Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/5DgFbNoosHAxxZZ-aSF0JbqvygA.roa
File: 5DgFbNoosHAxxZZ-aSF0JbqvygA.roa (raw, json)
Hash identifier: jsUI/cHrwerXnqDWn50puk2z1cw6LTd6yEwI2/USY/g=
Subject key identifier: E4:38:05:6C:DA:28:B0:70:31:C5:96:7E:69:21:74:25:BA:AF:CA:00
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0191EF7A33860E7A7E09044616C23105DB7F
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/5DgFbNoosHAxxZZ-aSF0JbqvygA.roa
Signing time: Sat 14 Sep 2024 07:40:48 +0000
ROA not before: Sat 14 Sep 2024 07:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 89.249.200.0/24 maxlen: 24
185.21.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:7a:33:86:0e:7a:7e:09:04:46:16:c2:31:05:db:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 14 07:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e438056cda28b07031c5967e69217425baafca00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:b3:bc:98:6e:01:43:ff:7c:ff:6a:80:78:
f5:25:41:a2:d0:ad:11:64:68:36:b3:3a:50:9e:ab:
9c:79:95:14:3e:77:66:f7:39:ee:c7:09:1a:73:02:
47:ad:3a:0f:c9:10:f5:c0:c1:68:07:39:13:b7:ba:
a8:15:44:9b:87:6b:f2:2d:15:29:2a:fe:98:1a:79:
94:3b:51:3d:51:0d:57:f5:24:28:7d:14:19:9d:a0:
f2:e4:44:c1:ba:e9:9e:35:7e:14:0b:bb:d6:ae:fd:
e0:49:ec:a5:21:7a:d4:34:5a:a7:a9:33:ae:ea:98:
f4:3b:fd:88:65:1d:69:e4:6e:36:f2:5d:a1:bf:94:
66:e3:17:0c:f9:7a:e8:ed:b8:25:d8:a1:7e:ed:2d:
7a:d7:40:67:df:62:04:eb:a3:13:15:ba:7a:1c:ec:
7e:e2:85:60:3b:83:f3:03:32:d3:4d:d0:26:c0:0f:
20:b4:ac:30:8e:99:34:ac:cf:d3:7f:47:9f:ac:b6:
96:18:11:c9:a2:da:cd:3f:1c:47:4e:50:15:49:96:
a1:6e:90:42:62:44:56:86:51:07:b2:3b:10:e7:3c:
cf:b6:0b:a5:bc:39:b0:e6:6a:35:36:38:7f:24:dd:
dd:60:34:ba:88:e3:0e:99:a4:ad:a9:2b:1f:2d:0f:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:38:05:6C:DA:28:B0:70:31:C5:96:7E:69:21:74:25:BA:AF:CA:00
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/5DgFbNoosHAxxZZ-aSF0JbqvygA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
185.21.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:25:fc:92:46:54:45:7d:0b:ce:b2:a0:c2:cf:f8:e0:b6:98:
19:62:7d:4c:b8:be:12:93:54:19:65:20:4a:e8:04:e9:e7:bb:
f9:86:56:e1:01:7e:ea:c9:b1:05:c0:58:a9:67:53:be:60:2b:
f2:be:ff:8a:90:a8:44:5e:fc:76:2b:91:e6:c4:c0:2d:33:4a:
55:dc:83:03:06:3b:f5:dc:54:dc:fa:91:60:a7:ef:43:7d:35:
7e:b9:b6:06:ff:33:73:d6:17:e9:d0:69:8c:09:a0:7e:7b:ba:
31:a1:0b:2b:6c:47:5a:af:3d:78:ec:2a:24:cc:e6:df:d1:8b:
25:6e:af:15:97:81:1a:2b:cd:ba:3e:1b:69:d6:72:10:40:ed:
1a:13:98:f0:ac:71:82:13:e9:21:04:13:55:71:83:9e:c9:02:
78:a7:c2:80:e2:fc:fe:a2:68:eb:72:6c:f9:ff:11:8f:79:7c:
46:05:fc:41:c2:57:4a:0c:0c:69:ff:69:26:43:e8:4f:dd:e9:
3b:a5:9e:1a:61:7d:9b:91:97:e0:7f:e1:33:ab:ba:3e:a7:66:
81:a3:44:4f:86:3b:4e:d0:33:ed:9a:d7:b1:e7:9f:e8:b5:a7:
48:7d:72:c6:8b:11:79:6d:20:a0:71:86:6a:a1:1e:77:40:85:
62:3c:5b:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHvejOGDnp+CQRGFsIxBdt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQwOTE0MDc0MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDM4MDU2Y2RhMjhiMDcwMzFjNTk2N2U2OTIxNzQyNWJhYWZjYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eOzvJhuAUP/fP9qgHj1JUGi0K0R
ZGg2szpQnquceZUUPndm9znuxwkacwJHrToPyRD1wMFoBzkTt7qoFUSbh2vyLRUp
Kv6YGnmUO1E9UQ1X9SQofRQZnaDy5ETBuumeNX4UC7vWrv3gSeylIXrUNFqnqTOu
6pj0O/2IZR1p5G428l2hv5Rm4xcM+Xro7bgl2KF+7S1610Bn32IE66MTFbp6HOx+
4oVgO4PzAzLTTdAmwA8gtKwwjpk0rM/Tf0efrLaWGBHJotrNPxxHTlAVSZahbpBC
YkRWhlEHsjsQ5zzPtgulvDmw5mo1Njh/JN3dYDS6iOMOmaStqSsfLQ9AUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOQ4BWzaKLBwMcWWfmkhdCW6r8oAMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvNURnRmJOb29zSEF4eFpaLWFTRjBKYnF2eWdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfnIAwQA
uRX+MA0GCSqGSIb3DQEBCwUAA4IBAQAvJfySRlRFfQvOsqDCz/jgtpgZYn1MuL4S
k1QZZSBK6ATp57v5hlbhAX7qybEFwFipZ1O+YCvyvv+KkKhEXvx2K5HmxMAtM0pV
3IMDBjv13FTc+pFgp+9DfTV+ubYG/zNz1hfp0GmMCaB+e7oxoQsrbEdarz147Cok
zObf0Yslbq8Vl4EaK826Phtp1nIQQO0aE5jwrHGCE+khBBNVcYOeyQJ4p8KA4vz+
omjrcmz5/xGPeXxGBfxBwldKDAxp/2kmQ+hP3ek7pZ4aYX2bkZfgf+Ezq7o+p2aB
o0RPhjtO0DPtmtex55/otadIfXLGixF5bSCgcYZqoR53QIViPFsE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:24 2025 by rpki-client