Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/_EyJuRFs3n9J_leB4yPKVefMvBA.roa
File: _EyJuRFs3n9J_leB4yPKVefMvBA.roa (raw, json)
Hash identifier: CQuuRUeDVjRgwDvPdrOSKaKyveMXvUh1iquvO1uKXbc=
Subject key identifier: FC:4C:89:B9:11:6C:DE:7F:49:FE:57:81:E3:23:CA:55:E7:CC:BC:10
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A26CD3B734328310D40EFBDC28361
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/_EyJuRFs3n9J_leB4yPKVefMvBA.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24980
IP address blocks: 85.248.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:cd:3b:73:43:28:31:0d:40:ef:bd:c2:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc4c89b9116cde7f49fe5781e323ca55e7ccbc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:d3:4a:79:91:27:e3:a0:47:09:ce:3b:28:
53:7f:8a:ab:b2:9c:e8:47:f6:1b:99:93:04:59:0d:
2e:58:ea:7b:78:fc:72:fe:56:e3:66:bc:fd:53:85:
f8:85:88:13:5d:ec:85:4b:49:c0:e3:56:91:44:0c:
80:e8:e9:e1:e8:29:84:ee:1b:f6:4d:dc:e9:17:b8:
51:fa:b3:cf:21:e4:eb:c5:c8:d6:76:1f:d1:6f:f6:
4c:f8:9c:c3:9a:51:2b:b5:78:80:1e:4b:8c:ad:33:
8e:62:bc:9f:af:58:a9:d9:d4:e8:74:23:20:c2:ac:
7d:e2:79:56:2f:ee:10:10:5a:d3:7f:51:3d:b7:49:
48:e4:87:a3:ec:4e:d3:5a:68:c4:3d:03:e0:fb:f4:
db:fc:a7:28:33:77:56:38:88:c9:1c:fa:38:4c:41:
96:3a:4d:10:0d:a5:e3:29:ef:f3:e4:c8:e8:52:d4:
8c:1a:da:c9:aa:76:8a:ca:dd:e6:0a:fe:62:2e:9a:
bd:02:52:d9:d7:50:41:4e:79:f6:6f:62:96:90:48:
b1:32:85:23:d5:86:b8:a4:82:de:69:57:b7:08:5c:
f1:82:27:47:69:6a:4a:41:f7:b6:9e:dc:17:f8:86:
35:fe:ec:11:3b:45:92:30:d2:2b:a4:4c:63:a6:92:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4C:89:B9:11:6C:DE:7F:49:FE:57:81:E3:23:CA:55:E7:CC:BC:10
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/_EyJuRFs3n9J_leB4yPKVefMvBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.249.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a1:1f:2a:ed:2e:1b:d1:ce:21:5d:ce:aa:f5:c6:5a:5c:7d:
b9:3d:90:cb:ac:e1:41:dd:4c:8d:61:c8:77:c8:50:f7:4e:3f:
5f:90:68:33:8c:cf:45:b1:d2:8c:c3:6c:00:c6:4c:46:ea:e0:
94:53:1f:3d:f4:ad:85:e2:62:1e:c4:93:b9:e1:b2:b4:9b:05:
c0:c4:5c:b1:17:40:d4:e3:6b:3c:57:62:fb:7d:2c:aa:10:dd:
06:1a:61:1a:ec:50:20:3f:0d:d1:59:f6:a0:19:28:f4:f2:75:
8d:0d:f2:f8:04:b7:c5:c1:cc:d6:06:9c:0d:ca:20:b5:bf:25:
f9:80:60:84:87:24:2e:57:a6:aa:31:6b:e2:6a:22:35:17:12:
50:4e:fc:f9:59:9e:b4:97:c2:12:d6:07:a5:b8:2a:b3:23:4c:
13:64:0f:07:93:d5:2b:eb:31:9a:6a:16:bc:8f:f6:ef:3b:f1:
18:00:a7:de:ad:cc:85:5a:3e:c8:d4:d7:d7:8a:05:6e:f3:fb:
16:15:52:6d:81:a5:e2:5d:c6:ef:cc:79:ef:d8:21:86:f2:2b:
d3:70:c3:91:1f:ae:87:83:4b:ce:81:d3:86:6c:57:e9:92:9f:
b9:9d:1e:69:3e:e2:81:2c:b1:c5:c6:3c:d2:eb:d6:d6:a3:d5:
f3:b6:e5:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaibNO3NDKDENQO+9woNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjUwMTAxMTk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzRjODliOTExNmNkZTdmNDlmZTU3ODFlMzIzY2E1NWU3Y2NiYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g3TSnmRJ+OgRwnOOyhTf4qrspzo
R/YbmZMEWQ0uWOp7ePxy/lbjZrz9U4X4hYgTXeyFS0nA41aRRAyA6Onh6CmE7hv2
TdzpF7hR+rPPIeTrxcjWdh/Rb/ZM+JzDmlErtXiAHkuMrTOOYryfr1ip2dTodCMg
wqx94nlWL+4QEFrTf1E9t0lI5Iej7E7TWmjEPQPg+/Tb/KcoM3dWOIjJHPo4TEGW
Ok0QDaXjKe/z5MjoUtSMGtrJqnaKyt3mCv5iLpq9AlLZ11BBTnn2b2KWkEixMoUj
1Ya4pILeaVe3CFzxgidHaWpKQfe2ntwX+IY1/uwRO0WSMNIrpExjppKN8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxMibkRbN5/Sf5XgeMjylXnzLwQMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvX0V5SnVSRnMzbjlKX2xlQjR5UEtWZWZNdkJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVfj5MA0G
CSqGSIb3DQEBCwUAA4IBAQBFoR8q7S4b0c4hXc6q9cZaXH25PZDLrOFB3UyNYch3
yFD3Tj9fkGgzjM9FsdKMw2wAxkxG6uCUUx899K2F4mIexJO54bK0mwXAxFyxF0DU
42s8V2L7fSyqEN0GGmEa7FAgPw3RWfagGSj08nWNDfL4BLfFwczWBpwNyiC1vyX5
gGCEhyQuV6aqMWviaiI1FxJQTvz5WZ60l8IS1geluCqzI0wTZA8Hk9Ur6zGaaha8
j/bvO/EYAKfercyFWj7I1NfXigVu8/sWFVJtgaXiXcbvzHnv2CGG8ivTcMORH66H
g0vOgdOGbFfpkp+5nR5pPuKBLLHFxjzS69bWo9XztuXJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:28 2025 by rpki-client