Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/b6ySRp9H4KYfDbdcILgWzWkUzws.roa
File: b6ySRp9H4KYfDbdcILgWzWkUzws.roa (raw, json)
Hash identifier: IKj6Y4kCpngzZHQrbbPP2SaDU/m48bKmrwBcu+L+NgE=
Subject key identifier: 6F:AC:92:46:9F:47:E0:A6:1F:0D:B7:5C:20:B8:16:CD:69:14:CF:0B
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01940EFEACEA010DA96326A4186EEF6911CC
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/b6ySRp9H4KYfDbdcILgWzWkUzws.roa
Signing time: Sat 28 Dec 2024 20:39:18 +0000
ROA not before: Sat 28 Dec 2024 20:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 89.249.201.0/24 maxlen: 24
185.21.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0e:fe:ac:ea:01:0d:a9:63:26:a4:18:6e:ef:69:11:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 28 20:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fac92469f47e0a61f0db75c20b816cd6914cf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:36:2d:24:5c:51:d1:78:fd:63:98:e0:f2:
21:08:9b:31:4c:17:1b:8c:60:95:e5:d6:14:08:c6:
a6:fe:a5:0d:c8:e4:c1:78:8e:c0:0b:85:cc:e1:ec:
ec:f4:e4:b6:11:76:33:81:33:45:85:72:ea:91:d1:
10:66:c8:0d:c8:e0:21:8c:cd:90:6b:fa:cc:c9:df:
37:52:90:41:99:bd:8d:ff:35:7c:58:e5:a3:f8:d0:
6e:fd:3a:54:1e:a9:9a:89:21:95:92:53:04:8f:ca:
29:40:ee:c9:12:8b:cd:63:05:7f:b2:87:b2:0d:d1:
ca:3b:f8:88:b2:ab:bf:de:eb:2a:09:e4:00:9d:c4:
87:35:d7:de:5b:22:31:b1:8e:29:38:86:e7:71:7c:
71:e4:0f:4b:9a:7c:1f:64:f8:3f:c0:45:b8:db:a7:
0e:e1:cd:96:65:ed:5a:6e:98:97:bf:78:50:40:f8:
2d:93:5a:45:d0:4f:03:44:f4:1e:50:7a:88:fe:7a:
31:19:eb:08:eb:5f:89:a9:b9:44:5f:7a:58:7f:f0:
fd:dc:6f:bc:8f:d6:ef:65:27:ed:da:d4:23:a1:7b:
f6:67:44:44:f6:6d:b9:58:de:2d:e0:61:b1:77:a9:
ef:8d:f0:4f:72:22:e8:03:e2:c1:ee:4d:3a:f9:12:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:92:46:9F:47:E0:A6:1F:0D:B7:5C:20:B8:16:CD:69:14:CF:0B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/b6ySRp9H4KYfDbdcILgWzWkUzws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
185.21.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:14:52:66:08:e4:f8:db:2d:14:e0:b8:2b:da:9c:67:fd:ef:
a2:db:37:22:1b:19:e4:67:7b:b3:8d:0a:6a:76:73:c7:aa:27:
50:f5:10:9f:ba:1d:bf:67:5c:f4:9a:05:76:56:a6:89:8a:b1:
10:c7:4f:ab:04:ea:57:d4:89:ac:92:01:25:4c:ce:3b:aa:06:
07:cd:e9:7d:b4:f9:d8:28:9e:9f:e8:79:af:05:91:51:3f:ec:
3b:65:6f:4b:e4:ac:fc:d6:99:43:98:fc:7e:a3:f4:0f:f1:1c:
5f:0d:a6:85:b2:44:d2:b8:23:7f:93:64:2d:a2:15:d0:35:27:
db:ac:ca:88:3e:26:bb:44:06:1b:d9:d2:9b:0e:ae:b2:31:13:
15:21:de:21:97:4c:60:c2:c8:34:c2:7b:6e:72:a2:62:8e:d8:
3a:cf:cc:b7:69:6a:da:97:0a:ab:64:20:1c:2b:f5:41:2f:f4:
be:ce:fc:b6:50:bd:9a:1a:61:b2:61:07:41:fc:53:0f:ae:4d:
d6:1b:d8:0c:21:96:4f:8d:57:af:2e:9d:4e:07:dc:7a:76:8e:
6f:98:11:33:35:ff:31:c6:d6:e8:18:53:63:c1:73:05:8c:07:
5f:20:bc:16:7e:e8:55:d9:59:46:12:4b:07:dd:cb:77:9d:a2:
a0:27:10:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQO/qzqAQ2pYyakGG7vaRHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQxMjI4MjAzOTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmFjOTI0NjlmNDdlMGE2MWYwZGI3NWMyMGI4MTZjZDY5MTRjZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzU2LSRcUdF4/WOY4PIhCJsxTBcb
jGCV5dYUCMam/qUNyOTBeI7AC4XM4ezs9OS2EXYzgTNFhXLqkdEQZsgNyOAhjM2Q
a/rMyd83UpBBmb2N/zV8WOWj+NBu/TpUHqmaiSGVklMEj8opQO7JEovNYwV/soey
DdHKO/iIsqu/3usqCeQAncSHNdfeWyIxsY4pOIbncXxx5A9LmnwfZPg/wEW426cO
4c2WZe1abpiXv3hQQPgtk1pF0E8DRPQeUHqI/noxGesI61+JqblEX3pYf/D93G+8
j9bvZSft2tQjoXv2Z0RE9m25WN4t4GGxd6nvjfBPciLoA+LB7k06+RLoOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG+skkafR+CmHw23XCC4Fs1pFM8LMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvYjZ5U1JwOUg0S1lmRGJkY0lMZ1d6V2tVendzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfnJAwQA
uRX+MA0GCSqGSIb3DQEBCwUAA4IBAQALFFJmCOT42y0U4Lgr2pxn/e+i2zciGxnk
Z3uzjQpqdnPHqidQ9RCfuh2/Z1z0mgV2VqaJirEQx0+rBOpX1ImskgElTM47qgYH
zel9tPnYKJ6f6HmvBZFRP+w7ZW9L5Kz81plDmPx+o/QP8RxfDaaFskTSuCN/k2Qt
ohXQNSfbrMqIPia7RAYb2dKbDq6yMRMVId4hl0xgwsg0wntucqJijtg6z8y3aWra
lwqrZCAcK/VBL/S+zvy2UL2aGmGyYQdB/FMPrk3WG9gMIZZPjVevLp1OB9x6do5v
mBEzNf8xxtboGFNjwXMFjAdfILwWfuhV2VlGEksH3ct3naKgJxD3
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:33 2025 by rpki-client