Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/5eabaHyJMZC6xaOfXyNUDeK_Rik.roa
File: 5eabaHyJMZC6xaOfXyNUDeK_Rik.roa (raw, json)
Hash identifier: TiX60vap4EuHd5z3yDdwzlNIdcxuV5BI27iNpoK9+cI=
Subject key identifier: E5:E6:9B:68:7C:89:31:90:BA:C5:A3:9F:5F:23:54:0D:E2:BF:46:29
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0194F4E3465E0120A9AC2B74A2890AFEDA57
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/5eabaHyJMZC6xaOfXyNUDeK_Rik.roa
Signing time: Tue 11 Feb 2025 12:02:02 +0000
ROA not before: Tue 11 Feb 2025 12:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48747
IP address blocks: 85.11.152.0/24 maxlen: 24
85.11.153.0/24 maxlen: 24
85.11.154.0/24 maxlen: 24
85.11.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:e3:46:5e:01:20:a9:ac:2b:74:a2:89:0a:fe:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Feb 11 12:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5e69b687c893190bac5a39f5f23540de2bf4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:96:68:f0:75:af:26:0f:59:ed:b1:10:29:
36:97:88:22:97:f8:15:30:01:4d:61:9c:20:57:af:
79:ee:1d:c8:d4:69:1a:19:7e:28:06:d2:fe:c7:72:
0f:88:03:92:65:94:52:9f:48:45:f6:aa:dc:4b:94:
34:c5:e3:b7:d6:6c:3a:8e:06:b4:1c:04:64:f7:61:
68:b2:57:3c:4f:c8:ea:8b:4c:30:69:48:62:5a:cc:
ca:0f:3a:65:5d:29:a4:05:9b:7e:99:cf:22:8f:4e:
ac:51:a5:c2:7a:9e:9c:fb:cf:e1:2f:ac:15:4c:6b:
37:f7:01:e2:60:d2:46:e3:03:02:45:80:45:cc:95:
06:a4:3e:18:58:c1:d7:f9:67:43:f0:91:89:f8:d2:
04:e9:cf:85:5b:bb:6b:6d:74:11:47:f6:3f:05:e7:
d3:7a:a6:c5:61:95:5c:42:70:44:43:92:4d:ed:58:
1a:ea:9f:64:3f:23:f3:a1:20:b2:2c:f0:0c:89:22:
5d:74:6d:47:f1:d9:06:99:c3:3f:aa:16:f3:c4:ca:
e3:21:6c:80:d1:92:f3:09:68:c8:e2:10:18:dd:f6:
53:a9:45:8f:29:66:da:53:d3:db:01:a6:3a:2a:a5:
78:06:19:27:67:f0:32:3e:26:a6:be:7e:ad:10:b4:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E6:9B:68:7C:89:31:90:BA:C5:A3:9F:5F:23:54:0D:E2:BF:46:29
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/5eabaHyJMZC6xaOfXyNUDeK_Rik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.152.0/22
Signature Algorithm: sha256WithRSAEncryption
52:82:97:44:89:89:06:2d:75:d8:ec:62:4a:06:57:e0:01:7b:
65:11:a1:a9:1e:2b:64:04:e9:2e:59:2c:7d:37:65:d0:e2:5d:
5e:24:1f:f7:0e:26:fb:15:bf:ce:3c:3a:4d:2b:3e:25:23:5a:
b6:52:63:79:5b:72:13:a2:23:89:96:11:ee:99:32:9b:7b:64:
a4:da:7d:32:85:b8:13:03:f9:19:e8:e0:05:d7:24:f0:dd:51:
58:39:43:61:11:84:92:c2:ca:ec:8f:03:d9:5b:5e:9e:27:2a:
40:44:d0:e9:e9:22:0b:ef:76:45:6d:4d:1a:4c:ff:27:22:c5:
dd:dd:82:8f:0b:0a:6c:db:9d:1f:71:99:bb:83:25:c7:6d:1f:
32:a7:3b:cb:5b:f6:18:64:61:af:8e:76:46:fc:8f:a0:e8:1d:
48:ff:40:59:9f:16:30:33:dd:e0:7b:8d:25:46:91:d9:bd:2f:
80:ad:1a:38:94:30:ae:6f:d1:e6:95:67:7d:8f:ee:79:45:3c:
1a:99:f4:e0:2c:4e:d7:d1:08:e1:6a:a4:3d:a2:4d:53:24:ec:
8b:9f:74:a1:a0:2c:be:3f:d9:e0:bd:ec:cd:32:85:15:31:a1:
b2:3a:4d:06:a4:65:16:a5:c7:04:5a:cc:45:82:28:93:6a:eb:
30:9a:59:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT040ZeASCprCt0ookK/tpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh
ZWYyNTQwHhcNMjUwMjExMTIwMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWU2OWI2ODdjODkzMTkwYmFjNWEzOWY1ZjIzNTQwZGUyYmY0NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscmWaPB1ryYPWe2xECk2l4gil/gV
MAFNYZwgV6957h3I1GkaGX4oBtL+x3IPiAOSZZRSn0hF9qrcS5Q0xeO31mw6jga0
HARk92Foslc8T8jqi0wwaUhiWszKDzplXSmkBZt+mc8ij06sUaXCep6c+8/hL6wV
TGs39wHiYNJG4wMCRYBFzJUGpD4YWMHX+WdD8JGJ+NIE6c+FW7trbXQRR/Y/BefT
eqbFYZVcQnBEQ5JN7Vga6p9kPyPzoSCyLPAMiSJddG1H8dkGmcM/qhbzxMrjIWyA
0ZLzCWjI4hAY3fZTqUWPKWbaU9PbAaY6KqV4BhknZ/AyPiamvn6tELQaowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXmm2h8iTGQusWjn18jVA3iv0YpMB8GA1UdIwQY
MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt
MmNjNjc1NzI2OTc1LzEvNWVhYmFIeUpNWkM2eGFPZlh5TlVEZUtfUmlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1
LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVQuYMA0G
CSqGSIb3DQEBCwUAA4IBAQBSgpdEiYkGLXXY7GJKBlfgAXtlEaGpHitkBOkuWSx9
N2XQ4l1eJB/3Dib7Fb/OPDpNKz4lI1q2UmN5W3IToiOJlhHumTKbe2Sk2n0yhbgT
A/kZ6OAF1yTw3VFYOUNhEYSSwsrsjwPZW16eJypARNDp6SIL73ZFbU0aTP8nIsXd
3YKPCwps250fcZm7gyXHbR8ypzvLW/YYZGGvjnZG/I+g6B1I/0BZnxYwM93ge40l
RpHZvS+ArRo4lDCub9HmlWd9j+55RTwamfTgLE7X0QjhaqQ9ok1TJOyLn3ShoCy+
P9ngvezNMoUVMaGyOk0GpGUWpccEWsxFgiiTauswmlmg
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net