Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/7g1UwiwWgWmfdzsfq2_nM6OnGY8.roa
File: 7g1UwiwWgWmfdzsfq2_nM6OnGY8.roa (raw, json)
Hash identifier: ZYwmQQtabWzHCr8QKyMRnDvZXsiCEimSnMIySNLvaCg=
Subject key identifier: EE:0D:54:C2:2C:16:81:69:9F:77:3B:1F:AB:6F:E7:33:A3:A7:19:8F
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 01953C2C7AC2B9429287A28F489D1A81CF94
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/7g1UwiwWgWmfdzsfq2_nM6OnGY8.roa
Signing time: Tue 25 Feb 2025 08:15:02 +0000
ROA not before: Tue 25 Feb 2025 08:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31365
IP address blocks: 85.115.206.0/24 maxlen: 24
85.153.1.0/24 maxlen: 24
85.153.2.0/24 maxlen: 24
85.153.3.0/24 maxlen: 24
85.153.5.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
85.153.10.0/24 maxlen: 24
85.153.33.0/24 maxlen: 24
85.153.43.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.56.0/24 maxlen: 24
85.153.58.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.75.0/24 maxlen: 24
85.153.80.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:2c:7a:c2:b9:42:92:87:a2:8f:48:9d:1a:81:cf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Feb 25 08:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee0d54c22c1681699f773b1fab6fe733a3a7198f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:c1:94:b2:ab:99:0b:61:ef:92:1a:cd:d4:
52:cd:ab:a9:71:58:f9:ec:4a:45:7b:68:58:2d:53:
e0:75:4e:51:97:6f:24:b7:6c:8c:56:0f:88:60:0b:
9d:b7:1c:b8:e8:5e:10:5a:a5:e8:bf:75:d1:c4:57:
8d:db:24:34:79:1f:89:1f:db:42:08:8c:a3:1a:de:
fe:61:ef:07:35:8b:2d:05:ed:21:a2:d6:c4:63:44:
ec:a9:af:6e:07:eb:e3:44:aa:23:5f:bf:ea:de:fe:
f9:96:c6:53:f3:a0:57:66:7c:4a:7c:40:f3:df:0e:
c2:e9:a7:88:4e:f3:eb:e3:8e:15:58:d7:2f:1d:b1:
88:3c:2c:44:95:d3:06:85:5c:d5:05:fa:54:be:c8:
69:28:56:2b:e5:89:6d:a1:df:c7:03:06:9c:16:32:
de:86:4e:ad:44:06:40:44:7b:49:5c:f8:d2:02:ad:
99:c8:e2:66:7b:44:2f:77:8a:bb:8f:d2:39:9e:fc:
a6:a5:f1:e3:71:b1:0c:09:b3:d1:12:62:bc:df:21:
07:70:5e:a8:b8:f8:31:35:fa:b6:78:29:9b:4d:3f:
31:e1:59:fa:14:01:23:2e:7f:5c:dd:57:b8:9f:23:
e4:ae:39:9c:45:03:55:21:33:c8:0a:4d:70:af:d8:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:54:C2:2C:16:81:69:9F:77:3B:1F:AB:6F:E7:33:A3:A7:19:8F
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/7g1UwiwWgWmfdzsfq2_nM6OnGY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.206.0/24
85.153.1.0-85.153.3.255
85.153.5.0-85.153.8.255
85.153.10.0/24
85.153.33.0/24
85.153.43.0/24
85.153.47.0/24
85.153.56.0/24
85.153.58.0/24
85.153.65.0/24
85.153.74.0/23
85.153.80.0/24
85.153.93.0/24
85.153.117.0/24
85.153.120.0/22
Signature Algorithm: sha256WithRSAEncryption
74:8b:a7:05:94:8c:fb:91:2e:eb:03:1a:8e:7b:e5:10:14:fd:
21:eb:0d:7f:5d:6e:1a:aa:2a:6d:26:00:f1:0e:0a:5f:bb:d6:
4d:b0:b4:10:91:93:2e:79:bd:75:48:16:d0:38:e0:c0:27:5d:
5c:57:ee:f6:10:83:99:6d:02:7c:57:fb:03:76:6f:ff:93:17:
06:ca:54:12:1b:d2:fd:bb:2b:8a:99:f0:35:18:ab:d9:19:00:
4e:b9:f0:5c:48:fd:b9:5e:96:0d:d5:7b:0e:99:62:96:9c:ce:
50:1e:64:b2:b6:22:b4:4c:e8:30:c6:13:0c:ab:f4:9c:5d:a1:
c9:88:57:7f:1c:82:38:3a:70:e5:53:c7:f4:8c:b0:cd:c3:f7:
b4:f7:87:f4:92:26:ee:9f:a2:a3:7e:a4:9b:df:01:c8:92:4a:
59:a2:2b:f4:6d:85:a9:96:0c:bc:40:6a:02:63:8a:f3:b0:e9:
35:6d:fe:7d:67:37:c9:df:05:cc:b9:21:78:78:ff:28:c6:d6:
02:59:fa:26:8a:63:a3:ba:6e:93:4a:5f:45:a5:62:cf:53:34:
e9:33:71:57:31:ba:e7:01:8b:dc:d8:bc:71:96:90:a8:cb:d4:
5f:22:34:1d:8c:04:7c:15:bd:42:c7:0b:38:cc:8a:10:8d:f4:
99:74:c0:49
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZU8LHrCuUKSh6KPSJ0agc+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm
ZWI2MWIwHhcNMjUwMjI1MDgxNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTBkNTRjMjJjMTY4MTY5OWY3NzNiMWZhYjZmZTczM2EzYTcxOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FrBlLKrmQth75IazdRSzaupcVj5
7EpFe2hYLVPgdU5Rl28kt2yMVg+IYAudtxy46F4QWqXov3XRxFeN2yQ0eR+JH9tC
CIyjGt7+Ye8HNYstBe0hotbEY0Tsqa9uB+vjRKojX7/q3v75lsZT86BXZnxKfEDz
3w7C6aeITvPr444VWNcvHbGIPCxEldMGhVzVBfpUvshpKFYr5Yltod/HAwacFjLe
hk6tRAZARHtJXPjSAq2ZyOJme0Qvd4q7j9I5nvympfHjcbEMCbPREmK83yEHcF6o
uPgxNfq2eCmbTT8x4Vn6FAEjLn9c3Ve4nyPkrjmcRQNVITPICk1wr9iZbwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFO4NVMIsFoFpn3c7H6tv5zOjpxmPMB8GA1UdIwQY
MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt
MWRjYzg2YzExZTc0LzEvN2cxVXdpd1dnV21mZHpzZnEyX25NNk9uR1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0
LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAFVzzjAM
AwQAVZkBAwQCVZkAMAwDBABVmQUDBABVmQgDBABVmQoDBABVmSEDBABVmSsDBABV
mS8DBABVmTgDBABVmToDBABVmUEDBAFVmUoDBABVmVADBABVmV0DBABVmXUDBAJV
mXgwDQYJKoZIhvcNAQELBQADggEBAHSLpwWUjPuRLusDGo575RAU/SHrDX9dbhqq
Km0mAPEOCl+71k2wtBCRky55vXVIFtA44MAnXVxX7vYQg5ltAnxX+wN2b/+TFwbK
VBIb0v27K4qZ8DUYq9kZAE658FxI/blelg3Vew6ZYpaczlAeZLK2IrRM6DDGEwyr
9JxdocmIV38cgjg6cOVTx/SMsM3D97T3h/SSJu6foqN+pJvfAciSSlmiK/RthamW
DLxAagJjivOw6TVt/n1nN8nfBcy5IXh4/yjG1gJZ+iaKY6O6bpNKX0WlYs9TNOkz
cVcxuucBi9zYvHGWkKjL1F8iNB2MBHwVvULHCzjMihCN9Jl0wEk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:43 2025 by rpki-client