Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Ea1m_hAsxoSKXE-_nW4MZHC6OOE.roa
File: Ea1m_hAsxoSKXE-_nW4MZHC6OOE.roa (raw, json)
Hash identifier: 0RB2qZGk9rIX0FfbE9Qh8lzSg4NDAr0gs7UAY+PWbUM=
Subject key identifier: 11:AD:66:FE:10:2C:C6:84:8A:5C:4F:BF:9D:6E:0C:64:70:BA:38:E1
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019593558376263369CEEC55643D34BFC1BD
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Ea1m_hAsxoSKXE-_nW4MZHC6OOE.roa
Signing time: Fri 14 Mar 2025 06:26:49 +0000
ROA not before: Fri 14 Mar 2025 06:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.68.0/24 maxlen: 24
213.145.70.0/23 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.82.0/24 maxlen: 24
213.145.83.0/24 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:55:83:76:26:33:69:ce:ec:55:64:3d:34:bf:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Mar 14 06:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11ad66fe102cc6848a5c4fbf9d6e0c6470ba38e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:f1:01:51:61:b5:c3:a7:8b:5e:b6:18:56:
03:46:b4:29:3d:20:c2:09:12:00:b0:21:11:1d:fa:
cd:97:01:4f:60:1b:69:25:f2:1e:4e:15:1a:16:5f:
d5:65:27:1e:71:07:5d:75:a5:3f:67:cd:2c:2e:b6:
84:b6:1c:c8:84:cb:0a:15:47:3a:0a:d7:c0:76:a1:
26:0a:ed:10:29:5b:45:3a:b6:25:8c:78:d0:e1:77:
d8:41:36:22:25:73:48:30:39:32:5c:01:87:3d:b7:
1b:17:16:f5:3d:c0:ba:19:89:2c:44:84:ea:1d:3e:
44:08:f0:86:49:b1:72:0c:d9:7a:d0:20:dd:02:7b:
4d:7f:cf:98:5f:c7:c1:0e:be:1d:2f:6d:b8:43:0f:
27:8f:7e:8b:ed:41:15:f1:cc:70:47:bf:25:72:64:
8c:2e:c9:8d:0b:6a:48:fe:42:88:fb:e9:d5:62:39:
38:27:b2:1f:1a:47:35:80:22:58:94:2c:9c:3e:04:
93:ff:4c:77:92:7c:c1:6b:c1:e9:c6:4c:16:10:a4:
c0:16:bd:50:bf:59:96:a3:63:cf:ff:43:be:82:b7:
57:b2:56:ea:0b:27:2c:f3:27:a3:05:f4:8f:34:48:
ce:8d:b7:90:17:20:b5:a5:7a:7e:2d:8a:47:1c:30:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AD:66:FE:10:2C:C6:84:8A:5C:4F:BF:9D:6E:0C:64:70:BA:38:E1
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Ea1m_hAsxoSKXE-_nW4MZHC6OOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
40:5f:18:20:68:1f:a3:9c:d7:c9:9d:e1:03:ca:0e:99:f1:a8:
98:b7:51:1e:21:42:ad:52:bf:05:70:a8:59:44:fb:ce:db:81:
d8:7c:f1:07:0a:7e:fe:38:ee:70:17:ea:6f:a7:12:e1:ce:7a:
c9:22:b8:a8:36:80:c1:2c:2c:d7:e1:50:3b:bb:43:45:89:00:
c1:91:30:2d:71:25:ed:47:2c:bc:35:8e:07:22:96:fc:b5:f4:
cf:53:ad:6f:3f:f5:3d:5f:ca:f0:fb:4b:59:57:91:61:ed:1b:
d7:dc:c9:1d:a7:e6:64:eb:08:cf:33:d3:44:0d:00:eb:51:a8:
9c:3e:7f:09:b5:dd:bc:96:9c:bd:bf:a2:25:5f:fc:56:2e:e4:
42:d6:ed:fd:9f:49:ac:8e:a4:00:40:77:ce:c7:77:af:a7:99:
f4:39:b2:98:35:00:27:34:8f:53:e5:d7:31:85:5b:ea:55:fb:
54:af:6f:15:1f:56:92:10:9c:27:0d:92:b3:5e:12:cc:f7:73:
8d:52:50:24:31:1a:9e:77:76:a7:43:37:83:64:41:f2:64:c7:
81:31:d3:77:12:3b:33:e1:e2:fc:68:de:dd:a6:c5:42:c4:ec:
2d:8e:63:f0:bc:af:ff:fc:42:2c:95:cb:dd:e6:c8:4c:d3:b4:
82:f4:07:75
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZWTVYN2JjNpzuxVZD00v8G9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjUwMzE0MDYyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWFkNjZmZTEwMmNjNjg0OGE1YzRmYmY5ZDZlMGM2NDcwYmEzOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G7xAVFhtcOni162GFYDRrQpPSDC
CRIAsCERHfrNlwFPYBtpJfIeThUaFl/VZScecQdddaU/Z80sLraEthzIhMsKFUc6
CtfAdqEmCu0QKVtFOrYljHjQ4XfYQTYiJXNIMDkyXAGHPbcbFxb1PcC6GYksRITq
HT5ECPCGSbFyDNl60CDdAntNf8+YX8fBDr4dL224Qw8nj36L7UEV8cxwR78lcmSM
LsmNC2pI/kKI++nVYjk4J7IfGkc1gCJYlCycPgST/0x3knzBa8HpxkwWEKTAFr1Q
v1mWo2PP/0O+grdXslbqCycs8yejBfSPNEjOjbeQFyC1pXp+LYpHHDDGnwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBGtZv4QLMaEilxPv51uDGRwujjhMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvRWExbV9oQXN4b1NLWEUtX25XNE1aSEM2T09FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQCVXPQMAwD
BALVkUQDBATVkUAwDAMEAdWRUgMEAdWRWDANBgkqhkiG9w0BAQsFAAOCAQEAQF8Y
IGgfo5zXyZ3hA8oOmfGomLdRHiFCrVK/BXCoWUT7ztuB2HzxBwp+/jjucBfqb6cS
4c56ySK4qDaAwSws1+FQO7tDRYkAwZEwLXEl7UcsvDWOByKW/LX0z1Otbz/1PV/K
8PtLWVeRYe0b19zJHafmZOsIzzPTRA0A61GonD5/CbXdvJacvb+iJV/8Vi7kQtbt
/Z9JrI6kAEB3zsd3r6eZ9DmymDUAJzSPU+XXMYVb6lX7VK9vFR9WkhCcJw2Ss14S
zPdzjVJQJDEannd2p0M3g2RB8mTHgTHTdxI7M+Hi/Gje3abFQsTsLY5j8Lyv//xC
LJXL3ebITNO0gvQHdQ==
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:18:08 2025 by rpki-client on console.sobornost.net