Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/YQNQDRccLRaRrY9XxLnQAcPApFg.roa
File: YQNQDRccLRaRrY9XxLnQAcPApFg.roa (raw, json)
Hash identifier: PSrQjeKrV9NNQKSdr6dK+hibAp4bI1GPun0CzagW08I=
Subject key identifier: 61:03:50:0D:17:1C:2D:16:91:AD:8F:57:C4:B9:D0:01:C3:C0:A4:58
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E48DD9982A650D14025D63EA64D86
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/YQNQDRccLRaRrY9XxLnQAcPApFg.roa
Signing time: Wed 01 Jan 2025 15:48:57 +0000
ROA not before: Wed 01 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 85.115.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:48:dd:99:82:a6:50:d1:40:25:d6:3e:a6:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6103500d171c2d1691ad8f57c4b9d001c3c0a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:59:9c:57:b1:77:1c:30:7e:58:ae:82:e7:
df:a4:5c:c6:c3:48:a9:42:71:77:27:eb:7c:fe:c3:
74:6f:8e:bc:95:5a:de:9a:19:b3:76:31:be:c0:a6:
af:5c:4f:59:00:93:c6:98:c2:18:81:45:d2:0c:bf:
18:62:ef:97:6b:6f:46:06:1e:f5:81:9d:b3:6e:5b:
03:9e:12:78:28:0c:d7:ba:df:6d:1f:52:6e:7b:df:
d2:85:be:52:c1:0a:22:e1:16:fd:5c:33:e8:6b:bf:
66:9f:8f:42:36:f7:28:d0:37:e8:be:29:4f:a7:b0:
5d:5d:e9:d7:e2:2f:f4:68:b1:db:ea:dd:3d:80:96:
3d:39:df:07:1a:fc:13:87:b4:28:eb:4d:01:d6:75:
28:b6:f8:17:76:f2:ef:4d:28:63:f1:09:af:d2:a4:
84:43:04:f3:16:b3:3b:f0:09:65:f8:3c:34:6e:16:
3c:1b:32:cb:1f:ab:57:40:d7:b6:09:bc:e6:dd:fa:
46:0c:70:6b:a5:06:37:1b:56:38:e8:53:59:56:a4:
de:47:2c:63:d3:95:cd:25:db:8f:28:8f:d2:80:8c:
56:6e:fd:e3:94:b0:62:21:e6:e4:90:99:29:14:de:
93:c3:7e:38:af:21:2c:a1:9e:59:3d:46:80:d2:e6:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:50:0D:17:1C:2D:16:91:AD:8F:57:C4:B9:D0:01:C3:C0:A4:58
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/YQNQDRccLRaRrY9XxLnQAcPApFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.211.0/24
Signature Algorithm: sha256WithRSAEncryption
45:55:f6:ae:f6:8a:c5:77:49:fe:00:c9:e4:9f:e5:6f:22:db:
45:78:bb:35:a9:19:8e:38:e3:d8:a6:13:c0:54:c0:eb:8a:c3:
95:c4:83:9f:88:d9:04:9c:0b:bb:2c:4d:95:6b:59:d2:67:86:
82:b3:d8:0e:11:c4:fc:28:80:5e:5a:7e:65:82:a8:44:09:6a:
4e:4f:fc:b7:69:bc:9b:ed:2e:02:a9:50:c1:77:74:ca:7e:d3:
12:ca:30:06:33:05:9e:79:c9:3d:14:60:e6:8a:7d:d8:53:b1:
aa:44:af:4f:9b:19:3f:73:de:5b:29:68:5f:0b:05:89:0f:d5:
44:f7:9d:98:59:a8:05:d6:17:7e:40:e2:c8:a0:c8:e2:ab:3b:
62:9b:be:ec:31:e2:ff:14:ba:f4:c0:c5:b0:77:a8:8b:cc:bf:
1a:19:71:fd:ec:92:2d:66:74:38:d3:8f:83:04:69:64:f4:9f:
78:b3:ab:dd:03:27:89:6f:8f:96:97:b6:0e:b2:6b:ab:d4:cf:
24:99:48:4f:50:8a:fd:9c:5a:b7:92:f2:bb:ce:45:0a:cd:9a:
41:79:d8:b1:51:14:2b:50:fe:ae:98:74:e4:59:07:93:94:e8:
0d:cf:73:a9:cd:30:4f:8d:f7:7f:50:0d:ab:b5:5a:5f:0e:2c:
0c:19:bb:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijkjdmYKmUNFAJdY+pk2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjUwMTAxMTU0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTAzNTAwZDE3MWMyZDE2OTFhZDhmNTdjNGI5ZDAwMWMzYzBhNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfZZnFexdxwwfliuguffpFzGw0ip
QnF3J+t8/sN0b468lVremhmzdjG+wKavXE9ZAJPGmMIYgUXSDL8YYu+Xa29GBh71
gZ2zblsDnhJ4KAzXut9tH1Jue9/Shb5SwQoi4Rb9XDPoa79mn49CNvco0DfovilP
p7BdXenX4i/0aLHb6t09gJY9Od8HGvwTh7Qo600B1nUotvgXdvLvTShj8Qmv0qSE
QwTzFrM78All+Dw0bhY8GzLLH6tXQNe2Cbzm3fpGDHBrpQY3G1Y46FNZVqTeRyxj
05XNJduPKI/SgIxWbv3jlLBiIebkkJkpFN6Tw344ryEsoZ5ZPUaA0uYZOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGEDUA0XHC0Wka2PV8S50AHDwKRYMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvWVFOUURSY2NMUmFSclk5WHhMblFBY1BBcEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXPTMA0G
CSqGSIb3DQEBCwUAA4IBAQBFVfau9orFd0n+AMnkn+VvIttFeLs1qRmOOOPYphPA
VMDrisOVxIOfiNkEnAu7LE2Va1nSZ4aCs9gOEcT8KIBeWn5lgqhECWpOT/y3abyb
7S4CqVDBd3TKftMSyjAGMwWeeck9FGDmin3YU7GqRK9Pmxk/c95bKWhfCwWJD9VE
952YWagF1hd+QOLIoMjiqztim77sMeL/FLr0wMWwd6iLzL8aGXH97JItZnQ404+D
BGlk9J94s6vdAyeJb4+Wl7YOsmur1M8kmUhPUIr9nFq3kvK7zkUKzZpBedixURQr
UP6umHTkWQeTlOgNz3OpzTBPjfd/UA2rtVpfDiwMGbu2
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:36:34 2025 by rpki-client