Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8eep6dVAmsZIpyTErh0SkPM8qXc.roa
File: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (raw, json)
Hash identifier: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=
Subject key identifier: F1:E7:A9:E9:D5:40:9A:C6:48:A7:24:C4:AE:1D:12:90:F3:3C:A9:77
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC97A0A4D577A98DFB58C1FC033C5
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8eep6dVAmsZIpyTErh0SkPM8qXc.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210948
IP address blocks: 185.65.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c9:7a:0a:4d:57:7a:98:df:b5:8c:1f:c0:33:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e7a9e9d5409ac648a724c4ae1d1290f33ca977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:d6:be:83:64:17:08:41:96:a1:bb:6f:9a:
30:ae:e2:97:72:1a:8b:8a:b8:8c:f3:9a:fc:ac:e7:
12:e0:68:b2:bf:c7:20:7a:6e:d7:f0:2d:7f:9a:69:
db:44:e7:36:02:d4:8d:d3:5a:41:4a:e4:15:aa:63:
80:0d:fa:61:77:e4:b8:70:5c:90:c2:a6:87:8b:20:
d9:d9:58:4b:56:38:ff:44:99:b7:1f:0b:20:1e:0e:
7c:38:93:3e:5a:58:b1:c6:d5:6a:ed:7d:e5:99:7c:
83:6e:88:ed:09:a7:99:12:a4:9f:c7:9f:38:79:16:
8e:c2:0e:4e:79:56:0f:c9:50:95:b1:37:77:f5:83:
11:78:bc:b3:0c:f9:94:6a:33:8b:7c:23:ad:c0:a2:
1c:8a:6d:6c:fc:74:6e:b2:bd:cf:35:ce:bd:90:27:
d7:55:4f:fe:c8:5a:2c:d6:73:d5:ae:99:a6:9b:e7:
00:36:fe:4e:8d:31:82:58:aa:89:d7:25:c0:d7:0e:
b1:62:1b:ce:ed:d9:a7:99:37:48:73:0c:3d:5b:87:
33:ea:d2:46:31:38:8a:d4:22:e4:44:0b:21:0e:d3:
71:b8:0e:d2:bf:9b:1f:d7:1f:3f:f5:67:cf:a2:de:
af:59:f2:3c:b9:b4:16:68:9b:eb:d8:f7:98:e6:81:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E7:A9:E9:D5:40:9A:C6:48:A7:24:C4:AE:1D:12:90:F3:3C:A9:77
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8eep6dVAmsZIpyTErh0SkPM8qXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.51.0/24
Signature Algorithm: sha256WithRSAEncryption
85:db:28:70:1f:4a:e6:a8:06:63:d7:6a:7f:8a:21:70:b4:cb:
01:48:80:a0:96:72:d5:7e:26:9e:dc:f9:06:87:15:c6:48:52:
07:9e:e5:fb:aa:1c:b1:a6:76:23:55:89:e7:ea:7f:d7:a2:c2:
d5:18:57:da:e8:aa:38:78:34:f5:58:af:ac:df:e0:2a:11:94:
d5:53:18:d9:54:21:87:43:00:67:3c:77:69:54:5c:ca:fd:26:
1e:a9:98:61:90:e1:56:03:78:f4:a4:6f:cc:e6:fa:10:33:6d:
41:85:27:b3:bf:c4:1a:7e:94:fa:08:d3:83:e4:79:44:80:35:
9a:e4:31:e4:fc:20:48:74:b9:54:60:c4:3e:63:bb:53:92:ae:
2f:87:78:42:a2:8d:77:d2:28:a4:f3:b7:82:6d:a3:5b:2c:cc:
fc:52:c1:af:32:7f:24:e8:16:32:43:fa:cd:4c:8b:e5:80:ce:
63:97:22:25:30:f5:29:af:dc:b9:2f:98:87:5c:d3:fe:92:cf:
ac:e6:cf:ef:63:ce:b6:ba:6a:5d:c3:9c:ff:e7:06:55:de:5d:
9a:1c:d4:81:0a:20:e0:f1:41:99:39:42:75:29:be:c7:d5:c6:
de:1d:b8:ce:0e:3e:f1:1c:2b:05:76:e5:c6:58:14:60:12:92:
95:b2:e1:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8l6Ck1XepjftYwfwDPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUwMTAyMDk0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWU3YTllOWQ1NDA5YWM2NDhhNzI0YzRhZTFkMTI5MGYzM2NhOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsfWvoNkFwhBlqG7b5owruKXchqL
iriM85r8rOcS4Giyv8cgem7X8C1/mmnbROc2AtSN01pBSuQVqmOADfphd+S4cFyQ
wqaHiyDZ2VhLVjj/RJm3HwsgHg58OJM+WlixxtVq7X3lmXyDbojtCaeZEqSfx584
eRaOwg5OeVYPyVCVsTd39YMReLyzDPmUajOLfCOtwKIcim1s/HRusr3PNc69kCfX
VU/+yFos1nPVrpmmm+cANv5OjTGCWKqJ1yXA1w6xYhvO7dmnmTdIcww9W4cz6tJG
MTiK1CLkRAshDtNxuA7Sv5sf1x8/9WfPot6vWfI8ubQWaJvr2PeY5oFyTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPHnqenVQJrGSKckxK4dEpDzPKl3MB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvOGVlcDZkVkFtc1pJcHlURXJoMFNrUE04cVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUEzMA0G
CSqGSIb3DQEBCwUAA4IBAQCF2yhwH0rmqAZj12p/iiFwtMsBSICglnLVfiae3PkG
hxXGSFIHnuX7qhyxpnYjVYnn6n/XosLVGFfa6Ko4eDT1WK+s3+AqEZTVUxjZVCGH
QwBnPHdpVFzK/SYeqZhhkOFWA3j0pG/M5voQM21BhSezv8QafpT6CNOD5HlEgDWa
5DHk/CBIdLlUYMQ+Y7tTkq4vh3hCoo130iik87eCbaNbLMz8UsGvMn8k6BYyQ/rN
TIvlgM5jlyIlMPUpr9y5L5iHXNP+ks+s5s/vY862umpdw5z/5wZV3l2aHNSBCiDg
8UGZOUJ1Kb7H1cbeHbjODj7xHCsFduXGWBRgEpKVsuEV
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:10 2025 by rpki-client