Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/T-vR11legnwcc75KfF5tIE8HEoM.roa
File: T-vR11legnwcc75KfF5tIE8HEoM.roa (raw, json)
Hash identifier: hkxJ29fIpPIujUncsDhxSjK88kKnemMI5V1idgFtUWk=
Subject key identifier: 4F:EB:D1:D7:59:5E:82:7C:1C:73:BE:4A:7C:5E:6D:20:4F:07:12:83
Certificate issuer: /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial: 01856F42DFB6E4E4AB82474106390574C7E6
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/T-vR11legnwcc75KfF5tIE8HEoM.roa
Signing time: Sun 01 Jan 2023 21:35:31 +0000
ROA not before: Sun 01 Jan 2023 21:35:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210104
IP address blocks: 85.115.212.0/22 maxlen: 22
93.177.88.0/22 maxlen: 22
185.215.75.0/24 maxlen: 24
185.215.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:df:b6:e4:e4:ab:82:47:41:06:39:05:74:c7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Validity
Not Before: Jan 1 21:35:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4febd1d7595e827c1c73be4a7c5e6d204f071283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:00:b6:c3:00:d6:69:da:c0:91:79:be:ae:
0c:1e:d7:fd:ab:53:a4:7b:ee:86:88:0d:92:46:3e:
d8:21:2e:0f:ce:df:6c:58:7d:28:ca:37:fe:f0:fa:
29:b4:7b:63:1c:bd:2b:14:17:74:1f:71:7e:a7:3f:
d7:59:d6:87:25:90:b9:c8:d5:96:2b:a4:3b:75:0b:
ff:5d:2d:41:d9:49:4c:a9:87:92:c6:da:24:3e:56:
0c:9d:7f:21:65:5b:cd:25:12:62:3f:8e:2f:e4:ee:
d5:d2:af:a4:cb:e2:46:1f:33:a2:25:9d:a3:af:7f:
c4:cd:65:64:44:40:5d:fa:07:ee:4c:90:50:a1:ba:
e2:92:2f:85:48:87:5a:f2:69:61:92:77:bf:eb:b5:
6d:95:4f:5b:ec:ac:73:35:7c:ee:62:9a:04:6f:92:
1e:f5:04:82:2a:e6:67:59:0e:d2:81:19:08:e0:28:
20:4c:0f:3b:7d:42:30:74:45:51:03:cf:f4:a7:87:
6c:82:93:73:7b:1c:eb:1f:3d:cf:c9:f7:e9:34:73:
4b:3a:02:5d:30:9f:81:4b:21:93:02:01:3d:4c:f1:
40:60:72:21:1a:aa:a8:1d:bd:0a:64:a0:94:92:20:
70:cc:db:9b:f2:4a:1b:0e:5e:03:f9:93:3d:5b:a8:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EB:D1:D7:59:5E:82:7C:1C:73:BE:4A:7C:5E:6D:20:4F:07:12:83
X509v3 Authority Key Identifier:
keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/T-vR11legnwcc75KfF5tIE8HEoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.212.0/22
93.177.88.0/22
185.215.74.0/23
Signature Algorithm: sha256WithRSAEncryption
40:3b:97:ab:8f:09:31:37:ad:0a:fe:65:46:32:25:7b:f3:05:
ef:81:2b:a3:b0:57:52:18:6d:21:27:11:2a:41:3a:6f:49:48:
33:e9:c5:55:d0:43:96:35:c3:66:d9:0b:a5:94:0f:64:9e:6f:
42:28:ca:b5:80:b6:4c:29:55:be:0c:9f:70:bc:02:15:9f:1d:
ed:9b:a2:6f:2d:c3:cb:82:72:dd:f5:62:9b:eb:d6:f7:81:14:
47:0c:f1:64:5a:0a:73:d0:2a:fb:ba:a2:41:b0:e2:57:ba:43:
3b:e0:d3:11:87:8a:17:12:34:78:f9:db:84:7c:2f:c7:3e:ad:
c9:60:47:b0:49:4a:80:db:7d:5c:53:a0:2e:d7:68:68:37:6b:
24:2c:58:77:23:e5:2b:bf:c4:7d:3f:02:b1:07:8e:51:ef:5a:
1a:b7:4d:52:22:dd:32:7c:06:1a:39:da:b0:b7:8c:67:d9:99:
ec:62:7f:9a:a7:6c:04:23:c6:2c:38:7b:9b:ff:da:f0:00:bc:
4a:79:3b:65:d5:59:fe:29:86:91:af:0a:0a:b1:f0:34:45:9b:
37:26:f2:5c:e3:ba:b8:df:51:94:4b:a7:d8:8b:0d:c3:bd:8c:
b6:47:4c:99:d6:3b:4b:e3:03:97:5c:58:d5:12:b0:38:25:aa:
0d:2b:2d:1d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvQt+25OSrgkdBBjkFdMfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTQ4NzVkYmUzMGJlNGY3ZmM0NGEwNDY4YjUxYjE3OGVk
ZjY0ZTYwHhcNMjMwMTAxMjEzNTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmViZDFkNzU5NWU4MjdjMWM3M2JlNGE3YzVlNmQyMDRmMDcxMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP8AtsMA1mnawJF5vq4MHtf9q1Ok
e+6GiA2SRj7YIS4Pzt9sWH0oyjf+8PoptHtjHL0rFBd0H3F+pz/XWdaHJZC5yNWW
K6Q7dQv/XS1B2UlMqYeSxtokPlYMnX8hZVvNJRJiP44v5O7V0q+ky+JGHzOiJZ2j
r3/EzWVkREBd+gfuTJBQobriki+FSIda8mlhkne/67VtlU9b7KxzNXzuYpoEb5Ie
9QSCKuZnWQ7SgRkI4CggTA87fUIwdEVRA8/0p4dsgpNzexzrHz3PyffpNHNLOgJd
MJ+BSyGTAgE9TPFAYHIhGqqoHb0KZKCUkiBwzNub8kobDl4D+ZM9W6j2cQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE/r0ddZXoJ8HHO+SnxebSBPBxKDMB8GA1UdIwQY
MBaAFC9Uh12+ML5Pf8RKBGi1GxeO32TmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFTSFhiNHd2azlfeEVvRWFMVWJGNDdmWk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kYTUzYjktZGNhNS00OTVkLTg3NjMt
YmZlYTYxYjc3MGI2LzEvVC12UjExbGVnbndjYzc1S2ZGNXRJRThIRW9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kYTUzYjktZGNhNS00OTVkLTg3NjMtYmZlYTYxYjc3MGI2
LzEvTDFTSFhiNHd2azlfeEVvRWFMVWJGNDdmWk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVXPUAwQC
XbFYAwQBuddKMA0GCSqGSIb3DQEBCwUAA4IBAQBAO5erjwkxN60K/mVGMiV78wXv
gSujsFdSGG0hJxEqQTpvSUgz6cVV0EOWNcNm2QullA9knm9CKMq1gLZMKVW+DJ9w
vAIVnx3tm6JvLcPLgnLd9WKb69b3gRRHDPFkWgpz0Cr7uqJBsOJXukM74NMRh4oX
EjR4+duEfC/HPq3JYEewSUqA231cU6Au12hoN2skLFh3I+Urv8R9PwKxB45R71oa
t01SIt0yfAYaOdqwt4xn2ZnsYn+ap2wEI8YsOHub/9rwALxKeTtl1Vn+KYaRrwoK
sfA0RZs3JvJc47q431GUS6fYiw3DvYy2R0yZ1jtL4wOXXFjVErA4JaoNKy0d
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:00 2025 by rpki-client