Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/15z8Tc87sUcmqu_-j8fd5V72SOk.roa
File: 15z8Tc87sUcmqu_-j8fd5V72SOk.roa (raw, json)
Hash identifier: j1+r5Re6WUuR0MJ4q5To2qtWCnwOjxuq5IchLyhjQ2g=
Subject key identifier: D7:9C:FC:4D:CF:3B:B1:47:26:AA:EF:FE:8F:C7:DD:E5:5E:F6:48:E9
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EF9DDAC73458AC06F0CB1E94F9A7E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/15z8Tc87sUcmqu_-j8fd5V72SOk.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39246
IP address blocks: 85.187.204.0/24 maxlen: 24
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f9:dd:ac:73:45:8a:c0:6f:0c:b1:e9:4f:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79cfc4dcf3bb14726aaeffe8fc7dde55ef648e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:c0:c2:45:69:d5:d5:cf:3f:db:ed:81:76:
d7:93:68:d4:5b:8c:4b:af:d8:27:17:34:59:ec:1b:
37:0d:5d:20:54:31:77:9a:ca:63:cd:33:c7:ea:50:
de:da:fd:29:ea:03:97:51:f0:f1:d7:96:15:b3:ab:
22:da:59:a9:60:af:41:5e:6a:be:a4:e4:e2:ac:92:
93:d5:37:56:b5:d2:4e:e2:42:e7:cd:fd:77:bb:b7:
0c:36:fa:ce:a9:d9:05:6e:d3:8a:a3:60:18:10:d0:
5f:0c:35:57:66:51:b4:f0:7f:2e:29:66:5a:95:f0:
d7:73:c7:97:47:90:c6:5f:2e:16:7e:45:7e:16:ef:
f9:63:c3:2f:6b:11:21:b1:6e:fd:4e:62:de:95:cb:
61:08:18:c1:24:b6:61:5c:d7:10:fb:57:1e:2d:36:
3f:71:6d:e3:45:b3:70:e8:50:0a:22:4e:d0:4a:c4:
ff:4d:f4:80:90:f0:4f:59:18:43:1b:8c:c1:67:56:
96:ca:6f:40:da:c0:38:c2:f0:c3:bc:ba:fa:73:c8:
2d:95:70:b1:88:6f:06:21:68:eb:68:d4:0d:f0:d9:
64:f6:b1:1d:7c:d7:68:ca:cf:d5:29:f5:a8:a4:fe:
88:bd:86:93:a3:07:78:57:b4:fa:db:54:2d:81:ca:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:FC:4D:CF:3B:B1:47:26:AA:EF:FE:8F:C7:DD:E5:5E:F6:48:E9
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/15z8Tc87sUcmqu_-j8fd5V72SOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:cb:4c:66:4d:47:c0:53:22:aa:8a:e0:31:9e:9e:9c:f0:10:
71:5b:a8:e6:e1:7e:8d:77:fd:2d:36:f3:b9:21:ab:45:e3:3a:
9d:b3:d1:41:26:7e:50:48:e0:84:31:72:b2:c4:77:55:e6:c1:
1c:ad:6a:cc:ce:d7:a1:90:f7:25:5f:ab:9e:8e:bc:0b:80:86:
35:2e:6b:59:47:80:1d:47:6c:f8:b4:72:a0:9d:48:ef:c7:40:
e7:74:23:21:f3:ff:f3:aa:25:43:fb:78:59:d0:d0:70:00:a0:
fe:3a:aa:b6:a8:86:69:73:cd:67:78:ba:15:63:d3:61:36:cb:
cd:2b:93:39:eb:0e:7e:1a:70:64:e4:3c:b3:02:0d:48:b3:a2:
d3:dd:34:8c:e6:fa:8f:98:b8:cc:71:f2:18:61:92:ac:2e:f5:
ba:a1:dd:ec:1f:d1:7d:ad:39:37:b3:98:d3:8e:92:b5:00:78:
6c:f2:b9:c9:51:4e:b4:a9:2c:79:ed:98:f3:3d:e2:e7:30:71:
1d:38:a9:51:a8:ee:09:42:29:2d:76:7b:3a:e2:24:a1:12:2c:
51:e2:69:c9:52:23:48:83:f1:1d:2d:71:3a:b9:25:9d:3d:b6:
fb:66:aa:83:3e:90:5c:1f:b9:c0:a9:ea:a9:64:80:b4:96:32:
9b:71:c6:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljvndrHNFisBvDLHpT5p+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzljZmM0ZGNmM2JiMTQ3MjZhYWVmZmU4ZmM3ZGRlNTVlZjY0OGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRvAwkVp1dXPP9vtgXbXk2jUW4xL
r9gnFzRZ7Bs3DV0gVDF3mspjzTPH6lDe2v0p6gOXUfDx15YVs6si2lmpYK9BXmq+
pOTirJKT1TdWtdJO4kLnzf13u7cMNvrOqdkFbtOKo2AYENBfDDVXZlG08H8uKWZa
lfDXc8eXR5DGXy4WfkV+Fu/5Y8MvaxEhsW79TmLelcthCBjBJLZhXNcQ+1ceLTY/
cW3jRbNw6FAKIk7QSsT/TfSAkPBPWRhDG4zBZ1aWym9A2sA4wvDDvLr6c8gtlXCx
iG8GIWjraNQN8Nlk9rEdfNdoys/VKfWopP6IvYaTowd4V7T621QtgcpAFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNec/E3PO7FHJqrv/o/H3eVe9kjpMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvMTV6OFRjODdzVWNtcXVfLWo4ZmQ1VjcyU09rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVbvMMA0G
CSqGSIb3DQEBCwUAA4IBAQCty0xmTUfAUyKqiuAxnp6c8BBxW6jm4X6Nd/0tNvO5
IatF4zqds9FBJn5QSOCEMXKyxHdV5sEcrWrMztehkPclX6uejrwLgIY1LmtZR4Ad
R2z4tHKgnUjvx0DndCMh8//zqiVD+3hZ0NBwAKD+Oqq2qIZpc81neLoVY9NhNsvN
K5M56w5+GnBk5DyzAg1Is6LT3TSM5vqPmLjMcfIYYZKsLvW6od3sH9F9rTk3s5jT
jpK1AHhs8rnJUU60qSx57ZjzPeLnMHEdOKlRqO4JQiktdns64iShEixR4mnJUiNI
g/EdLXE6uSWdPbb7ZqqDPpBcH7nAqeqpZIC0ljKbccal
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:57 2025 by rpki-client