Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jUBST1H4K22APJUba2wIX4MM69w.roa
File: jUBST1H4K22APJUba2wIX4MM69w.roa (raw, json)
Hash identifier: DS+kQOj33xqlzQzHk/h+iaTYz3PuXw2495oitLs369k=
Subject key identifier: 8D:40:52:4F:51:F8:2B:6D:80:3C:95:1B:6B:6C:08:5F:83:0C:EB:DC
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01911E9A27D393CAD9049C11B7D805746825
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jUBST1H4K22APJUba2wIX4MM69w.roa
Signing time: Sun 04 Aug 2024 18:15:04 +0000
ROA not before: Sun 04 Aug 2024 18:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1e:9a:27:d3:93:ca:d9:04:9c:11:b7:d8:05:74:68:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Aug 4 18:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d40524f51f82b6d803c951b6b6c085f830cebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:dc:a2:26:c2:1e:97:5c:22:ce:b0:7c:e5:
b2:22:15:d1:89:9c:37:f6:ea:d2:49:ac:a9:47:5b:
fd:28:be:74:0b:0b:19:b6:ea:57:d1:81:74:d0:a2:
34:a7:4b:13:3a:cd:ba:35:42:17:8a:89:7b:32:0d:
8e:b8:ec:86:c4:76:3c:3d:96:9e:fd:73:b2:ea:ea:
ba:62:b3:4d:98:8a:bd:80:86:58:74:e3:a1:2d:73:
c0:b7:59:94:ef:3a:75:de:6a:fd:6e:79:af:07:3f:
c0:a2:a9:eb:28:20:02:8c:bb:2e:c9:34:94:6a:b4:
9c:dd:29:ab:d3:0a:79:ea:a3:3b:9c:4e:79:f1:8a:
f2:05:60:20:4f:eb:bc:98:e7:9c:3f:48:4f:e3:26:
bc:7a:42:9f:48:d5:d7:8e:1e:47:da:45:58:24:16:
42:98:7c:80:c6:e9:87:8d:09:09:7e:98:30:b0:1d:
ae:92:82:8c:cf:66:4a:11:c8:20:cd:fd:06:56:23:
7f:db:9f:49:49:48:08:3a:5c:10:a3:14:26:61:34:
da:ac:8c:17:5a:68:7c:34:a5:47:94:60:13:ac:fb:
61:37:f9:96:5d:b9:3c:2c:35:a6:d7:2e:63:4b:61:
50:89:b2:3d:b2:0b:c4:67:37:42:93:05:4f:74:a0:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:52:4F:51:F8:2B:6D:80:3C:95:1B:6B:6C:08:5F:83:0C:EB:DC
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jUBST1H4K22APJUba2wIX4MM69w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.206.0/23
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
44:c2:e7:46:8f:26:2b:59:74:2c:19:91:d9:33:b0:4c:d9:39:
71:d4:2e:de:3c:4d:89:44:37:9e:d5:57:ec:0e:25:dc:91:ff:
b8:d5:83:d8:17:2d:44:4f:30:a3:2c:6f:0b:eb:82:c3:04:6c:
bb:17:b2:df:6a:38:a8:b7:df:4f:f0:1c:d1:75:82:55:98:3e:
87:cd:62:aa:26:65:34:79:2c:ab:46:92:01:b7:84:18:8e:cc:
0a:0d:6e:2a:f8:6d:0c:44:d5:a9:f5:ef:9f:8e:a1:d7:e7:d8:
c6:eb:64:d2:e6:97:87:51:f5:47:57:65:cf:eb:f9:68:b6:8c:
5e:93:6a:48:2e:80:43:3b:25:1e:67:ac:cb:57:cf:09:5a:38:
36:99:f2:a5:09:cc:06:95:44:de:fb:58:48:30:88:cf:2a:77:
c2:72:8e:c7:11:65:07:97:e8:3d:4c:0a:58:8b:dd:67:89:13:
8c:fe:00:bd:2c:2b:a6:1b:53:61:8e:ff:b4:4d:bb:28:20:87:
d8:f0:b9:20:6b:94:ab:d1:83:4f:88:da:58:3f:99:f9:bb:d0:
25:5b:fe:c0:cf:be:19:d6:08:d1:f1:e8:ad:65:4d:69:95:a5:
4f:2b:01:0e:60:60:f0:21:69:b6:78:84:68:e4:40:74:63:19:
d9:86:c2:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEemifTk8rZBJwRt9gFdGglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQwODA0MTgxNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDQwNTI0ZjUxZjgyYjZkODAzYzk1MWI2YjZjMDg1ZjgzMGNlYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLzcoibCHpdcIs6wfOWyIhXRiZw3
9urSSaypR1v9KL50CwsZtupX0YF00KI0p0sTOs26NUIXiol7Mg2OuOyGxHY8PZae
/XOy6uq6YrNNmIq9gIZYdOOhLXPAt1mU7zp13mr9bnmvBz/AoqnrKCACjLsuyTSU
arSc3Smr0wp56qM7nE558YryBWAgT+u8mOecP0hP4ya8ekKfSNXXjh5H2kVYJBZC
mHyAxumHjQkJfpgwsB2ukoKMz2ZKEcggzf0GViN/259JSUgIOlwQoxQmYTTarIwX
Wmh8NKVHlGATrPthN/mWXbk8LDWm1y5jS2FQibI9sgvEZzdCkwVPdKD8JQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI1AUk9R+CttgDyVG2tsCF+DDOvcMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvalVCU1QxSDRLMjJBUEpVYmEyd0lYNE1NNjl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWfnOAwQE
1CrAMA0GCSqGSIb3DQEBCwUAA4IBAQBEwudGjyYrWXQsGZHZM7BM2Tlx1C7ePE2J
RDee1VfsDiXckf+41YPYFy1ETzCjLG8L64LDBGy7F7Lfajiot99P8BzRdYJVmD6H
zWKqJmU0eSyrRpIBt4QYjswKDW4q+G0MRNWp9e+fjqHX59jG62TS5peHUfVHV2XP
6/lotoxek2pILoBDOyUeZ6zLV88JWjg2mfKlCcwGlUTe+1hIMIjPKnfCco7HEWUH
l+g9TApYi91niROM/gC9LCumG1Nhjv+0TbsoIIfY8Lkga5Sr0YNPiNpYP5n5u9Al
W/7Az74Z1gjR8eitZU1plaVPKwEOYGDwIWm2eIRo5EB0YxnZhsKG
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:38 2025 by rpki-client