Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vEC7dBnTo4uiVHDHoC5LCx9wuw8.roa
File: vEC7dBnTo4uiVHDHoC5LCx9wuw8.roa (raw, json)
Hash identifier: izIyw47aNXzRCCU9QYhaj7uwc279xlPmv+Xoe64XbJc=
Subject key identifier: BC:40:BB:74:19:D3:A3:8B:A2:54:70:C7:A0:2E:4B:0B:1F:70:BB:0F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B26620E4DE43385C7344A962928D87
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vEC7dBnTo4uiVHDHoC5LCx9wuw8.roa
Signing time: Wed 01 Jan 2025 11:48:47 +0000
ROA not before: Wed 01 Jan 2025 11:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 85.142.184.0/21 maxlen: 24
85.142.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:66:20:e4:de:43:38:5c:73:44:a9:62:92:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc40bb7419d3a38ba25470c7a02e4b0b1f70bb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:e7:6e:87:c8:76:e5:4a:91:bc:96:33:46:
5c:dc:4f:f9:a5:96:37:ca:87:17:e9:2c:f0:38:cc:
8b:79:91:cc:58:ae:47:04:d0:1a:b6:c3:45:76:f7:
d8:fe:70:59:cf:7b:7c:a6:76:c6:53:13:9f:02:b0:
34:e2:3f:55:b1:bc:3f:80:7c:60:d3:2f:1f:c7:38:
5c:59:3f:b6:c8:89:3f:35:d1:ea:45:5b:7d:01:9f:
e3:9d:d9:04:52:15:b4:89:36:c0:08:43:26:43:08:
e1:ef:8f:81:08:6f:32:3b:2e:31:3a:03:82:ea:31:
f0:0a:45:1b:9e:07:f1:79:ad:87:5e:ab:14:39:1a:
a1:62:67:b8:a6:46:ab:7d:8d:a1:8e:ba:70:65:8c:
b3:67:2a:d2:aa:ea:e4:2e:a0:73:fa:5c:64:56:44:
1d:32:e7:49:32:7e:f9:d6:4e:0a:2a:e2:3c:28:fd:
81:1d:54:12:40:41:83:7b:8a:68:21:8d:fe:b9:35:
c3:a5:1e:e4:31:86:54:5f:c9:1b:9d:d7:eb:c5:87:
6d:71:ed:46:a9:bb:88:d7:2f:29:84:bf:8b:26:d0:
62:16:b4:fa:0c:ef:34:51:c4:1f:55:78:61:f3:9d:
df:81:2a:d3:54:14:14:7f:13:a1:a0:4f:cf:53:be:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:BB:74:19:D3:A3:8B:A2:54:70:C7:A0:2E:4B:0B:1F:70:BB:0F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vEC7dBnTo4uiVHDHoC5LCx9wuw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.184.0/21
85.142.248.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:a8:6e:19:98:03:5e:5b:79:1c:63:13:46:09:61:d1:ca:ac:
c7:33:7a:45:d3:37:17:fb:a7:9a:ba:58:3e:85:d9:11:ce:c1:
be:a6:c5:e4:51:94:cb:fe:0b:38:ab:3f:62:40:3a:23:32:42:
e5:ee:c4:4e:04:fd:75:e3:b6:b6:26:4d:6c:c6:2f:5d:00:bd:
1e:9b:9a:f4:10:78:c5:f3:3d:be:f6:63:e2:67:45:0b:12:b0:
72:7d:b4:3c:01:ac:7d:a0:02:72:b4:db:87:38:66:f8:9f:a1:
58:71:46:1e:d7:bc:6d:6b:4f:d1:c8:2f:c3:1e:d4:0b:e2:cf:
b2:19:0e:38:90:a6:06:fc:71:7c:2c:00:cf:22:7f:34:8b:d5:
1a:f2:65:81:12:19:1e:fe:85:fb:11:6f:77:c3:6f:28:76:90:
95:ab:cf:92:d9:88:db:a1:07:5b:22:26:9c:28:2c:86:b2:ff:
0a:09:ec:57:6e:be:25:d9:f7:e3:68:55:91:31:e8:f9:9d:04:
29:1a:72:3b:d1:eb:02:3f:89:99:6c:c2:71:42:ef:40:95:1c:
b4:fa:34:7c:82:96:c8:27:4a:27:90:2c:be:6e:8b:98:26:6e:
96:f8:7e:35:92:fa:15:13:85:a9:1c:85:06:ed:6d:b5:1d:dc:
39:b5:73:19
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsmYg5N5DOFxzRKliko2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjUwMTAxMTE0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQwYmI3NDE5ZDNhMzhiYTI1NDcwYzdhMDJlNGIwYjFmNzBiYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXnnbofIduVKkbyWM0Zc3E/5pZY3
yocX6SzwOMyLeZHMWK5HBNAatsNFdvfY/nBZz3t8pnbGUxOfArA04j9Vsbw/gHxg
0y8fxzhcWT+2yIk/NdHqRVt9AZ/jndkEUhW0iTbACEMmQwjh74+BCG8yOy4xOgOC
6jHwCkUbngfxea2HXqsUORqhYme4pkarfY2hjrpwZYyzZyrSqurkLqBz+lxkVkQd
MudJMn751k4KKuI8KP2BHVQSQEGDe4poIY3+uTXDpR7kMYZUX8kbndfrxYdtce1G
qbuI1y8phL+LJtBiFrT6DO80UcQfVXhh853fgSrTVBQUfxOhoE/PU74v7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLxAu3QZ06OLolRwx6AuSwsfcLsPMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvdkVDN2RCblRvNHVpVkhESG9DNUxDeDl3dXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVY64AwQB
VY74MA0GCSqGSIb3DQEBCwUAA4IBAQAeqG4ZmANeW3kcYxNGCWHRyqzHM3pF0zcX
+6eaulg+hdkRzsG+psXkUZTL/gs4qz9iQDojMkLl7sROBP1147a2Jk1sxi9dAL0e
m5r0EHjF8z2+9mPiZ0ULErByfbQ8Aax9oAJytNuHOGb4n6FYcUYe17xta0/RyC/D
HtQL4s+yGQ44kKYG/HF8LADPIn80i9Ua8mWBEhke/oX7EW93w28odpCVq8+S2Yjb
oQdbIiacKCyGsv8KCexXbr4l2ffjaFWRMej5nQQpGnI70esCP4mZbMJxQu9AlRy0
+jR8gpbIJ0onkCy+bouYJm6W+H41kvoVE4WpHIUG7W21Hdw5tXMZ
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:12:47 2025 by rpki-client