Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/e1UPw78y4cFZjZCIdsBDN0hqzSE.roa
File: e1UPw78y4cFZjZCIdsBDN0hqzSE.roa (raw, json)
Hash identifier: vp2Ce7n68TAxcBNho++J7DP/XLY3tsny9gecMLEiRxE=
Subject key identifier: 7B:55:0F:C3:BF:32:E1:C1:59:8D:90:88:76:C0:43:37:48:6A:CD:21
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D941A420DA4E45E808FC8A3616F3973
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/e1UPw78y4cFZjZCIdsBDN0hqzSE.roa
Signing time: Sun 01 Jan 2023 13:45:00 +0000
ROA not before: Sun 01 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212025
IP address blocks: 85.158.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:1a:42:0d:a4:e4:5e:80:8f:c8:a3:61:6f:39:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b550fc3bf32e1c1598d908876c04337486acd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:22:46:3b:90:f4:dc:7b:ba:6e:7a:bc:81:
57:00:f9:8d:74:5f:13:a5:45:23:f1:10:4b:15:27:
2b:09:3a:dc:d5:22:53:f7:71:c0:2d:0d:a2:98:5a:
14:84:2b:a9:4e:78:3a:b3:01:54:72:9e:e6:26:1f:
5c:c8:ff:4b:2f:e6:d6:62:b4:3d:9f:2f:63:32:b1:
4e:c1:c5:c6:d8:63:bd:27:21:cf:1e:33:7b:be:8c:
b5:d5:35:e8:41:89:0f:f5:49:84:87:91:f3:fe:e4:
69:78:94:3f:51:9f:89:9e:28:06:e8:ca:59:8b:d9:
b7:40:62:c0:aa:b8:74:37:0f:cc:b7:d1:f2:ac:6f:
47:fc:eb:3a:ac:54:cf:24:9c:85:7e:86:fd:61:18:
93:58:a3:98:27:04:db:67:53:2b:c6:f1:99:d4:ac:
94:57:2f:50:af:fa:13:ec:55:ff:e5:a1:b5:f6:48:
2b:d7:08:e2:2d:1e:6a:01:7a:5d:b4:fd:bb:ac:81:
3d:74:51:ee:73:90:7f:3b:05:dd:bf:01:c2:38:57:
85:15:6e:c9:9d:5c:2b:7c:59:5b:56:61:6c:36:48:
5e:d8:8d:ca:b1:de:7c:e2:c0:8c:49:c2:a5:70:e4:
0d:f2:d3:ce:99:21:55:6d:4c:9e:35:28:88:bd:e1:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:0F:C3:BF:32:E1:C1:59:8D:90:88:76:C0:43:37:48:6A:CD:21
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/e1UPw78y4cFZjZCIdsBDN0hqzSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.145.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b7:2d:38:8c:26:29:12:60:fc:b9:e5:3f:b4:ed:c2:e1:a2:
7c:5c:56:35:3e:a2:3e:96:92:cd:d9:e6:bd:5d:1b:5e:be:a0:
a0:c5:2b:c3:6e:f3:aa:55:51:c5:f0:28:df:69:90:29:f9:e0:
ba:6c:83:03:ec:de:8e:61:de:9a:0a:6c:10:c5:c6:0d:9b:f0:
fc:2c:69:1c:7f:e9:25:e7:b8:fa:fb:4e:b6:1a:d5:76:c7:03:
21:27:10:04:9c:14:a9:54:bd:6a:da:63:74:3a:d7:77:a4:eb:
90:68:31:fc:b7:30:87:72:c4:80:13:24:a7:cb:1b:c8:84:64:
a4:ba:ca:9c:ed:93:be:8c:81:30:cb:e5:ce:c5:e5:d6:c6:c1:
ac:41:74:e8:4b:2c:9f:1e:4c:94:6f:0b:e0:80:dd:96:cd:1f:
54:07:2e:4d:64:a8:83:4a:88:a4:05:05:12:44:2a:eb:12:e6:
4a:f5:39:55:55:03:80:58:11:ec:04:fc:43:d4:61:54:f0:c1:
21:4e:92:f1:7c:c0:02:a9:d2:2f:5b:28:8c:e9:c2:8e:76:43:
9c:5a:6b:07:2d:e1:1c:8b:6d:d1:b1:82:d4:b3:cd:3a:ec:c5:
2e:72:9b:93:52:ab:d8:99:29:48:aa:64:1c:1d:ff:ac:9f:65:
06:e0:4b:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtlBpCDaTkXoCPyKNhbzlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTAxMTM0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjU1MGZjM2JmMzJlMWMxNTk4ZDkwODg3NmMwNDMzNzQ4NmFjZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrUiRjuQ9Nx7um56vIFXAPmNdF8T
pUUj8RBLFScrCTrc1SJT93HALQ2imFoUhCupTng6swFUcp7mJh9cyP9LL+bWYrQ9
ny9jMrFOwcXG2GO9JyHPHjN7voy11TXoQYkP9UmEh5Hz/uRpeJQ/UZ+JnigG6MpZ
i9m3QGLAqrh0Nw/Mt9HyrG9H/Os6rFTPJJyFfob9YRiTWKOYJwTbZ1MrxvGZ1KyU
Vy9Qr/oT7FX/5aG19kgr1wjiLR5qAXpdtP27rIE9dFHuc5B/OwXdvwHCOFeFFW7J
nVwrfFlbVmFsNkhe2I3Ksd584sCMScKlcOQN8tPOmSFVbUyeNSiIveF3VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtVD8O/MuHBWY2QiHbAQzdIas0hMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvZTFVUHc3OHk0Y0ZaalpDSWRzQkROMGhxelNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ6RMA0G
CSqGSIb3DQEBCwUAA4IBAQApty04jCYpEmD8ueU/tO3C4aJ8XFY1PqI+lpLN2ea9
XRtevqCgxSvDbvOqVVHF8CjfaZAp+eC6bIMD7N6OYd6aCmwQxcYNm/D8LGkcf+kl
57j6+062GtV2xwMhJxAEnBSpVL1q2mN0Otd3pOuQaDH8tzCHcsSAEySnyxvIhGSk
usqc7ZO+jIEwy+XOxeXWxsGsQXToSyyfHkyUbwvggN2WzR9UBy5NZKiDSoikBQUS
RCrrEuZK9TlVVQOAWBHsBPxD1GFU8MEhTpLxfMACqdIvWyiM6cKOdkOcWmsHLeEc
i23RsYLUs8067MUucpuTUqvYmSlIqmQcHf+sn2UG4EuI
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:07 2025 by rpki-client