Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa
File: K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa (raw, json)
Hash identifier: Yhb6Fai21E+jsd4/blJv2P5GA32ORQPomY/nTv3MFQg=
Subject key identifier: 2B:BF:FE:3E:C6:55:E9:42:F7:43:3F:92:67:2C:D6:C4:BD:33:B6:B1
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0194F4E345E3F6FCA3CE8BD95B6E4C00E231
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa
Signing time: Tue 11 Feb 2025 12:02:02 +0000
ROA not before: Tue 11 Feb 2025 12:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 85.11.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:e3:45:e3:f6:fc:a3:ce:8b:d9:5b:6e:4c:00:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Feb 11 12:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbffe3ec655e942f7433f92672cd6c4bd33b6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:d6:5f:f5:10:6e:37:fb:dd:ad:41:42:e2:
40:97:6f:95:04:1a:cf:af:03:c9:2e:35:8a:ad:2e:
22:83:40:c1:5a:f8:bf:3e:32:eb:39:ec:97:1b:3e:
cf:83:61:ea:a3:86:39:cd:86:91:d3:80:bd:ce:01:
a1:88:3b:35:a0:e6:69:17:14:8a:40:c6:b0:f4:12:
25:e5:b6:a6:80:2b:5e:0b:59:ee:b4:73:31:fe:3a:
77:ca:36:e4:d3:f2:1b:2d:c8:c0:f3:a2:7d:80:8c:
6e:a0:b4:ec:b6:2b:d0:0d:70:28:2a:71:bc:29:1d:
68:21:82:61:55:e1:c1:b1:7f:d2:64:53:71:08:cd:
95:02:6a:88:ed:7c:e1:7f:1f:ad:4a:1f:aa:72:17:
a2:03:76:0f:03:6b:fe:52:05:11:da:9e:5e:57:9c:
b8:67:2d:57:be:49:0f:f9:8e:c8:ac:f3:a1:d5:a6:
94:e2:0e:cc:7c:9b:64:4c:1e:30:96:28:bc:64:5e:
84:c0:15:89:09:73:60:4e:4e:4c:93:c1:ae:32:a7:
00:d5:e6:24:29:2b:64:54:4c:75:e1:65:bd:89:68:
17:43:22:c2:77:01:90:c3:d9:00:17:19:df:df:60:
0c:97:11:ea:76:f9:17:bd:0d:b2:28:a8:63:8f:3e:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:FE:3E:C6:55:E9:42:F7:43:3F:92:67:2C:D6:C4:BD:33:B6:B1
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1a:00:39:d5:c2:a3:41:f2:d2:68:f7:9a:fe:1d:32:c2:40:
a2:92:40:ab:42:42:0c:45:91:7b:b5:e2:fc:0d:44:29:e6:85:
cc:76:49:b7:9a:82:e4:48:28:d0:ff:f6:b7:90:04:e7:49:f7:
13:26:5c:9f:9b:96:9f:9f:2f:9b:25:ac:32:7f:e6:aa:72:ab:
67:a6:88:57:ab:06:a4:2d:56:c9:a1:a2:e3:f2:aa:8c:37:86:
05:16:2c:0e:a8:c5:18:72:dd:31:22:36:4a:64:39:45:3d:68:
b5:aa:01:2b:7c:ac:91:4e:5a:22:37:fd:ac:55:b5:ac:28:ec:
78:80:24:c6:9e:ce:f4:93:b6:f0:74:43:26:d4:a6:f5:bb:80:
d5:c9:09:70:1e:a2:21:26:de:5d:6f:ce:59:ba:30:ac:16:5a:
a6:43:59:63:0e:d2:80:bd:4b:8e:f2:15:c8:43:a0:1a:0d:c4:
41:f5:aa:57:b9:d5:71:34:93:57:b6:3b:be:1a:78:0d:1b:4f:
7b:0a:e9:ea:96:f7:d4:39:c4:f5:8b:f9:b8:57:86:51:4b:15:
e3:de:66:95:fa:5f:b9:17:ec:e6:22:20:8e:a2:cd:5b:cd:ee:
3b:c2:a1:d7:eb:64:24:34:82:14:da:59:d5:07:df:04:4e:32:
c8:b0:32:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT040Xj9vyjzovZW25MAOIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh
ZWYyNTQwHhcNMjUwMjExMTIwMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmJmZmUzZWM2NTVlOTQyZjc0MzNmOTI2NzJjZDZjNGJkMzNiNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutXWX/UQbjf73a1BQuJAl2+VBBrP
rwPJLjWKrS4ig0DBWvi/PjLrOeyXGz7Pg2Hqo4Y5zYaR04C9zgGhiDs1oOZpFxSK
QMaw9BIl5bamgCteC1nutHMx/jp3yjbk0/IbLcjA86J9gIxuoLTstivQDXAoKnG8
KR1oIYJhVeHBsX/SZFNxCM2VAmqI7Xzhfx+tSh+qcheiA3YPA2v+UgUR2p5eV5y4
Zy1XvkkP+Y7IrPOh1aaU4g7MfJtkTB4wlii8ZF6EwBWJCXNgTk5Mk8GuMqcA1eYk
KStkVEx14WW9iWgXQyLCdwGQw9kAFxnf32AMlxHqdvkXvQ2yKKhjjz6Z2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCu//j7GVelC90M/kmcs1sS9M7axMB8GA1UdIwQY
MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt
MmNjNjc1NzI2OTc1LzEvSzdfLVBzWlY2VUwzUXotU1p5eld4TDB6dHJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1
LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQu7MA0G
CSqGSIb3DQEBCwUAA4IBAQAuGgA51cKjQfLSaPea/h0ywkCikkCrQkIMRZF7teL8
DUQp5oXMdkm3moLkSCjQ//a3kATnSfcTJlyfm5afny+bJawyf+aqcqtnpohXqwak
LVbJoaLj8qqMN4YFFiwOqMUYct0xIjZKZDlFPWi1qgErfKyRTloiN/2sVbWsKOx4
gCTGns70k7bwdEMm1Kb1u4DVyQlwHqIhJt5db85ZujCsFlqmQ1ljDtKAvUuO8hXI
Q6AaDcRB9apXudVxNJNXtju+GngNG097CunqlvfUOcT1i/m4V4ZRSxXj3maV+l+5
F+zmIiCOos1bze47wqHX62QkNIIU2lnVB98ETjLIsDIu
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:44 2025 by rpki-client