Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa
File: iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa (raw, json)
Hash identifier: xfy4rZ1pJspjyIzKFNFqMhcKLJ7Q1syk5sZcIn8SuS8=
Subject key identifier: 89:25:47:5B:54:08:7B:B6:20:2D:F8:6C:31:1B:16:5C:37:47:81:A1
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B8A07FE3406A85D461967A8DA0F1
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48400
IP address blocks: 85.140.92.0/23 maxlen: 23
85.140.92.0/24 maxlen: 24
85.140.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b8:a0:7f:e3:40:6a:85:d4:61:96:7a:8d:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8925475b54087bb6202df86c311b165c374781a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:49:0d:f2:b3:6b:b1:23:75:2c:34:80:d0:
5e:4a:c5:ab:14:a8:c9:13:4f:3d:3c:2b:03:06:16:
6e:88:aa:7b:8d:4d:04:71:cd:f9:d1:f9:80:2f:d5:
f3:14:4c:67:c4:d7:da:9b:18:25:cf:70:ff:00:4d:
53:49:a3:a7:f8:43:90:3e:4e:9a:89:1e:4d:88:b4:
b2:ce:30:df:d0:9d:a3:1d:c5:9d:f8:49:a9:18:de:
4e:82:ee:1a:22:6b:a9:17:e6:88:40:10:4f:08:60:
2f:a2:90:b9:9c:51:d5:d4:0f:88:dc:af:56:9e:85:
51:07:90:73:be:e7:d6:19:f8:0f:0d:9b:0e:10:ee:
3f:59:98:86:33:5f:50:67:a8:68:04:a4:17:d3:e3:
7a:3b:15:f8:11:aa:01:a2:fe:59:47:3f:c4:81:f3:
25:f4:ea:f5:1b:f7:5c:41:fa:49:18:29:63:d3:8c:
01:fd:6f:da:c5:54:3c:bd:13:06:91:d7:94:ea:59:
7c:07:e0:7d:a0:e3:51:02:2d:a8:8c:a2:de:e5:b9:
81:71:f7:be:ef:0c:96:d1:87:4f:71:0b:7f:7b:6d:
ac:69:6b:91:64:de:31:81:dd:b7:32:cd:11:6b:9f:
4d:b7:ef:03:44:f6:8e:58:d7:9d:9f:c0:c2:21:49:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:47:5B:54:08:7B:B6:20:2D:F8:6C:31:1B:16:5C:37:47:81:A1
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.92.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e1:63:0a:fb:36:db:95:f0:db:23:cd:d7:1f:21:7f:dd:f1:
fa:11:da:b5:b7:14:e1:ae:86:7c:8f:02:13:cb:81:16:e7:cf:
c1:c2:6b:69:14:d1:47:3e:6d:1d:51:34:00:9d:5a:3c:00:4c:
d0:f9:dc:4f:ed:3f:7b:6d:cc:b0:c6:94:07:9e:77:10:9d:5e:
a2:17:c9:3d:84:36:f7:34:2e:6f:86:1c:a7:86:df:44:e3:d6:
53:90:9a:d8:c0:fc:86:1b:bf:3d:1a:cc:78:c8:5e:82:fa:bc:
4f:9c:a3:9b:f9:41:b7:4f:39:63:6e:ad:63:8c:f0:a8:f4:d0:
cd:6b:8d:a7:65:78:86:7e:b4:c0:61:fc:52:a8:95:64:17:87:
29:02:44:19:a7:ba:cb:22:c2:8f:96:a9:f3:f8:56:76:40:69:
aa:63:f8:b1:97:7c:52:a9:8d:6e:e7:b1:2e:3e:3f:e9:35:fc:
ae:25:df:9b:fb:a5:88:e4:51:0f:16:72:b0:ff:ac:a7:86:a9:
2b:4c:3b:89:cf:95:e1:d4:6d:72:da:68:86:3f:f8:b0:53:5e:
24:bb:f6:e7:73:5f:03:92:4e:b8:cc:ba:22:29:4e:56:dd:5a:
4e:d2:4e:bc:b8:20:88:0e:47:e4:53:e9:a0:bf:f8:72:a2:8b:
5f:e8:e4:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2bigf+NAaoXUYZZ6jaDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjUwMTAyMTE0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTI1NDc1YjU0MDg3YmI2MjAyZGY4NmMzMTFiMTY1YzM3NDc4MWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLBJDfKza7EjdSw0gNBeSsWrFKjJ
E089PCsDBhZuiKp7jU0Ecc350fmAL9XzFExnxNfamxglz3D/AE1TSaOn+EOQPk6a
iR5NiLSyzjDf0J2jHcWd+EmpGN5Ogu4aImupF+aIQBBPCGAvopC5nFHV1A+I3K9W
noVRB5BzvufWGfgPDZsOEO4/WZiGM19QZ6hoBKQX0+N6OxX4EaoBov5ZRz/EgfMl
9Or1G/dcQfpJGClj04wB/W/axVQ8vRMGkdeU6ll8B+B9oONRAi2ojKLe5bmBcfe+
7wyW0YdPcQt/e22saWuRZN4xgd23Ms0Ra59Nt+8DRPaOWNedn8DCIUlCPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIklR1tUCHu2IC34bDEbFlw3R4GhMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvaVNWSFcxUUllN1lnTGZoc01Sc1dYRGRIZ2FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVYxcMA0G
CSqGSIb3DQEBCwUAA4IBAQBU4WMK+zbblfDbI83XHyF/3fH6Edq1txThroZ8jwIT
y4EW58/BwmtpFNFHPm0dUTQAnVo8AEzQ+dxP7T97bcywxpQHnncQnV6iF8k9hDb3
NC5vhhynht9E49ZTkJrYwPyGG789Gsx4yF6C+rxPnKOb+UG3Tzljbq1jjPCo9NDN
a42nZXiGfrTAYfxSqJVkF4cpAkQZp7rLIsKPlqnz+FZ2QGmqY/ixl3xSqY1u57Eu
Pj/pNfyuJd+b+6WI5FEPFnKw/6ynhqkrTDuJz5Xh1G1y2miGP/iwU14ku/bnc18D
kk64zLoiKU5W3VpO0k68uCCIDkfkU+mgv/hyootf6ORm
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:52 2025 by rpki-client