Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/baCcJEdO-00hsZE2Up4v8d77BFA.roa
File: baCcJEdO-00hsZE2Up4v8d77BFA.roa (raw, json)
Hash identifier: F5BBni6QlM7bTd3oNyjhQ6tTj4yBbJm/AQaQzngZPuo=
Subject key identifier: 6D:A0:9C:24:47:4E:FB:4D:21:B1:91:36:52:9E:2F:F1:DE:FB:04:50
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018D0020B7F45EF8FD42E29C44FEFCF083CF
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/baCcJEdO-00hsZE2Up4v8d77BFA.roa
Signing time: Sat 13 Jan 2024 00:02:40 +0000
ROA not before: Sat 13 Jan 2024 00:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
185.21.253.0/24 maxlen: 24
89.249.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:00:20:b7:f4:5e:f8:fd:42:e2:9c:44:fe:fc:f0:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 13 00:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6da09c24474efb4d21b19136529e2ff1defb0450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0c:6b:7f:57:8b:e8:33:6d:72:2b:99:b0:ac:
ff:53:67:31:11:23:4a:19:36:25:3d:95:d9:94:66:
0c:47:26:80:65:ca:c4:63:79:4f:47:60:a9:1e:87:
86:bd:53:e1:82:06:57:ce:26:19:d1:2d:ae:16:c2:
fd:32:a3:9e:fc:ce:ab:14:fb:b2:db:e0:fe:a0:f7:
77:3e:ab:75:77:3a:95:d2:4d:3e:0e:f9:93:1a:71:
5f:bc:e9:00:85:c6:42:73:46:29:9a:97:a9:d6:eb:
9f:dc:e3:40:8a:48:33:fc:b7:06:21:5e:68:e6:a6:
a2:4b:90:44:e8:af:6b:02:64:1e:f6:36:70:94:1c:
f9:5e:11:be:56:c1:16:92:8c:b8:53:60:19:98:18:
0c:cd:30:dc:d8:72:f8:2b:b0:21:ef:92:59:c1:19:
44:ef:16:af:42:cb:6e:bc:7e:43:1b:a0:e6:e0:d7:
3c:34:b3:bd:53:0a:16:2b:18:e6:3b:8f:96:9a:63:
65:43:8a:f4:14:d0:e4:99:59:5c:df:76:ec:d5:c5:
5a:26:03:d0:5d:f6:68:d8:92:5c:b6:5b:9b:83:ac:
74:eb:6a:d6:c2:21:5e:99:94:94:e3:95:70:dc:ce:
67:f5:79:1f:80:9b:91:ab:9d:65:9b:31:54:59:17:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A0:9C:24:47:4E:FB:4D:21:B1:91:36:52:9E:2F:F1:DE:FB:04:50
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/baCcJEdO-00hsZE2Up4v8d77BFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0-89.249.201.255
185.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:de:21:3c:53:b8:06:48:f2:44:24:9c:0e:7c:dd:ff:64:e7:
23:7e:11:d3:33:83:29:d8:f9:1a:6c:62:44:44:c0:a3:08:c7:
18:a6:8c:e4:55:47:2f:55:00:66:f0:37:e5:93:84:38:03:97:
3d:48:2d:bd:1d:a2:6d:13:36:7e:1a:a5:88:13:3c:3e:3c:37:
af:84:60:2e:01:6d:3a:69:10:0e:ce:23:a1:14:08:eb:9c:ce:
15:81:2b:28:d0:c0:24:e3:8c:90:3a:76:82:de:9a:3f:ea:e9:
4b:d7:d1:a1:81:1d:50:41:b9:0f:f5:0d:b5:f2:a9:44:7a:fd:
42:3a:c6:fa:b5:36:1c:97:96:27:6e:00:69:eb:74:fd:6a:cd:
43:ac:91:da:26:63:97:9d:d9:4c:c9:5d:af:c2:e2:0c:32:af:
8e:15:57:03:d2:d5:99:5f:45:0c:b2:7a:b8:9a:7e:6b:45:e8:
11:ba:7d:3c:9c:2b:c4:74:73:83:de:32:c5:0e:d2:a4:60:56:
86:24:5a:1d:6e:44:f5:88:91:57:11:e2:dc:36:e3:c3:d9:f8:
f5:26:26:71:9e:12:ce:b3:58:bb:40:05:40:a2:74:1d:29:d1:
fe:11:ca:5f:71:2f:df:a6:0f:ee:f0:23:5e:fd:3e:21:1f:cf:
04:67:5b:6e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY0AILf0Xvj9QuKcRP788IPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQwMTEzMDAwMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGEwOWMyNDQ3NGVmYjRkMjFiMTkxMzY1MjllMmZmMWRlZmIwNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Qxrf1eL6DNtciuZsKz/U2cxESNK
GTYlPZXZlGYMRyaAZcrEY3lPR2CpHoeGvVPhggZXziYZ0S2uFsL9MqOe/M6rFPuy
2+D+oPd3Pqt1dzqV0k0+DvmTGnFfvOkAhcZCc0Ypmpep1uuf3ONAikgz/LcGIV5o
5qaiS5BE6K9rAmQe9jZwlBz5XhG+VsEWkoy4U2AZmBgMzTDc2HL4K7Ah75JZwRlE
7xavQstuvH5DG6Dm4Nc8NLO9UwoWKxjmO4+WmmNlQ4r0FNDkmVlc33bs1cVaJgPQ
XfZo2JJctlubg6x062rWwiFemZSU45Vw3M5n9XkfgJuRq51lmzFUWRc/CwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFG2gnCRHTvtNIbGRNlKeL/He+wRQMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvYmFDY0pFZE8tMDBoc1pFMlVwNHY4ZDc3QkZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAZZ+cAD
BAFZ+cgDBAC5Ff0wDQYJKoZIhvcNAQELBQADggEBAOLeITxTuAZI8kQknA583f9k
5yN+EdMzgynY+RpsYkREwKMIxximjORVRy9VAGbwN+WThDgDlz1ILb0dom0TNn4a
pYgTPD48N6+EYC4BbTppEA7OI6EUCOuczhWBKyjQwCTjjJA6doLemj/q6UvX0aGB
HVBBuQ/1DbXyqUR6/UI6xvq1NhyXliduAGnrdP1qzUOskdomY5ed2UzJXa/C4gwy
r44VVwPS1ZlfRQyyeriafmtF6BG6fTycK8R0c4PeMsUO0qRgVoYkWh1uRPWIkVcR
4tw248PZ+PUmJnGeEs6zWLtABUCidB0p0f4Ryl9xL9+mD+7wI179PiEfzwRnW24=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:03 2025 by rpki-client