Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/aWHRyWvcTOajDrtomzIXNOAn0I8.roa
File: aWHRyWvcTOajDrtomzIXNOAn0I8.roa (raw, json)
Hash identifier: 0lubLn078lwjyVJYOEW2ouj0Ej0dWuW9dicwT01nisc=
Subject key identifier: 69:61:D1:C9:6B:DC:4C:E6:A3:0E:BB:68:9B:32:17:34:E0:27:D0:8F
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0BC3AFE4D6A2115BFC4E79F81E2B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/aWHRyWvcTOajDrtomzIXNOAn0I8.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209518
IP address blocks: 85.187.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0b:c3:af:e4:d6:a2:11:5b:fc:4e:79:f8:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6961d1c96bdc4ce6a30ebb689b321734e027d08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:aa:76:ff:1e:a1:88:d6:72:94:c8:b5:79:
27:5d:c8:4a:0c:f1:7a:e5:3c:16:94:a8:b2:af:82:
d0:6a:a4:ce:62:c6:da:39:cf:bb:9d:35:f4:53:06:
0f:5c:27:ba:47:b0:3c:a5:4c:32:82:56:0d:eb:de:
79:2e:d5:b8:64:f5:09:30:fa:6e:61:dd:0f:fc:5d:
f2:8e:32:78:95:4a:a4:1f:c5:c5:c4:a3:76:43:5a:
57:4d:f8:de:13:ce:01:6c:63:b2:ab:0f:1f:3f:61:
27:1e:45:83:b3:d2:41:2a:db:68:1f:99:fb:d6:e2:
30:cf:83:fa:66:55:ee:aa:1b:93:89:65:7f:a2:14:
6f:5c:87:42:ea:15:4b:73:9a:4d:2d:aa:90:7a:7f:
39:73:04:a5:67:67:ce:f5:e6:cb:51:0a:b0:6d:67:
db:ac:2e:ea:41:61:fc:64:ac:63:05:8a:f4:32:61:
a6:54:21:1d:50:1c:25:8a:61:4f:0a:4f:af:9e:b5:
d2:f3:77:b8:22:b2:95:7e:e5:82:c4:c3:77:3c:6c:
01:d5:33:52:1b:ab:53:7b:9e:c5:2f:4b:86:46:d6:
d6:f9:53:fc:8a:a4:c6:72:47:36:f8:f5:9c:8a:7b:
c9:85:1b:1f:f9:50:9d:63:61:e8:8a:fc:65:fe:91:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:D1:C9:6B:DC:4C:E6:A3:0E:BB:68:9B:32:17:34:E0:27:D0:8F
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/aWHRyWvcTOajDrtomzIXNOAn0I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.2.0/24
Signature Algorithm: sha256WithRSAEncryption
33:21:60:9d:ce:4f:79:ee:3b:fe:26:c1:32:7d:14:b9:ea:6b:
73:d2:f7:32:7b:ce:da:b2:b2:cd:e5:1f:0c:b6:11:e5:31:db:
71:fe:69:07:33:ce:e1:41:f5:98:d7:7c:b1:29:b3:e9:81:92:
9e:ea:16:1c:a1:5d:cf:70:01:7e:af:59:f3:31:f2:e4:e3:5d:
c0:f0:b3:66:c5:d5:24:63:e4:e2:e3:13:51:91:b9:11:a8:b5:
41:5a:4e:f1:9b:0c:20:66:e7:ad:23:ac:8a:36:61:20:71:df:
18:4d:80:e9:a5:38:48:a8:51:21:eb:60:b6:8e:40:07:93:69:
5f:3d:85:bd:32:ea:48:0b:cd:65:78:82:32:b6:fb:7a:84:2b:
dd:82:a0:1f:7a:13:2d:d2:fd:35:e3:4c:77:3d:ce:3d:65:b1:
e6:82:cf:58:27:71:d4:48:27:5e:65:3a:03:d5:a0:3c:20:8c:
c4:4c:dc:22:33:85:ee:8d:b3:ca:67:2e:c5:43:c0:5f:f0:2b:
9d:0c:6e:3f:cf:44:c1:37:71:c9:79:a9:90:9b:b4:c2:a1:51:
08:3f:de:6f:97:1d:1c:da:07:f7:15:b2:c2:d3:1e:d9:3b:83:
be:1b:f7:a5:df:92:fd:90:74:2d:f8:56:4a:ad:e6:81:34:61:
73:76:6d:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwvDr+TWohFb/E55+B4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTYxZDFjOTZiZGM0Y2U2YTMwZWJiNjg5YjMyMTczNGUwMjdkMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Wqdv8eoYjWcpTItXknXchKDPF6
5TwWlKiyr4LQaqTOYsbaOc+7nTX0UwYPXCe6R7A8pUwyglYN6955LtW4ZPUJMPpu
Yd0P/F3yjjJ4lUqkH8XFxKN2Q1pXTfjeE84BbGOyqw8fP2EnHkWDs9JBKttoH5n7
1uIwz4P6ZlXuqhuTiWV/ohRvXIdC6hVLc5pNLaqQen85cwSlZ2fO9ebLUQqwbWfb
rC7qQWH8ZKxjBYr0MmGmVCEdUBwlimFPCk+vnrXS83e4IrKVfuWCxMN3PGwB1TNS
G6tTe57FL0uGRtbW+VP8iqTGckc2+PWcinvJhRsf+VCdY2Hoivxl/pE4LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlh0clr3Ezmow67aJsyFzTgJ9CPMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvYVdIUnlXdmNUT2FqRHJ0b216SVhOT0FuMEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbsCMA0G
CSqGSIb3DQEBCwUAA4IBAQAzIWCdzk957jv+JsEyfRS56mtz0vcye87asrLN5R8M
thHlMdtx/mkHM87hQfWY13yxKbPpgZKe6hYcoV3PcAF+r1nzMfLk413A8LNmxdUk
Y+Ti4xNRkbkRqLVBWk7xmwwgZuetI6yKNmEgcd8YTYDppThIqFEh62C2jkAHk2lf
PYW9MupIC81leIIytvt6hCvdgqAfehMt0v0140x3Pc49ZbHmgs9YJ3HUSCdeZToD
1aA8IIzETNwiM4XujbPKZy7FQ8Bf8CudDG4/z0TBN3HJeamQm7TCoVEIP95vlx0c
2gf3FbLC0x7ZO4O+G/el35L9kHQt+FZKreaBNGFzdm10
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:34:19 2025 by rpki-client