Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/4Cp9zCCbE0OTQ-yte2hBWUHrnvw.roa
File: 4Cp9zCCbE0OTQ-yte2hBWUHrnvw.roa (raw, json)
Hash identifier: pY+q/OFAaYJtV6Q8FHTrXRpgwk34zm2trveyYJ6Kx0Y=
Subject key identifier: E0:2A:7D:CC:20:9B:13:43:93:43:EC:AD:7B:68:41:59:41:EB:9E:FC
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018AD0B266526B66D155AE6A93FF759DFAF0
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/4Cp9zCCbE0OTQ-yte2hBWUHrnvw.roa
Signing time: Tue 26 Sep 2023 08:54:27 +0000
ROA not before: Tue 26 Sep 2023 08:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211376
IP address blocks: 89.249.206.0/24 maxlen: 24
89.249.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:b2:66:52:6b:66:d1:55:ae:6a:93:ff:75:9d:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 26 08:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e02a7dcc209b13439343ecad7b68415941eb9efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:ce:fd:c9:42:96:47:ff:e6:c7:be:72:79:
b1:b7:6d:b5:ba:2c:c7:b0:c4:6f:db:f8:69:5a:5c:
ef:9b:fa:af:88:a1:4a:40:29:d2:9f:b6:db:28:25:
10:eb:d3:ab:5b:a7:23:b5:b4:28:f9:56:10:d3:77:
01:90:71:f4:3e:78:ba:9e:2f:d7:dd:90:cb:cf:3d:
ab:73:25:7a:0d:b6:0a:c8:f9:03:e1:4d:f9:c1:05:
95:80:39:7f:54:66:0d:46:9f:97:f5:25:29:f4:c7:
26:83:48:5e:7d:f2:a5:2e:5e:97:02:ca:cc:7b:40:
39:0f:11:bd:91:b0:5c:e1:23:e7:a0:64:36:7b:a6:
85:76:21:00:6c:04:f5:61:cd:7e:bf:eb:79:3c:2d:
11:bf:72:bd:bf:ab:08:65:b5:75:65:3e:fd:ba:b7:
eb:d4:d6:fa:48:e9:6e:e0:be:d9:d9:f8:80:f7:53:
03:90:42:72:af:31:4b:cd:15:c7:46:4c:d5:55:f9:
f1:9c:c0:5c:a4:e0:a0:59:f7:82:d2:7b:ed:1b:55:
b8:45:76:66:d6:4c:04:57:10:3c:9d:d8:a2:2c:64:
4d:78:0f:6b:8d:51:91:37:d8:e6:44:7c:cd:f3:91:
14:4d:51:c2:29:bc:52:cd:27:d0:ae:67:2c:72:77:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:7D:CC:20:9B:13:43:93:43:EC:AD:7B:68:41:59:41:EB:9E:FC
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/4Cp9zCCbE0OTQ-yte2hBWUHrnvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.206.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:13:00:bf:65:0f:4b:dc:bb:a7:46:05:9c:0d:a7:7e:7d:4b:
ef:42:dd:1c:dc:4d:e0:e2:c6:df:c9:e6:a7:4f:98:f6:14:0a:
17:32:71:b0:0e:63:d3:f1:84:ab:e1:d4:0c:26:12:32:44:41:
68:c0:97:9d:a5:a5:ed:d6:af:30:e3:52:f1:ec:08:b3:ba:cd:
5c:b7:f6:4f:52:14:bc:db:ef:f2:cb:7f:4b:63:de:f7:e5:7e:
53:d1:97:76:26:d0:b2:9f:8b:c5:4d:54:2b:f0:ce:20:61:e4:
e9:8f:f5:6c:79:35:bf:10:c0:d2:1f:18:d9:cc:f0:db:1f:34:
62:4e:e1:df:68:56:73:fd:fd:96:c3:e6:58:4d:be:87:a6:ef:
17:d1:55:28:ba:e2:48:b5:59:d2:8f:e3:c2:f4:e5:0d:16:b3:
4e:e8:4a:2d:36:16:47:99:be:73:5c:4e:1c:54:47:bc:13:80:
61:85:d3:0d:08:b6:ae:bf:c4:4b:e0:ad:ba:b9:5c:76:43:58:
0a:41:0c:65:80:dc:5f:4b:1f:00:07:6b:a4:2d:21:26:4c:86:
a5:72:57:db:70:98:af:75:a8:83:3d:20:b9:e0:82:5f:05:8f:
de:ca:a3:86:f7:91:27:6f:99:a7:e6:bd:74:48:3e:d5:1b:56:
c7:70:89:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrQsmZSa2bRVa5qk/91nfrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjMwOTI2MDg1NDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDJhN2RjYzIwOWIxMzQzOTM0M2VjYWQ3YjY4NDE1OTQxZWI5ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTXO/clClkf/5se+cnmxt221uizH
sMRv2/hpWlzvm/qviKFKQCnSn7bbKCUQ69OrW6cjtbQo+VYQ03cBkHH0Pni6ni/X
3ZDLzz2rcyV6DbYKyPkD4U35wQWVgDl/VGYNRp+X9SUp9Mcmg0heffKlLl6XAsrM
e0A5DxG9kbBc4SPnoGQ2e6aFdiEAbAT1Yc1+v+t5PC0Rv3K9v6sIZbV1ZT79urfr
1Nb6SOlu4L7Z2fiA91MDkEJyrzFLzRXHRkzVVfnxnMBcpOCgWfeC0nvtG1W4RXZm
1kwEVxA8ndiiLGRNeA9rjVGRN9jmRHzN85EUTVHCKbxSzSfQrmcscneWLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOAqfcwgmxNDk0PsrXtoQVlB6578MB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvNENwOXpDQ2JFME9UUS15dGUyaEJXVUhybnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWfnOMA0G
CSqGSIb3DQEBCwUAA4IBAQDGEwC/ZQ9L3LunRgWcDad+fUvvQt0c3E3g4sbfyean
T5j2FAoXMnGwDmPT8YSr4dQMJhIyREFowJedpaXt1q8w41Lx7Aizus1ct/ZPUhS8
2+/yy39LY9735X5T0Zd2JtCyn4vFTVQr8M4gYeTpj/VseTW/EMDSHxjZzPDbHzRi
TuHfaFZz/f2Ww+ZYTb6Hpu8X0VUouuJItVnSj+PC9OUNFrNO6EotNhZHmb5zXE4c
VEe8E4BhhdMNCLauv8RL4K26uVx2Q1gKQQxlgNxfSx8AB2ukLSEmTIalclfbcJiv
daiDPSC54IJfBY/eyqOG95Enb5mn5r10SD7VG1bHcImo
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:38 2025 by rpki-client