Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bZsSh7JoOurnXya98o_roVHxSwQ.roa
File: bZsSh7JoOurnXya98o_roVHxSwQ.roa (raw, json)
Hash identifier: naZBKXE/evN3IHsTQO+XnuP7GdBWHCAwouCwFFzVGoI=
Subject key identifier: 6D:9B:12:87:B2:68:3A:EA:E7:5F:26:BD:F2:8F:EB:A1:51:F1:4B:04
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F046139CCB7FEAD02B9F613BCEB24
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bZsSh7JoOurnXya98o_roVHxSwQ.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199048
IP address blocks: 85.187.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:04:61:39:cc:b7:fe:ad:02:b9:f6:13:bc:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d9b1287b2683aeae75f26bdf28feba151f14b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:17:9b:3a:7f:85:83:c3:f4:82:c6:04:75:
83:be:98:3c:99:22:e5:35:f8:6f:6d:32:52:9d:67:
9f:23:19:ae:50:a3:88:0c:ef:cb:fa:41:ca:48:79:
3f:25:c2:18:49:e0:ab:3e:0e:24:66:18:fe:f4:78:
4e:f8:bf:fa:fb:c6:a1:eb:df:e6:26:0e:90:b1:e4:
76:28:db:03:71:da:69:64:5f:34:b2:c2:6d:3c:5d:
47:a5:b7:6d:94:a5:33:6e:96:5d:a4:de:ae:60:e3:
b6:2d:d9:64:f1:27:d1:0d:82:3d:b7:90:c0:9f:70:
a6:90:73:1a:ff:b1:e2:56:0e:29:cf:05:d2:20:c5:
59:43:aa:79:eb:d6:6d:72:f9:7c:12:12:b1:77:68:
3a:4e:8c:0f:12:6c:86:23:9b:ff:40:b1:61:0e:a6:
bc:69:6f:a3:fc:5a:a5:8b:84:14:cf:3d:77:f7:14:
7c:e4:b3:77:30:4f:83:59:5f:2f:8c:84:05:61:3e:
8f:9d:dc:78:96:b4:b1:8f:d1:99:dd:8c:05:b6:7b:
8a:cb:8e:26:9f:f4:db:32:89:18:b0:9a:d3:d8:90:
8f:59:7c:f5:43:e1:23:a8:85:33:e1:1c:0c:3a:93:
af:36:96:91:40:c2:fb:5e:d4:75:87:f1:19:20:49:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9B:12:87:B2:68:3A:EA:E7:5F:26:BD:F2:8F:EB:A1:51:F1:4B:04
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bZsSh7JoOurnXya98o_roVHxSwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.223.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c0:cb:2c:74:04:81:56:11:18:b3:10:2d:df:43:90:48:f7:
7c:14:33:97:24:04:f2:a5:f5:00:54:3a:34:c0:1d:f2:bb:b4:
f4:ae:f7:32:e0:12:bf:c5:e0:55:b0:f5:33:65:d4:13:1e:0a:
75:0c:bf:bb:20:77:ec:18:d5:20:2b:bc:cb:3b:a0:5c:33:8b:
33:fa:e8:ba:99:19:24:e2:2d:c4:c7:ff:83:bd:ed:38:b6:e8:
9e:fb:0d:d1:db:b2:2f:c9:7c:cc:3a:d8:47:17:d3:b8:96:35:
be:c8:f4:f6:58:a6:0e:e1:22:b8:91:6b:5c:fd:d5:7f:c0:3c:
7d:9d:05:7d:8f:ad:55:ca:db:d9:6d:5c:70:0c:7b:92:7a:29:
0c:79:cc:9c:71:f7:41:c6:9a:a6:2f:6f:55:ee:2e:ee:e6:c1:
f2:e1:f7:46:ea:0a:bc:4e:39:06:50:13:12:46:77:ae:be:c1:
f5:f6:33:13:02:20:02:6b:06:44:e9:07:e5:f1:66:e2:65:51:
2c:3f:c8:d9:05:2a:28:27:c4:13:95:bf:03:a9:90:40:f2:f0:
f5:00:47:e6:df:84:11:c9:e2:25:94:54:fb:5d:86:41:89:0a:
9a:74:99:ca:cb:db:dd:56:d5:92:9b:db:67:60:86:47:fc:b0:
7b:9b:01:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:39:57 2025 by rpki-client