Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/auu0HF13_z1F6Pqz3A-opQmrTA8.roa
File: auu0HF13_z1F6Pqz3A-opQmrTA8.roa (raw, json)
Hash identifier: kKJIpHBdAScHWCbz+uLGttxdvLdsAyKK4Emivwcweho=
Subject key identifier: 6A:EB:B4:1C:5D:77:FF:3D:45:E8:FA:B3:DC:0F:A8:A5:09:AB:4C:0F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019532272B85DFA81FF225C065C02C59E962
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/auu0HF13_z1F6Pqz3A-opQmrTA8.roa
Signing time: Sun 23 Feb 2025 09:33:02 +0000
ROA not before: Sun 23 Feb 2025 09:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 85.133.234.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:27:2b:85:df:a8:1f:f2:25:c0:65:c0:2c:59:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 23 09:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aebb41c5d77ff3d45e8fab3dc0fa8a509ab4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:98:d6:3f:6d:5e:2a:eb:c5:78:34:e6:c0:
8e:8a:1f:bd:07:22:dd:a9:e6:58:6e:d3:d5:f1:1d:
12:34:a7:a1:58:bd:2c:bf:f2:08:c0:c9:52:38:0c:
22:60:7e:42:de:23:62:c2:69:e0:b1:a1:58:63:14:
cf:db:ad:35:c9:6a:cc:39:2e:7c:30:69:fd:ef:3a:
10:c2:39:20:96:85:56:6d:ab:e2:47:ad:b7:3a:b9:
db:e6:04:08:37:1b:81:86:f8:80:59:8d:c9:4e:c1:
23:4c:97:b7:23:ba:a7:3b:91:c9:8c:78:49:58:c9:
7d:a6:f4:17:0f:1f:87:b9:3b:9a:6f:ab:21:cd:d0:
d7:91:9a:89:fa:66:3c:fe:c7:67:2f:57:45:16:cf:
7e:e3:c3:26:43:f3:29:e7:d1:ca:46:ce:3f:07:d7:
1f:83:a4:7e:63:cd:c0:91:a9:6a:87:aa:08:a7:1c:
b2:b3:1e:64:6f:7f:0e:76:a4:b5:d5:d3:fe:a3:dd:
c8:e0:fa:76:db:c4:31:c1:79:3c:30:bf:ca:0f:f6:
12:08:be:aa:26:3c:a8:df:34:47:a0:af:ed:fc:ae:
c6:3f:f1:a1:d5:e2:6d:00:3f:12:cd:3f:e9:69:c6:
92:e5:33:74:aa:45:58:ea:48:de:be:9e:df:8f:a3:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:B4:1C:5D:77:FF:3D:45:E8:FA:B3:DC:0F:A8:A5:09:AB:4C:0F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/auu0HF13_z1F6Pqz3A-opQmrTA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.234.0/24
85.133.246.0/24
85.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6e:de:12:ea:8c:21:45:a9:7c:d4:f9:5e:39:6f:35:31:26:
10:ed:bb:16:2b:c8:c0:03:d5:3c:c6:2d:3a:bf:47:1e:2a:c5:
39:8d:f7:d8:6a:8f:80:36:b4:98:74:3a:9f:59:09:28:17:ec:
70:8a:be:0e:b1:4d:a1:78:de:83:3f:c7:2e:67:0b:d3:2f:ab:
81:1a:e3:91:eb:b3:6b:e7:c5:fe:22:32:e1:63:1b:29:c7:1f:
10:31:1e:a6:42:67:94:2d:57:e4:90:b7:5f:fb:2b:9c:0b:01:
12:e1:ac:62:19:e2:ca:93:f7:97:51:fa:72:ce:28:13:eb:48:
f9:92:76:bc:b4:5f:55:4a:fa:3a:ae:f4:a2:4b:18:14:a0:f9:
bf:40:93:96:29:7f:2b:a0:80:04:54:62:f7:66:bc:7e:61:4c:
b1:9a:78:1f:19:9d:20:9e:df:ff:e2:ed:03:0f:43:0b:91:75:
46:4e:cd:4f:68:98:6e:09:5b:3c:dc:8f:89:3b:a1:01:58:9b:
2a:7f:6c:5b:f8:65:29:8b:36:07:69:74:45:ff:c8:6f:ba:a8:
d7:45:8d:df:35:8a:af:2c:bd:03:50:15:77:d3:d1:44:f0:1a:
63:78:11:de:00:27:3a:69:21:c2:4b:5e:90:ac:4c:15:01:c2:
ad:75:96:6d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUyJyuF36gf8iXAZcAsWeliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwMjIzMDkzMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWViYjQxYzVkNzdmZjNkNDVlOGZhYjNkYzBmYThhNTA5YWI0YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1+Y1j9tXirrxXg05sCOih+9ByLd
qeZYbtPV8R0SNKehWL0sv/IIwMlSOAwiYH5C3iNiwmngsaFYYxTP2601yWrMOS58
MGn97zoQwjkgloVWbaviR623Ornb5gQINxuBhviAWY3JTsEjTJe3I7qnO5HJjHhJ
WMl9pvQXDx+HuTuab6shzdDXkZqJ+mY8/sdnL1dFFs9+48MmQ/Mp59HKRs4/B9cf
g6R+Y83Akalqh6oIpxyysx5kb38OdqS11dP+o93I4Pp228QxwXk8ML/KD/YSCL6q
Jjyo3zRHoK/t/K7GP/Gh1eJtAD8SzT/pacaS5TN0qkVY6kjevp7fj6OljwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGrrtBxdd/89Rej6s9wPqKUJq0wPMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvYXV1MEhGMTNfejFGNlBxejNBLW9wUW1yVEE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVYXqAwQA
VYX2AwQAVYX7MA0GCSqGSIb3DQEBCwUAA4IBAQCibt4S6owhRal81PleOW81MSYQ
7bsWK8jAA9U8xi06v0ceKsU5jffYao+ANrSYdDqfWQkoF+xwir4OsU2heN6DP8cu
ZwvTL6uBGuOR67Nr58X+IjLhYxspxx8QMR6mQmeULVfkkLdf+yucCwES4axiGeLK
k/eXUfpyzigT60j5kna8tF9VSvo6rvSiSxgUoPm/QJOWKX8roIAEVGL3Zrx+YUyx
mngfGZ0gnt//4u0DD0MLkXVGTs1PaJhuCVs83I+JO6EBWJsqf2xb+GUpizYHaXRF
/8hvuqjXRY3fNYqvLL0DUBV309FE8BpjeBHeACc6aSHCS16QrEwVAcKtdZZt
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:22 2025 by rpki-client on console.sobornost.net