Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa
File: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (raw, json)
Hash identifier: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=
Subject key identifier: 39:EC:3B:AA:B6:9D:56:8C:88:87:B6:58:30:1B:65:0B:82:EB:E1:EE
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019427B5BD490B9B3E00C474CE56CB4D3554
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209366
IP address blocks: 85.208.96.0/22 maxlen: 22
85.208.96.0/24 maxlen: 24
85.208.97.0/24 maxlen: 24
85.208.98.0/24 maxlen: 24
85.208.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bd:49:0b:9b:3e:00:c4:74:ce:56:cb:4d:35:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39ec3baab69d568c8887b658301b650b82ebe1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:00:e8:65:85:e8:50:9e:3a:d8:02:f6:a2:
18:ce:29:9f:37:6e:55:79:b7:f0:10:24:e8:6c:62:
42:55:42:ea:1c:2a:03:cf:58:97:08:92:1c:95:5c:
85:a9:7b:41:c0:6c:f6:4a:3a:c9:61:9c:15:fd:ec:
da:63:0e:21:81:b5:a4:88:d0:19:70:be:0b:ec:94:
27:e2:10:50:4f:42:fe:d6:bd:e7:ad:14:fd:47:00:
3c:9a:57:1c:44:6d:e4:2f:c2:94:1d:5e:b7:25:4e:
69:bd:16:c2:08:39:a8:e3:76:00:3b:5c:0b:18:69:
01:03:8e:12:ec:23:15:4e:86:e5:49:73:a4:91:7f:
6e:d3:63:5d:92:a8:04:b3:b3:90:60:9f:30:a0:e0:
fa:6a:e7:f1:2f:d8:98:e4:f6:b0:bf:cd:09:9e:66:
d0:6b:e1:de:99:a8:9a:2b:45:28:7d:dc:3b:f0:c9:
34:f3:0a:34:12:30:a4:5d:a9:ad:3e:5b:d9:83:3b:
61:1d:63:ba:05:c6:93:19:cb:f9:cf:b9:ad:57:2d:
8f:5b:60:97:50:2c:a6:9c:a0:61:1f:08:54:ae:a2:
97:8d:59:b6:16:86:28:73:ea:0e:01:32:c8:05:79:
f1:13:05:9e:8a:81:3a:4e:62:8e:ad:cb:41:b9:e1:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EC:3B:AA:B6:9D:56:8C:88:87:B6:58:30:1B:65:0B:82:EB:E1:EE
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.96.0/22
Signature Algorithm: sha256WithRSAEncryption
91:e7:5a:5a:e9:c9:df:77:6d:26:a6:f9:26:f4:3f:ff:62:e0:
50:c9:5b:cf:62:38:41:31:28:d2:cf:1e:54:d4:29:56:2c:a1:
30:0d:77:40:77:9c:22:94:2e:9d:bf:e2:74:3d:03:95:1f:83:
33:29:46:b6:58:cd:a2:65:d4:32:5b:eb:4d:cd:a0:b4:de:72:
77:8a:fe:a6:c5:c0:91:71:db:2c:27:12:41:4f:83:f4:74:c8:
d2:72:83:0e:88:ac:e3:fc:b3:af:44:78:22:9f:6a:6c:73:e3:
a3:90:d4:9f:3c:df:4d:c6:f0:c0:8c:68:96:f5:c6:d5:87:d0:
27:cf:4d:98:45:e7:14:83:e1:67:ea:e7:74:03:96:d9:6b:1a:
32:61:68:42:00:91:0b:31:3e:6d:69:f1:a0:c6:cd:3b:42:04:
52:14:56:31:55:a0:48:04:b8:59:25:2b:ef:85:01:02:95:09:
f5:fe:a7:9d:a2:af:48:38:97:55:3e:e6:a7:e2:5d:59:7a:84:
9b:19:a7:ab:d3:de:a3:eb:ab:7c:9f:a3:a6:45:35:dd:0f:dc:
07:14:a5:3a:6f:17:47:68:ba:42:29:2f:16:71:48:be:34:73:
7d:34:68:08:9e:f2:e0:ef:15:3c:33:9a:77:27:d7:13:dc:b1:
9e:38:b8:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntb1JC5s+AMR0zlbLTTVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh
MGNmNmEwHhcNMjUwMTAyMTU1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWVjM2JhYWI2OWQ1NjhjODg4N2I2NTgzMDFiNjUwYjgyZWJlMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BMA6GWF6FCeOtgC9qIYzimfN25V
ebfwECTobGJCVULqHCoDz1iXCJIclVyFqXtBwGz2SjrJYZwV/ezaYw4hgbWkiNAZ
cL4L7JQn4hBQT0L+1r3nrRT9RwA8mlccRG3kL8KUHV63JU5pvRbCCDmo43YAO1wL
GGkBA44S7CMVToblSXOkkX9u02NdkqgEs7OQYJ8woOD6aufxL9iY5Pawv80JnmbQ
a+HemaiaK0Uofdw78Mk08wo0EjCkXamtPlvZgzthHWO6BcaTGcv5z7mtVy2PW2CX
UCymnKBhHwhUrqKXjVm2FoYoc+oOATLIBXnxEwWeioE6TmKOrctBueFwYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDnsO6q2nVaMiIe2WDAbZQuC6+HuMB8GA1UdIwQY
MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt
ZTIzMDQ2MmZjNTdiLzEvT2V3N3FyYWRWb3lJaDdaWU1CdGxDNExyNGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi
LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdBgMA0G
CSqGSIb3DQEBCwUAA4IBAQCR51pa6cnfd20mpvkm9D//YuBQyVvPYjhBMSjSzx5U
1ClWLKEwDXdAd5wilC6dv+J0PQOVH4MzKUa2WM2iZdQyW+tNzaC03nJ3iv6mxcCR
cdssJxJBT4P0dMjScoMOiKzj/LOvRHgin2psc+OjkNSfPN9NxvDAjGiW9cbVh9An
z02YRecUg+Fn6ud0A5bZaxoyYWhCAJELMT5tafGgxs07QgRSFFYxVaBIBLhZJSvv
hQEClQn1/qedoq9IOJdVPuan4l1ZeoSbGaer096j66t8n6OmRTXdD9wHFKU6bxdH
aLpCKS8WcUi+NHN9NGgInvLg7xU8M5p3J9cT3LGeOLjc
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:02:32 2025 by rpki-client