:29:54:c7:08:ed:f2:ce:26:7a:87:
0e:dd:ec:ee:c9:70:9f:e4:e3:f1:cf:df:bf:00:53:
a2:10:cc:3a:31:ce:e9:bf:b1:59:2c:8c:50:a6:c3:
dc:a0:8a:8b:c0:25:c3:6e:2c:6a:d2:a9:aa:23:75:
bb:49:e4:74:99:45:d8:6a:c0:0d:e6:d4:44:f1:91:
bb:df:3c:83:48:a2:de:c5:d2:bd:0d:65:19:86:58:
45:8a:f8:a3:fa:04:59:9b:21:94:1c:87:e8:0b:dc:
52:dd:f8:18:a8:a9:fd:5b:45:68:6c:96:8e:c6:58:
84:c0:e8:8b:83:9e:62:a2:65:04:0d:0c:be:2a:c0:
36:b9:78:fe:c0:5e:2a:9e:7f:eb:70:1d:58:ef:a0:
d7:ab:f7:d8:d5:7a:51:66:bf:db:c9:70:6e:67:c1:
eb:71:b9:71:f7:50:42:16:17:e9:01:08:36:06:db:
e5:0b:95:aa:5e:c7:fe:02:bb:a0:8c:62:c0:73:ae:
27:01:6c:c4:20:97:be:32:4d:cd:6c:28:4e:f7:ee:
01:90:ad:ac:9a:2a:0d:99:dd:f0:77:34:0e:ae:1a:
e2:e6:0f:85:75:93:07:16:15:11:b7:77:7e:ae:04:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:DF:B7:C7:A3:6D:4D:1D:87:A6:00:3D:EB:CD:5F:16:42:6D:5B
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/p3nft8ejbU0dh6YAPevNXxZCbVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.186.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a1:d9:17:c4:9c:6b:5b:1b:f4:47:b6:d3:21:8b:ea:b1:59:
1e:09:f7:2e:28:45:a4:ec:11:e1:3a:24:0f:08:bf:6a:f1:3e:
54:2d:39:9d:06:bf:63:07:d1:9d:4c:ae:d0:1d:49:21:e9:04:
a2:8f:44:71:63:79:5f:e2:10:78:30:58:d4:a7:6b:6e:03:d9:
14:84:f7:93:d4:4e:4a:71:29:70:eb:c2:d2:94:2e:8c:19:c3:
94:da:7c:bf:28:94:9d:ae:a4:9f:da:0e:64:46:58:d0:7a:d2:
12:d0:0a:ed:19:94:5c:50:b1:00:09:f7:88:60:8d:da:49:d1:
8d:63:65:8c:b5:26:fa:49:7f:5d:0b:1c:b9:65:21:e2:4e:f0:
08:ac:bd:1e:dd:a6:e5:ce:47:c8:35:d2:3b:37:ba:39:f4:e9:
2a:79:c3:eb:75:29:9b:7a:6f:93:7e:15:bf:29:9b:c5:91:41:
a3:fb:c8:a3:54:92:ee:ca:69:22:64:61:bc:e0:58:f8:b0:c9:
a4:63:45:f2:8b:65:13:3b:43:4e:37:53:05:86:31:be:c6:c1:
da:b8:89:80:5e:5d:c4:51:1d:03:f3:95:ad:b4:e7:c2:d8:23:
88:cd:9b:67:93:53:af:2b:43:f1:d8:ad:1f:4b:52:b8:3f:ef:
74:12:c0:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1cdR/PiWPzzWhQFt3CRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMTAxMDc0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzc5ZGZiN2M3YTM2ZDRkMWQ4N2E2MDAzZGViY2Q1ZjE2NDI2ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M1KTk7qNzHZpalH+oyYNQHMTilU
xwjt8s4meocO3ezuyXCf5OPxz9+/AFOiEMw6Mc7pv7FZLIxQpsPcoIqLwCXDbixq
0qmqI3W7SeR0mUXYasAN5tRE8ZG73zyDSKLexdK9DWUZhlhFivij+gRZmyGUHIfo
C9xS3fgYqKn9W0VobJaOxliEwOiLg55iomUEDQy+KsA2uXj+wF4qnn/rcB1Y76DX
q/fY1XpRZr/byXBuZ8Hrcblx91BCFhfpAQg2BtvlC5WqXsf+ArugjGLAc64nAWzE
IJe+Mk3NbChO9+4BkK2smioNmd3wdzQOrhri5g+FdZMHFhURt3d+rgRLTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKd537fHo21NHYemAD3rzV8WQm1bMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvcDNuZnQ4ZWpiVTBkaDZZQVBldk5YeFpDYlZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQi6MA0G
CSqGSIb3DQEBCwUAA4IBAQBlodkXxJxrWxv0R7bTIYvqsVkeCfcuKEWk7BHhOiQP
CL9q8T5ULTmdBr9jB9GdTK7QHUkh6QSij0RxY3lf4hB4MFjUp2tuA9kUhPeT1E5K
cSlw68LSlC6MGcOU2ny/KJSdrqSf2g5kRljQetIS0ArtGZRcULEACfeIYI3aSdGN
Y2WMtSb6SX9dCxy5ZSHiTvAIrL0e3ablzkfINdI7N7o59OkqecPrdSmbem+TfhW/
KZvFkUGj+8ijVJLuymkiZGG84Fj4sMmkY0Xyi2UTO0NON1MFhjG+xsHauImAXl3E
UR0D85WttOfC2COIzZtnk1OvK0Px2K0fS1K4P+90EsAX
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:29 2025 by rpki-client