Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ErqXt-0N5yL6Cb1UqTaojRu-LKU.roa
File: ErqXt-0N5yL6Cb1UqTaojRu-LKU.roa (raw, json)
Hash identifier: AyYnbV/gfKWtRkqAeodqds3FnVGEgFGKbA8UuXPipLM=
Subject key identifier: 12:BA:97:B7:ED:0D:E7:22:FA:09:BD:54:A9:36:A8:8D:1B:BE:2C:A5
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D78645422355E0DA21940D313FBC837
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ErqXt-0N5yL6Cb1UqTaojRu-LKU.roa
Signing time: Sun 01 Jan 2023 13:14:44 +0000
ROA not before: Sun 01 Jan 2023 13:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 85.209.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:64:54:22:35:5e:0d:a2:19:40:d3:13:fb:c8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ba97b7ed0de722fa09bd54a936a88d1bbe2ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:90:a6:2d:81:26:2a:b2:1c:2c:ee:c8:d1:
0f:d7:a9:fa:6b:d5:8b:57:32:be:ed:91:2d:33:01:
c9:bc:62:0a:ba:d0:84:99:f8:39:83:d9:c9:b3:07:
20:78:ec:ab:6f:af:a6:59:35:5e:ca:b3:4f:3f:95:
5d:25:6f:76:9f:d1:59:60:b9:dd:a2:8c:77:c8:2c:
a8:c4:71:6a:f3:f4:13:20:b4:be:85:33:95:0d:8b:
b8:42:dc:70:6f:de:b2:8f:86:1d:66:0d:c4:1f:30:
67:5c:c1:01:e9:c4:78:c4:c9:e7:3f:51:b8:79:be:
79:8a:83:94:85:2f:7a:1d:91:e9:bb:a0:7e:ea:ea:
3d:5a:91:a6:f0:04:2d:8a:2e:48:ac:44:b2:6c:1c:
b5:ee:23:90:95:b8:5f:db:83:0a:cb:00:d8:ab:ef:
5c:5f:19:7c:31:4f:22:6a:3b:bb:d1:1f:20:b1:18:
30:06:f0:5a:94:08:5a:34:7e:f6:10:f6:3d:e7:89:
15:a1:80:95:fc:fd:d3:15:bd:be:d4:34:7f:e3:09:
ff:21:8c:ee:25:08:7b:f9:b4:57:0a:f7:8e:c4:7d:
06:e7:fe:85:ee:66:0a:75:90:74:26:68:06:af:2f:
72:13:e0:d2:55:f8:47:5d:23:a1:1b:32:f5:b3:8a:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:97:B7:ED:0D:E7:22:FA:09:BD:54:A9:36:A8:8D:1B:BE:2C:A5
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ErqXt-0N5yL6Cb1UqTaojRu-LKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a6:72:a2:01:23:7b:27:d3:c4:b2:01:35:4a:72:6a:b6:2d:
48:7e:9e:03:b5:e4:88:a1:6c:46:5f:ef:54:17:74:0e:4a:8c:
17:d1:a5:13:0a:5d:9b:03:e9:7a:0b:09:0d:2a:53:b4:88:0c:
a4:a5:a5:93:07:10:65:37:97:ec:b9:52:6b:e6:9a:e9:fa:1b:
bf:4d:e2:fa:81:88:2f:37:cc:b2:07:a3:4f:b3:5b:fb:36:3b:
3e:36:7a:1a:48:0f:0e:12:5f:2a:fd:c8:0a:64:47:de:ce:66:
e1:6c:46:2e:76:58:4d:fa:6b:3a:eb:06:d8:25:f5:65:62:d2:
7b:5a:da:42:09:be:0c:69:8e:2e:70:d4:fb:27:dd:85:bd:10:
57:a1:91:49:c4:22:44:cf:61:24:ba:9c:83:53:d8:c9:d6:5f:
e5:75:e4:3b:65:8a:59:de:fb:0d:1d:0e:31:43:bb:25:e5:64:
b5:ec:46:ef:25:b2:3b:6b:46:50:ec:e3:07:17:99:73:2a:ba:
04:e3:a9:4e:6f:8e:82:fd:ec:57:ba:ac:82:73:16:2f:5d:94:
32:9c:63:69:9e:c6:19:bb:4f:0c:fd:ba:c1:38:93:f6:8d:ce:
a3:51:bb:ea:75:52:2f:b6:0a:d7:30:78:16:12:28:cb:77:88:
b0:40:17:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteGRUIjVeDaIZQNMT+8g3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjMwMTAxMTMxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmJhOTdiN2VkMGRlNzIyZmEwOWJkNTRhOTM2YTg4ZDFiYmUyY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntOQpi2BJiqyHCzuyNEP16n6a9WL
VzK+7ZEtMwHJvGIKutCEmfg5g9nJswcgeOyrb6+mWTVeyrNPP5VdJW92n9FZYLnd
oox3yCyoxHFq8/QTILS+hTOVDYu4Qtxwb96yj4YdZg3EHzBnXMEB6cR4xMnnP1G4
eb55ioOUhS96HZHpu6B+6uo9WpGm8AQtii5IrESybBy17iOQlbhf24MKywDYq+9c
Xxl8MU8iaju70R8gsRgwBvBalAhaNH72EPY954kVoYCV/P3TFb2+1DR/4wn/IYzu
JQh7+bRXCveOxH0G5/6F7mYKdZB0JmgGry9yE+DSVfhHXSOhGzL1s4o8MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBK6l7ftDeci+gm9VKk2qI0bviylMB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEvRXJxWHQtME41eUw2Q2IxVXFUYW9qUnUtTEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdHnMA0G
CSqGSIb3DQEBCwUAA4IBAQAipnKiASN7J9PEsgE1SnJqti1Ifp4DteSIoWxGX+9U
F3QOSowX0aUTCl2bA+l6CwkNKlO0iAykpaWTBxBlN5fsuVJr5prp+hu/TeL6gYgv
N8yyB6NPs1v7Njs+NnoaSA8OEl8q/cgKZEfezmbhbEYudlhN+ms66wbYJfVlYtJ7
WtpCCb4MaY4ucNT7J92FvRBXoZFJxCJEz2EkupyDU9jJ1l/ldeQ7ZYpZ3vsNHQ4x
Q7sl5WS17EbvJbI7a0ZQ7OMHF5lzKroE46lOb46C/exXuqyCcxYvXZQynGNpnsYZ
u08M/brBOJP2jc6jUbvqdVIvtgrXMHgWEijLd4iwQBeZ
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:25:47 2025 by rpki-client