Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ppc9Nd3OFthRTZYpX_DzC0bAvj4.roa
File: ppc9Nd3OFthRTZYpX_DzC0bAvj4.roa (raw, json)
Hash identifier: hUtnsHVLh/VFC6UmgvfhuIQRYACZiuDQY1DvOnipAxU=
Subject key identifier: A6:97:3D:35:DD:CE:16:D8:51:4D:96:29:5F:F0:F3:0B:46:C0:BE:3E
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFF28D2CB29C748A1CC43BBEC8839
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ppc9Nd3OFthRTZYpX_DzC0bAvj4.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56606
IP address blocks: 85.187.7.0/24 maxlen: 24
85.187.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ff:28:d2:cb:29:c7:48:a1:cc:43:bb:ec:88:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6973d35ddce16d8514d96295ff0f30b46c0be3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:56:03:98:1b:c1:18:e2:50:3c:66:fe:bc:
42:b9:c9:69:cf:56:3d:cf:c3:78:17:a0:04:93:80:
20:70:18:d9:80:99:b1:94:f3:cf:30:20:f8:db:09:
ec:0a:2d:7a:7b:24:51:99:0a:bf:bc:08:99:28:3f:
fd:d6:c1:ac:06:54:e5:3c:f6:11:d7:da:d0:e4:7d:
80:6c:78:86:b2:fd:44:f9:d4:74:d9:46:e1:ba:4f:
3f:ae:8a:c1:7c:7e:1e:63:71:7d:6a:27:02:18:2f:
71:e6:cc:c2:c2:f3:3c:39:e6:79:7f:88:5c:34:3c:
84:20:3c:f6:8b:58:73:2a:e1:69:d3:2e:59:a9:92:
bb:af:9a:19:9c:0c:27:a2:87:25:66:d6:78:1b:28:
f6:6d:74:6a:4c:27:6a:4f:c1:39:38:ef:ab:85:78:
ab:f4:f7:f2:72:3f:5c:dd:11:b6:8a:b0:01:81:41:
00:fc:63:89:77:f4:79:1e:a7:fd:50:b7:92:aa:af:
bc:1a:93:03:8a:bc:ca:9c:0b:2f:98:17:5a:a3:e0:
37:1f:0e:24:30:fa:a0:be:d0:1f:00:f2:6a:8e:d7:
e9:f8:0f:e2:5d:9d:df:50:f1:3b:e2:a3:eb:3e:fd:
0f:45:d9:fc:36:cc:31:0a:86:06:aa:6c:ee:83:b6:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:3D:35:DD:CE:16:D8:51:4D:96:29:5F:F0:F3:0B:46:C0:BE:3E
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ppc9Nd3OFthRTZYpX_DzC0bAvj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.7.0/24
85.187.40.0/24
Signature Algorithm: sha256WithRSAEncryption
01:33:0e:da:a1:db:b6:d5:84:de:c0:dc:e4:07:e7:88:be:98:
6d:58:a7:99:e6:f7:73:11:0c:7d:c4:a7:c4:7d:28:ac:1b:86:
37:1a:b4:9d:ab:34:a3:8a:76:61:38:30:56:f8:b2:d6:85:ed:
38:37:a9:9f:11:61:d7:43:c6:4d:e0:0c:34:38:7f:8c:5f:73:
15:b0:8f:ef:4d:11:bf:33:9c:d3:7d:97:b6:97:ff:5f:8a:eb:
41:e8:dd:33:eb:4d:07:90:c8:88:e7:9a:53:a1:99:95:46:51:
ec:00:07:ad:25:a3:e3:26:cf:61:a8:15:f0:36:4e:c8:30:ff:
63:ce:11:30:80:e8:3e:c8:e6:b8:cd:c8:79:53:94:0f:10:9e:
18:8e:ce:3d:1d:b8:df:81:54:39:9c:2e:67:b9:f6:de:c7:f0:
ac:d4:4b:88:34:4d:1c:37:57:c7:72:ff:91:8e:dc:6f:fd:d6:
c9:c8:f3:76:84:72:7e:b4:e4:86:13:e2:6e:41:ea:fe:6d:21:
f2:1d:64:f4:ef:18:da:e8:9c:97:6f:e5:3e:31:7d:2a:35:a9:
b2:1b:da:55:4a:aa:2c:70:08:35:6b:c7:e1:d3:52:48:4a:34:
25:75:df:65:3e:77:a7:17:4a:d6:eb:ca:7d:c5:a1:49:6a:69:
8c:fd:a8:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQljv8o0sspx0ihzEO77Ig5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjk3M2QzNWRkY2UxNmQ4NTE0ZDk2Mjk1ZmYwZjMwYjQ2YzBiZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWJWA5gbwRjiUDxm/rxCuclpz1Y9
z8N4F6AEk4AgcBjZgJmxlPPPMCD42wnsCi16eyRRmQq/vAiZKD/91sGsBlTlPPYR
19rQ5H2AbHiGsv1E+dR02Ubhuk8/rorBfH4eY3F9aicCGC9x5szCwvM8OeZ5f4hc
NDyEIDz2i1hzKuFp0y5ZqZK7r5oZnAwnooclZtZ4Gyj2bXRqTCdqT8E5OO+rhXir
9Pfycj9c3RG2irABgUEA/GOJd/R5Hqf9ULeSqq+8GpMDirzKnAsvmBdao+A3Hw4k
MPqgvtAfAPJqjtfp+A/iXZ3fUPE74qPrPv0PRdn8NswxCoYGqmzug7Y2KwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKaXPTXdzhbYUU2WKV/w8wtGwL4+MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvcHBjOU5kM09GdGhSVFpZcFhfRHpDMGJBdmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVbsHAwQA
VbsoMA0GCSqGSIb3DQEBCwUAA4IBAQABMw7aodu21YTewNzkB+eIvphtWKeZ5vdz
EQx9xKfEfSisG4Y3GrSdqzSjinZhODBW+LLWhe04N6mfEWHXQ8ZN4Aw0OH+MX3MV
sI/vTRG/M5zTfZe2l/9fiutB6N0z600HkMiI55pToZmVRlHsAAetJaPjJs9hqBXw
Nk7IMP9jzhEwgOg+yOa4zch5U5QPEJ4Yjs49HbjfgVQ5nC5nufbex/Cs1EuINE0c
N1fHcv+Rjtxv/dbJyPN2hHJ+tOSGE+JuQer+bSHyHWT07xja6JyXb+U+MX0qNamy
G9pVSqoscAg1a8fh01JISjQldd9lPnenF0rW68p9xaFJammM/ag6
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:58:03 2025 by rpki-client