Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/9-AbMC71TaIqEpvuSdXmW46l-UI.roa
File: 9-AbMC71TaIqEpvuSdXmW46l-UI.roa (raw, json)
Hash identifier: OCBxCDOHy+gJOugJC2lZrdaD3POsZ1wzUufB13/cRok=
Subject key identifier: F7:E0:1B:30:2E:F5:4D:A2:2A:12:9B:EE:49:D5:E6:5B:8E:A5:F9:42
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018C1402918C544B67DCC78E2C759331CD9F
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/9-AbMC71TaIqEpvuSdXmW46l-UI.roa
Signing time: Tue 28 Nov 2023 03:39:21 +0000
ROA not before: Tue 28 Nov 2023 03:39:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.249.206.0/23 maxlen: 24
89.249.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:02:91:8c:54:4b:67:dc:c7:8e:2c:75:93:31:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 28 03:39:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7e01b302ef54da22a129bee49d5e65b8ea5f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:06:a3:82:8e:4a:93:6e:cc:a4:a7:dc:a3:
ea:ea:13:e3:7c:64:de:45:f2:ca:02:c8:2d:73:fc:
7d:35:cc:e9:c0:ea:0a:9d:a1:e0:12:93:fe:7f:01:
ec:b8:f6:2c:c6:f2:08:7e:b2:8a:ae:3f:89:33:1c:
9e:91:74:2d:aa:c9:6d:95:98:04:3f:5e:78:4a:dc:
cd:c3:48:c8:20:0d:ad:e2:7f:45:b4:cb:c1:74:94:
6a:cf:12:0b:3f:88:4d:ba:94:32:1d:08:2c:ab:d1:
a4:af:34:bf:0a:de:1a:8a:63:31:2b:43:92:cf:63:
28:37:03:68:b7:de:84:f5:c0:ae:fe:c5:0f:46:44:
ba:44:26:d8:63:16:ad:48:73:75:f4:c2:cc:65:c6:
1d:13:e3:41:0f:48:b0:b5:cd:f7:9b:cb:e7:fd:2a:
14:f0:33:1e:a8:77:71:25:e3:41:a0:14:a4:9b:fc:
59:70:59:31:fe:34:5e:db:0b:d4:10:95:be:b5:4e:
37:a2:fd:0e:06:8d:0b:de:d5:6f:80:a6:3f:5d:1f:
44:9a:4c:71:f3:3e:62:14:cd:de:a5:6d:61:a0:e2:
4a:c9:22:80:52:8c:61:da:b2:88:70:92:51:13:1c:
12:1e:66:c3:1c:13:d1:ec:c0:d1:8e:28:f4:e5:f8:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:1B:30:2E:F5:4D:A2:2A:12:9B:EE:49:D5:E6:5B:8E:A5:F9:42
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/9-AbMC71TaIqEpvuSdXmW46l-UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.203.0/24
89.249.206.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:af:9c:db:a6:58:ee:f4:77:56:a0:74:a1:05:21:a7:b2:a9:
e8:1c:33:a2:00:02:1b:ea:37:36:36:c1:78:c3:39:32:1b:06:
81:60:56:07:1c:cc:dc:ce:4e:d5:01:79:7a:8e:00:15:04:96:
9b:f8:ac:c1:32:86:16:b2:bd:2a:b7:88:e6:c4:08:7d:db:aa:
df:0c:c4:65:68:37:f4:c5:c1:eb:83:70:8b:7f:cb:ec:d9:df:
b1:09:09:7c:ea:4d:9d:8a:c3:fb:4d:10:c7:a9:98:15:ce:77:
d5:a2:71:38:d3:c4:05:82:95:fc:a0:f4:a1:08:5f:de:1a:71:
b6:4a:fa:0f:ce:e4:14:11:66:13:b5:4d:5d:68:83:86:3c:d5:
64:5a:14:e5:24:7e:2c:ed:87:13:65:1d:64:41:e4:b7:45:29:
1b:53:3f:1e:d1:9b:56:e8:b6:5e:96:c9:9a:0d:0e:9a:a7:9c:
20:71:2d:f1:8a:2f:e2:59:7e:a2:3a:b6:61:a2:b0:a9:f0:95:
c1:8b:e3:9b:4b:81:78:06:1e:a3:05:db:fc:dc:99:74:2a:cc:
4d:bc:11:08:11:39:60:d8:bc:ab:13:ae:b3:2b:8e:49:9f:ae:
be:c7:78:d7:b7:0d:8e:e6:7c:29:3c:4d:b6:71:70:24:fe:ab:
a9:fd:d3:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwUApGMVEtn3MeOLHWTMc2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjMxMTI4MDMzOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2UwMWIzMDJlZjU0ZGEyMmExMjliZWU0OWQ1ZTY1YjhlYTVmOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEcGo4KOSpNuzKSn3KPq6hPjfGTe
RfLKAsgtc/x9NczpwOoKnaHgEpP+fwHsuPYsxvIIfrKKrj+JMxyekXQtqsltlZgE
P154StzNw0jIIA2t4n9FtMvBdJRqzxILP4hNupQyHQgsq9GkrzS/Ct4aimMxK0OS
z2MoNwNot96E9cCu/sUPRkS6RCbYYxatSHN19MLMZcYdE+NBD0iwtc33m8vn/SoU
8DMeqHdxJeNBoBSkm/xZcFkx/jRe2wvUEJW+tU43ov0OBo0L3tVvgKY/XR9Emkxx
8z5iFM3epW1hoOJKySKAUoxh2rKIcJJRExwSHmbDHBPR7MDRjij05fhB2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPfgGzAu9U2iKhKb7knV5luOpflCMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvOS1BYk1DNzFUYUlxRXB2dVNkWG1XNDZsLVVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfnLAwQB
WfnOMA0GCSqGSIb3DQEBCwUAA4IBAQDIr5zbplju9HdWoHShBSGnsqnoHDOiAAIb
6jc2NsF4wzkyGwaBYFYHHMzczk7VAXl6jgAVBJab+KzBMoYWsr0qt4jmxAh926rf
DMRlaDf0xcHrg3CLf8vs2d+xCQl86k2disP7TRDHqZgVznfVonE408QFgpX8oPSh
CF/eGnG2SvoPzuQUEWYTtU1daIOGPNVkWhTlJH4s7YcTZR1kQeS3RSkbUz8e0ZtW
6LZelsmaDQ6ap5wgcS3xii/iWX6iOrZhorCp8JXBi+ObS4F4Bh6jBdv83Jl0KsxN
vBEIETlg2LyrE66zK45Jn66+x3jXtw2O5nwpPE22cXAk/qup/dOu
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:53 2025 by rpki-client