Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/4B652zJ695kiYiEv2mLMsyzbu64.roa
File: 4B652zJ695kiYiEv2mLMsyzbu64.roa (raw, json)
Hash identifier: rmCAPnt0RXbcvMRo4GzQBvdOSbVAcPp3g8AsCbY/N4E=
Subject key identifier: E0:1E:B9:DB:32:7A:F7:99:22:62:21:2F:DA:62:CC:B3:2C:DB:BB:AE
Certificate issuer: /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial: 018CC348DCDA0914955BCE18FC1CE95275CD
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/4B652zJ695kiYiEv2mLMsyzbu64.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216398
IP address blocks: 85.114.96.0/24 maxlen: 24
85.114.105.0/24 maxlen: 24
85.114.106.0/24 maxlen: 24
185.97.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:dc:da:09:14:95:5b:ce:18:fc:1c:e9:52:75:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e01eb9db327af7992262212fda62ccb32cdbbbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:5e:36:8e:75:5f:f0:be:99:17:69:9e:c8:
8d:d4:37:95:97:26:26:85:e7:4a:7e:53:a4:55:76:
6b:86:c1:a4:2f:ee:67:e0:7c:27:b4:7d:b6:95:1a:
1d:d2:05:31:01:09:16:22:7c:be:e7:61:e3:50:e9:
2f:f2:cc:78:13:a6:f7:47:9a:f5:fc:2b:6b:90:86:
22:7d:4a:42:ab:d6:fb:8f:c6:61:7b:f6:b5:4f:a3:
28:77:4e:b7:4e:71:a8:17:c1:79:88:94:71:ae:57:
52:9a:0e:1e:be:a6:72:99:b0:7a:bf:0a:d9:5d:ec:
94:ed:8c:54:4f:8f:9f:92:66:3c:06:bb:39:4e:05:
d2:5a:1d:f2:0a:80:3d:14:63:66:81:85:93:e2:4a:
37:18:45:6b:41:90:86:7b:27:0d:00:86:38:30:75:
e9:65:aa:30:b6:a5:d3:cc:9f:42:a9:34:44:2c:fa:
3e:d8:09:bc:7f:0e:83:88:16:f2:81:ea:d1:c7:8e:
7b:bd:9b:a8:b9:53:31:0f:e5:ca:42:3e:72:9e:5b:
6d:a6:1f:f9:ec:f7:9a:f5:c6:c3:d6:15:76:cd:3b:
08:63:da:aa:85:1d:3b:eb:ef:6b:d8:ea:8e:fb:fd:
d3:15:86:19:17:f8:f2:a0:a3:55:bf:2c:2a:f6:58:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1E:B9:DB:32:7A:F7:99:22:62:21:2F:DA:62:CC:B3:2C:DB:BB:AE
X509v3 Authority Key Identifier:
keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/4B652zJ695kiYiEv2mLMsyzbu64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.114.96.0/24
85.114.105.0-85.114.106.255
185.97.66.0/23
Signature Algorithm: sha256WithRSAEncryption
44:99:0a:c3:c7:2d:db:3a:ad:9c:a8:bc:b8:e3:da:87:11:9c:
cd:6e:8a:67:47:7c:13:72:33:52:a1:fe:0c:68:7a:28:23:6e:
98:ce:8e:9f:92:01:c2:21:3c:2e:ae:f0:f5:d2:01:b3:4a:1c:
87:c4:0a:ae:f9:a5:2f:2a:42:23:98:22:b8:85:d5:d0:27:0f:
72:bf:6d:db:d6:6f:bc:4a:24:34:44:7c:c9:85:7e:8e:83:a2:
5d:db:f3:2a:7e:a5:29:2b:da:ae:f9:58:90:c1:91:45:02:41:
9f:af:50:97:3b:d4:2d:4d:b8:70:4f:7c:fe:20:e5:67:b0:31:
66:05:9c:bc:dc:1a:7c:a2:53:56:34:f4:d7:00:d0:74:de:0c:
6b:62:d5:87:e9:2f:84:b4:16:9d:28:e0:6a:44:0b:b4:55:91:
03:ec:da:cf:f9:00:51:05:5f:98:6e:72:68:c5:2c:99:c8:43:
43:71:1a:55:b2:e4:ee:5f:6a:d6:c9:31:3e:19:49:a7:7b:a0:
d0:8a:60:53:43:e0:f2:58:54:1a:e3:19:b9:cc:f2:39:7e:f2:
0d:50:b9:e2:d9:0d:fd:ec:8b:c6:41:fa:d3:f7:57:30:55:71:
56:ac:fb:ed:8c:a9:09:7e:16:b2:d4:15:a2:83:95:e7:67:d8:
ce:ac:6a:db
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzDSNzaCRSVW84Y/BzpUnXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzQ3NDY1YmM5MjVjOGU3NTZkZGZhYTYwOWVkYTAyY2M1
MmQwMzEwHhcNMjQwMTAxMDQyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDFlYjlkYjMyN2FmNzk5MjI2MjIxMmZkYTYyY2NiMzJjZGJiYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr5eNo51X/C+mRdpnsiN1DeVlyYm
hedKflOkVXZrhsGkL+5n4HwntH22lRod0gUxAQkWIny+52HjUOkv8sx4E6b3R5r1
/CtrkIYifUpCq9b7j8Zhe/a1T6Mod063TnGoF8F5iJRxrldSmg4evqZymbB6vwrZ
XeyU7YxUT4+fkmY8Brs5TgXSWh3yCoA9FGNmgYWT4ko3GEVrQZCGeycNAIY4MHXp
ZaowtqXTzJ9CqTRELPo+2Am8fw6DiBbygerRx457vZuouVMxD+XKQj5ynlttph/5
7Pea9cbD1hV2zTsIY9qqhR076+9r2OqO+/3TFYYZF/jyoKNVvywq9liZlwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOAeudsyeveZImIhL9pizLMs27uuMB8GA1UdIwQY
MBaAFGQ0dGW8klyOdW3fqmCe2gLMUtAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRSMFpieVNYSTUxYmQtcVlKN2FBc3hTMERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMWZmN2ItYjc2Ni00N2M3LWJlMGQt
YzBhN2I3Mzc3ZWFiLzEvNEI2NTJ6SjY5NWtpWWlFdjJtTE1zeXpidTY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMWZmN2ItYjc2Ni00N2M3LWJlMGQtYzBhN2I3Mzc3ZWFi
LzEvWkRSMFpieVNYSTUxYmQtcVlKN2FBc3hTMERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVXJgMAwD
BABVcmkDBABVcmoDBAG5YUIwDQYJKoZIhvcNAQELBQADggEBAESZCsPHLds6rZyo
vLjj2ocRnM1uimdHfBNyM1Kh/gxoeigjbpjOjp+SAcIhPC6u8PXSAbNKHIfECq75
pS8qQiOYIriF1dAnD3K/bdvWb7xKJDREfMmFfo6Dol3b8yp+pSkr2q75WJDBkUUC
QZ+vUJc71C1NuHBPfP4g5WewMWYFnLzcGnyiU1Y09NcA0HTeDGti1YfpL4S0Fp0o
4GpEC7RVkQPs2s/5AFEFX5hucmjFLJnIQ0NxGlWy5O5fatbJMT4ZSad7oNCKYFND
4PJYVBrjGbnM8jl+8g1QueLZDf3si8ZB+tP3VzBVcVas++2MqQl+FrLUFaKDledn
2M6sats=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:22 2024 by rpki-client on console-fra.rpki-client.org