Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E1YZE72j8Ft9zcg9H6j5xThSRbg.roa
File: E1YZE72j8Ft9zcg9H6j5xThSRbg.roa (raw, json)
Hash identifier: Wntnv8yB7iWEbTU+t2eanNjkME2IuxjgIHZ9/25sAC0=
Subject key identifier: 13:56:19:13:BD:A3:F0:5B:7D:CD:C8:3D:1F:A8:F9:C5:38:52:45:B8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2351D9644E8A50A2B27FA8FB6B3BC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E1YZE72j8Ft9zcg9H6j5xThSRbg.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 85.208.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:35:1d:96:44:e8:a5:0a:2b:27:fa:8f:b6:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13561913bda3f05b7dcdc83d1fa8f9c5385245b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:1a:fb:4f:b7:84:66:77:87:20:ee:99:f7:
a4:41:08:65:49:b7:77:5f:b0:e8:a5:50:14:27:93:
03:83:18:c2:20:ab:44:8c:8f:54:ba:14:50:87:d5:
41:bc:ea:f3:c5:70:2a:05:d8:e5:a4:a2:75:ba:53:
c9:95:97:61:97:84:11:e8:38:cc:11:4e:ca:35:07:
2e:5a:2d:23:94:c7:34:f6:34:63:83:60:7e:69:b2:
23:03:6d:5c:6c:1f:6b:26:e9:e1:a2:19:f5:7f:98:
77:e0:5c:5c:30:b0:8e:d4:24:fa:a4:29:6d:a9:7c:
62:94:df:a7:87:85:12:97:5a:ec:b8:b3:f5:ba:d4:
fc:94:8b:52:dc:f8:b5:8b:91:f1:eb:df:56:e2:71:
0f:54:c8:7b:3c:0b:71:3c:0f:2f:74:a7:0e:d3:81:
11:21:86:60:cf:d9:66:80:d1:30:a9:3f:5a:22:df:
28:07:f6:9e:c3:79:d0:31:7b:f4:5f:52:b0:01:70:
57:2c:98:c5:bd:45:6d:9f:89:c7:95:09:57:6b:0a:
74:41:4c:e8:ee:0d:df:cb:af:16:e1:e1:b0:e8:37:
19:1c:48:90:6d:10:68:69:28:d9:5e:16:78:90:e1:
ab:cc:62:cb:aa:c6:19:b9:1e:0f:c4:84:07:74:3e:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:56:19:13:BD:A3:F0:5B:7D:CD:C8:3D:1F:A8:F9:C5:38:52:45:B8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E1YZE72j8Ft9zcg9H6j5xThSRbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9c:ad:c8:65:0c:73:74:67:0a:91:42:8c:4f:63:f1:17:3d:
a4:4c:52:5e:8b:ec:93:ec:cc:e3:f6:e5:50:8f:eb:09:0c:84:
87:97:a6:06:75:a9:5b:6c:c2:d8:22:ef:63:e3:5e:06:d7:c1:
72:51:ec:6c:ae:d6:7f:53:f0:87:53:b8:b9:73:97:77:07:4a:
b7:5b:6c:ba:fe:42:6f:d4:c8:d9:d2:14:ac:38:a5:98:e5:7a:
9a:ef:e2:57:f6:f6:e9:e6:80:b0:1b:df:21:67:ca:26:6b:ff:
fc:e5:cb:c6:37:aa:4c:e7:bd:0a:89:f5:13:97:ab:79:34:82:
6c:ed:fa:23:53:8e:10:89:da:06:b2:39:10:74:a8:5d:ef:9d:
1e:5b:2b:bf:ec:c8:79:12:8a:f5:e5:cc:bd:ed:cd:1a:82:ef:
91:85:6a:fe:36:d9:6b:2a:c9:f9:ef:5e:0b:71:c8:a6:db:24:
8c:51:70:b7:ef:e4:a0:59:94:75:9f:0f:be:97:ff:38:bb:92:
b5:64:43:c0:35:ab:17:39:16:aa:8d:88:b8:85:63:56:d0:84:
bd:70:57:1b:ba:bd:8a:45:0f:b7:03:7c:15:5e:f8:d9:c5:ce:
03:c2:fc:da:c5:7a:69:26:55:00:42:ce:b1:23:49:6c:af:ea:
33:6c:36:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsjUdlkTopQorJ/qPtrO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzU2MTkxM2JkYTNmMDViN2RjZGM4M2QxZmE4ZjljNTM4NTI0NWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIAa+0+3hGZ3hyDumfekQQhlSbd3
X7DopVAUJ5MDgxjCIKtEjI9UuhRQh9VBvOrzxXAqBdjlpKJ1ulPJlZdhl4QR6DjM
EU7KNQcuWi0jlMc09jRjg2B+abIjA21cbB9rJunhohn1f5h34FxcMLCO1CT6pClt
qXxilN+nh4USl1rsuLP1utT8lItS3Pi1i5Hx699W4nEPVMh7PAtxPA8vdKcO04ER
IYZgz9lmgNEwqT9aIt8oB/aew3nQMXv0X1KwAXBXLJjFvUVtn4nHlQlXawp0QUzo
7g3fy68W4eGw6DcZHEiQbRBoaSjZXhZ4kOGrzGLLqsYZuR4PxIQHdD5/+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNWGRO9o/Bbfc3IPR+o+cU4UkW4MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRTFZWkU3Mmo4RnQ5emNnOUg2ajV4VGhTUmJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBwMA0G
CSqGSIb3DQEBCwUAA4IBAQBtnK3IZQxzdGcKkUKMT2PxFz2kTFJei+yT7Mzj9uVQ
j+sJDISHl6YGdalbbMLYIu9j414G18FyUexsrtZ/U/CHU7i5c5d3B0q3W2y6/kJv
1MjZ0hSsOKWY5Xqa7+JX9vbp5oCwG98hZ8oma//85cvGN6pM570KifUTl6t5NIJs
7fojU44QidoGsjkQdKhd750eWyu/7Mh5Eor15cy97c0agu+RhWr+NtlrKsn5714L
ccim2ySMUXC37+SgWZR1nw++l/84u5K1ZEPANasXORaqjYi4hWNW0IS9cFcbur2K
RQ+3A3wVXvjZxc4DwvzaxXppJlUAQs6xI0lsr+ozbDaW
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:46:45 2025 by rpki-client