Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/AU7d-vGfcU_Ptp0Oa5o4xSuPMbA.roa
File: AU7d-vGfcU_Ptp0Oa5o4xSuPMbA.roa (raw, json)
Hash identifier: smIe6W5UCJpPeSXFlxihphEwfCwhhJ+TVaJ9V0O9ijs=
Subject key identifier: 01:4E:DD:FA:F1:9F:71:4F:CF:B6:9D:0E:6B:9A:38:C5:2B:8F:31:B0
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01900E0A9B5CD2A391962B5B7578D69E60DF
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/AU7d-vGfcU_Ptp0Oa5o4xSuPMbA.roa
Signing time: Wed 12 Jun 2024 20:01:34 +0000
ROA not before: Wed 12 Jun 2024 20:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214724
IP address blocks: 85.222.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0e:0a:9b:5c:d2:a3:91:96:2b:5b:75:78:d6:9e:60:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jun 12 20:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=014eddfaf19f714fcfb69d0e6b9a38c52b8f31b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:ea:86:f1:ee:d4:cc:81:5c:76:a2:9f:c1:
90:93:a8:45:7d:c0:1e:d2:af:af:8c:49:03:17:37:
8b:ea:59:47:78:71:36:35:54:b1:2a:2e:9a:d4:a9:
ba:2b:81:62:7d:03:bd:de:95:e0:06:9f:ae:10:07:
fb:db:da:54:59:b9:08:4c:71:de:94:10:76:c8:38:
43:c6:7f:eb:ee:49:ca:fb:e5:7d:57:51:1e:c5:21:
98:ac:06:c4:5a:51:7d:70:91:c9:ae:8f:3f:b2:5c:
22:5a:df:57:c2:d0:5d:68:51:51:6c:fc:ac:4d:cb:
30:c9:04:02:7a:4b:0b:04:1d:f5:2a:68:bf:ad:dd:
33:15:7c:15:a3:96:c6:d0:12:7e:45:32:24:09:5c:
8b:64:74:fb:18:85:16:23:9e:9f:c4:64:28:54:38:
6e:83:87:d0:94:64:f4:56:95:a6:36:9a:8e:d7:67:
73:63:11:97:dc:09:2e:2a:ea:fc:d9:b8:2c:29:48:
7a:48:ba:f5:69:a4:0c:bf:20:6e:80:63:27:f1:5c:
20:87:03:87:56:0c:51:3a:e6:4b:cb:a7:41:57:8a:
83:23:35:05:21:63:c1:cf:19:d2:6c:d5:b8:b4:33:
9f:aa:52:3a:4c:99:fe:dc:ed:2b:2d:5f:45:23:80:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4E:DD:FA:F1:9F:71:4F:CF:B6:9D:0E:6B:9A:38:C5:2B:8F:31:B0
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/AU7d-vGfcU_Ptp0Oa5o4xSuPMbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.162.0/23
Signature Algorithm: sha256WithRSAEncryption
76:51:45:1a:6e:93:31:50:fd:17:96:a8:80:82:63:2e:0f:5a:
b6:b5:bd:5c:90:aa:bf:d4:ce:ee:90:4e:ec:7a:51:51:7b:73:
9c:e9:73:b8:48:cc:79:9a:cf:a4:05:2d:00:d2:72:61:dc:eb:
a2:84:71:65:d4:65:08:34:84:ac:80:ef:64:84:25:58:56:81:
ca:8b:a0:80:c1:48:66:42:df:31:6c:9b:8d:5d:4f:c0:b8:75:
20:83:61:b4:2c:90:5f:62:c7:22:d0:45:19:aa:7d:83:86:2b:
60:cd:5c:9c:29:94:a9:70:86:80:a7:60:57:8a:a9:96:80:ce:
98:51:99:83:3e:1e:a2:30:80:dd:1b:25:42:5a:a6:cf:b4:bd:
43:9d:1e:eb:34:7e:78:a9:f4:3b:46:cc:8c:5c:a0:d5:52:42:
23:05:30:4b:b6:50:e6:be:b6:10:a3:96:38:ba:d9:fe:d9:f6:
ef:23:d8:da:37:ef:e6:92:b0:2b:f4:2f:5c:0d:53:46:68:ba:
19:06:72:60:26:8c:d4:3b:99:fe:9c:61:80:d2:02:51:63:d7:
56:31:b6:5f:e6:26:7f:20:fb:d4:df:10:95:03:d9:c5:fe:ed:
47:38:8a:20:ca:dd:97:ee:97:02:0b:58:fb:ca:f6:06:4a:49:
46:3b:66:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAOCptc0qORlitbdXjWnmDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5
NGVlYzMwHhcNMjQwNjEyMjAwMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTRlZGRmYWYxOWY3MTRmY2ZiNjlkMGU2YjlhMzhjNTJiOGYzMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjovqhvHu1MyBXHain8GQk6hFfcAe
0q+vjEkDFzeL6llHeHE2NVSxKi6a1Km6K4FifQO93pXgBp+uEAf729pUWbkITHHe
lBB2yDhDxn/r7knK++V9V1EexSGYrAbEWlF9cJHJro8/slwiWt9XwtBdaFFRbPys
TcswyQQCeksLBB31Kmi/rd0zFXwVo5bG0BJ+RTIkCVyLZHT7GIUWI56fxGQoVDhu
g4fQlGT0VpWmNpqO12dzYxGX3AkuKur82bgsKUh6SLr1aaQMvyBugGMn8VwghwOH
VgxROuZLy6dBV4qDIzUFIWPBzxnSbNW4tDOfqlI6TJn+3O0rLV9FI4BTrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFO3frxn3FPz7adDmuaOMUrjzGwMB8GA1UdIwQY
MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt
MjhkNWI2MDdhNDdmLzEvQVU3ZC12R2ZjVV9QdHAwT2E1bzR4U3VQTWJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm
LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVd6iMA0G
CSqGSIb3DQEBCwUAA4IBAQB2UUUabpMxUP0XlqiAgmMuD1q2tb1ckKq/1M7ukE7s
elFRe3Oc6XO4SMx5ms+kBS0A0nJh3OuihHFl1GUINISsgO9khCVYVoHKi6CAwUhm
Qt8xbJuNXU/AuHUgg2G0LJBfYsci0EUZqn2DhitgzVycKZSpcIaAp2BXiqmWgM6Y
UZmDPh6iMIDdGyVCWqbPtL1DnR7rNH54qfQ7RsyMXKDVUkIjBTBLtlDmvrYQo5Y4
utn+2fbvI9jaN+/mkrAr9C9cDVNGaLoZBnJgJozUO5n+nGGA0gJRY9dWMbZf5iZ/
IPvU3xCVA9nF/u1HOIogyt2X7pcCC1j7yvYGSklGO2Y8
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:22 2024 by rpki-client on console.sobornost.net