Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_JexWnAUZO9hR2vdoVo-im3udAs.roa
File: _JexWnAUZO9hR2vdoVo-im3udAs.roa (raw, json)
Hash identifier: yZghoRej4EKezFwZjJ7ls/NuzBgKvTQzudZJKxuSPH0=
Subject key identifier: FC:97:B1:5A:70:14:64:EF:61:47:6B:DD:A1:5A:3E:8A:6D:EE:74:0B
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018D18F7879AA4101930080EEC36E3A7639F
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_JexWnAUZO9hR2vdoVo-im3udAs.roa
Signing time: Wed 17 Jan 2024 19:48:11 +0000
ROA not before: Wed 17 Jan 2024 19:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:f7:87:9a:a4:10:19:30:08:0e:ec:36:e3:a7:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 17 19:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc97b15a701464ef61476bdda15a3e8a6dee740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:3f:93:2f:fa:47:25:7a:37:ec:25:91:41:
1d:fc:a3:c5:1a:22:c4:fe:47:df:60:2c:31:79:a4:
cd:26:07:fd:68:fa:52:f2:5c:fd:4d:db:12:ab:0b:
94:21:53:cf:05:3f:df:3d:26:a8:d9:b8:84:49:be:
42:c9:48:c6:0b:62:21:66:88:8c:14:fc:5c:8c:74:
71:5f:a7:54:a8:c8:63:00:26:72:6c:95:47:9f:29:
68:bd:54:6e:d2:88:01:e6:51:b9:3d:26:69:4f:30:
25:c6:6d:5f:60:83:e3:ad:d3:64:c9:48:e1:91:e7:
bf:da:79:63:0a:be:b8:3e:2f:0c:5f:52:e7:64:23:
94:0c:5c:6d:bd:8b:a3:72:e2:47:5a:be:2a:c4:31:
c7:aa:64:72:24:f4:39:3c:cf:f8:2b:d5:65:c2:c8:
c4:a5:88:28:4d:10:64:2e:7c:02:bc:3a:95:1b:44:
5d:88:2a:44:70:6d:b9:3a:27:61:f0:70:59:70:91:
de:80:38:f3:22:9b:03:ad:05:f9:bd:27:5b:c8:cd:
10:92:12:c1:b9:b4:76:fa:6f:cf:30:44:3e:9c:97:
5c:e8:e8:a2:ea:d3:ba:1e:db:2b:b5:bc:31:ca:2c:
f2:b5:5c:65:d2:7e:3d:00:5f:8f:7b:6f:5c:2c:42:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:B1:5A:70:14:64:EF:61:47:6B:DD:A1:5A:3E:8A:6D:EE:74:0B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_JexWnAUZO9hR2vdoVo-im3udAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0-89.249.201.255
Signature Algorithm: sha256WithRSAEncryption
33:41:d6:1b:a6:31:b2:2d:2d:4a:0d:aa:69:47:54:8a:4e:59:
0d:ad:bd:a3:9e:86:7e:0c:94:6b:c5:db:d9:32:0a:3c:f7:85:
ba:48:99:c0:16:19:c6:f5:12:88:e6:a8:62:4c:dc:5e:a6:dd:
65:e0:60:e0:53:1f:dd:83:2b:b6:2a:c9:48:91:cd:ab:39:b5:
52:42:8d:82:e0:c4:3f:51:e5:a0:fc:b1:32:39:a5:1c:df:4e:
63:ff:22:0e:55:70:5f:85:0f:63:87:58:37:45:c5:57:55:65:
dd:a6:ba:2e:85:b7:14:c3:83:be:bf:ac:a0:85:a3:7d:cf:44:
4e:ef:8e:e5:2f:72:dc:c8:67:73:6e:b8:02:6a:ff:45:c4:6d:
98:71:fe:9d:4f:e5:cb:54:a3:5e:2f:21:7a:9c:fd:e8:69:79:
25:1c:de:74:0f:f7:9f:39:26:0d:eb:cc:41:b6:69:64:6e:5a:
2f:67:3e:bc:69:dd:f1:bb:60:1b:62:68:d6:6e:6b:bb:38:c1:
77:54:8a:c1:cc:68:4b:0f:9a:9b:4e:66:7d:e3:30:c2:50:29:
0e:51:26:93:74:0e:fc:96:28:30:f2:9e:44:7c:91:b4:cb:59:
84:32:db:f3:ef:0e:06:83:43:97:60:18:88:58:d2:50:47:10:
c7:77:75:41
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY0Y94eapBAZMAgO7Dbjp2OfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQwMTE3MTk0ODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzk3YjE1YTcwMTQ2NGVmNjE0NzZiZGRhMTVhM2U4YTZkZWU3NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRo/ky/6RyV6N+wlkUEd/KPFGiLE
/kffYCwxeaTNJgf9aPpS8lz9TdsSqwuUIVPPBT/fPSao2biESb5CyUjGC2IhZoiM
FPxcjHRxX6dUqMhjACZybJVHnylovVRu0ogB5lG5PSZpTzAlxm1fYIPjrdNkyUjh
kee/2nljCr64Pi8MX1LnZCOUDFxtvYujcuJHWr4qxDHHqmRyJPQ5PM/4K9VlwsjE
pYgoTRBkLnwCvDqVG0RdiCpEcG25Oidh8HBZcJHegDjzIpsDrQX5vSdbyM0QkhLB
ubR2+m/PMEQ+nJdc6Oii6tO6HtsrtbwxyizytVxl0n49AF+Pe29cLELfYwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPyXsVpwFGTvYUdr3aFaPopt7nQLMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvX0pleFduQVVaTzloUjJ2ZG9Wby1pbTN1ZEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAZZ+cAD
BAFZ+cgwDQYJKoZIhvcNAQELBQADggEBADNB1humMbItLUoNqmlHVIpOWQ2tvaOe
hn4MlGvF29kyCjz3hbpImcAWGcb1EojmqGJM3F6m3WXgYOBTH92DK7YqyUiRzas5
tVJCjYLgxD9R5aD8sTI5pRzfTmP/Ig5VcF+FD2OHWDdFxVdVZd2mui6FtxTDg76/
rKCFo33PRE7vjuUvctzIZ3NuuAJq/0XEbZhx/p1P5ctUo14vIXqc/ehpeSUc3nQP
9585Jg3rzEG2aWRuWi9nPrxp3fG7YBtiaNZua7s4wXdUisHMaEsPmptOZn3jMMJQ
KQ5RJpN0DvyWKDDynkR8kbTLWYQy2/PvDgaDQ5dgGIhY0lBHEMd3dUE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:00 2025 by rpki-client