Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/koLNQCwoWwwVvbDlT7KXk8TGqNI.roa
File: koLNQCwoWwwVvbDlT7KXk8TGqNI.roa (raw, json)
Hash identifier: tqhyLPPHxykUolw4aKEOBnGegrtYbJHRQ0zHECexUi4=
Subject key identifier: 92:82:CD:40:2C:28:5B:0C:15:BD:B0:E5:4F:B2:97:93:C4:C6:A8:D2
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0190F6A6CBEF9A92265057ED0EBCD774B24D
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/koLNQCwoWwwVvbDlT7KXk8TGqNI.roa
Signing time: Sun 28 Jul 2024 00:04:04 +0000
ROA not before: Sun 28 Jul 2024 00:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.200.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f6:a6:cb:ef:9a:92:26:50:57:ed:0e:bc:d7:74:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jul 28 00:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9282cd402c285b0c15bdb0e54fb29793c4c6a8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:2e:29:16:5d:c0:3e:d2:89:7e:9d:af:0c:
30:3c:77:2c:cb:80:58:e8:31:14:56:0b:6f:e1:00:
da:e5:e1:ee:17:c6:14:9c:14:ef:6e:48:53:cb:32:
82:ff:44:f9:9b:b3:e2:79:13:66:41:85:91:32:86:
bc:87:87:60:67:f4:3b:39:5c:ff:f0:18:a6:02:a4:
1b:17:ae:0b:9c:5f:87:d6:59:01:1f:b2:f9:ab:bc:
5d:d0:de:09:b8:c5:ab:fd:1c:2d:49:90:4f:63:00:
0d:c9:29:89:46:fa:e7:b0:03:b6:1d:f4:cc:b2:b7:
f4:d5:96:db:62:6e:c0:51:96:40:37:27:fc:b9:11:
13:b1:76:d7:20:a0:02:34:73:d7:f3:27:13:38:df:
e1:7f:ef:60:1a:14:e0:45:d5:a2:43:af:0f:fe:a8:
65:ae:09:ea:50:6c:6f:1f:bc:64:9c:05:ef:43:83:
a2:87:e1:1d:38:e2:11:b6:a2:16:70:43:41:1d:79:
2d:d6:d0:03:21:86:95:7b:3c:6a:1b:df:13:90:32:
b3:07:99:74:15:db:c3:8d:dc:54:27:b3:47:a0:bf:
b5:8d:77:1f:7d:ba:cb:10:6c:c9:62:50:48:e0:d3:
5c:ad:97:d0:75:5e:80:0e:8c:ee:43:fc:01:e0:07:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:CD:40:2C:28:5B:0C:15:BD:B0:E5:4F:B2:97:93:C4:C6:A8:D2
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/koLNQCwoWwwVvbDlT7KXk8TGqNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
89.249.206.0/23
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
52:e5:c5:60:5b:0c:2f:6d:bb:56:cb:be:6f:16:e4:e5:a8:63:
56:6b:17:d3:a3:58:d5:e7:cf:4b:68:06:da:53:eb:94:22:05:
2a:0b:c2:97:15:98:15:66:b7:3b:c2:a2:f6:19:92:48:83:95:
66:ca:90:f9:f4:21:a4:c7:03:c2:de:df:5c:b6:11:91:d7:9d:
c6:b2:ed:7f:7d:54:02:41:f9:35:30:74:26:45:da:df:a9:94:
4d:ae:34:50:f9:cb:ae:72:a1:40:cc:b7:b4:b8:57:5b:40:35:
61:a1:3d:40:fc:5c:01:9d:36:f8:40:91:cb:76:2f:72:04:0f:
f9:25:3f:16:25:d0:9a:4c:63:1b:35:12:02:67:21:1e:80:49:
f5:17:6a:7b:c3:22:f3:74:53:93:fb:57:e0:a4:59:84:d7:5d:
c6:32:ca:e4:cb:bb:9f:f8:23:6c:bd:ff:a6:53:44:b6:af:03:
21:27:8e:c7:a0:9a:5f:44:74:83:90:c3:d3:95:d0:ca:ac:a8:
ef:ab:54:87:84:f4:d4:20:d3:17:d1:4d:1a:73:d4:fc:85:a3:
0b:39:93:3c:fb:fb:16:6e:8c:a6:db:cf:4a:d9:15:f9:5e:dd:
b0:18:9c:21:03:8c:b4:b6:d5:25:83:d2:7c:94:f2:58:b6:f7:
5b:47:1c:5d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZD2psvvmpImUFftDrzXdLJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQwNzI4MDAwNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjgyY2Q0MDJjMjg1YjBjMTViZGIwZTU0ZmIyOTc5M2M0YzZhOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI0uKRZdwD7SiX6drwwwPHcsy4BY
6DEUVgtv4QDa5eHuF8YUnBTvbkhTyzKC/0T5m7PieRNmQYWRMoa8h4dgZ/Q7OVz/
8BimAqQbF64LnF+H1lkBH7L5q7xd0N4JuMWr/RwtSZBPYwANySmJRvrnsAO2HfTM
srf01ZbbYm7AUZZANyf8uRETsXbXIKACNHPX8ycTON/hf+9gGhTgRdWiQ68P/qhl
rgnqUGxvH7xknAXvQ4Oih+EdOOIRtqIWcENBHXkt1tADIYaVezxqG98TkDKzB5l0
FdvDjdxUJ7NHoL+1jXcffbrLEGzJYlBI4NNcrZfQdV6ADozuQ/wB4Ad9MQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJKCzUAsKFsMFb2w5U+yl5PExqjSMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEva29MTlFDd29Xd3dWdmJEbFQ3S1hrOFRHcU5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWfnIAwQB
WfnOAwQE1CrAMA0GCSqGSIb3DQEBCwUAA4IBAQBS5cVgWwwvbbtWy75vFuTlqGNW
axfTo1jV589LaAbaU+uUIgUqC8KXFZgVZrc7wqL2GZJIg5VmypD59CGkxwPC3t9c
thGR153Gsu1/fVQCQfk1MHQmRdrfqZRNrjRQ+cuucqFAzLe0uFdbQDVhoT1A/FwB
nTb4QJHLdi9yBA/5JT8WJdCaTGMbNRICZyEegEn1F2p7wyLzdFOT+1fgpFmE113G
Msrky7uf+CNsvf+mU0S2rwMhJ47HoJpfRHSDkMPTldDKrKjvq1SHhPTUINMX0U0a
c9T8haMLOZM8+/sWboym289K2RX5Xt2wGJwhA4y0ttUlg9J8lPJYtvdbRxxd
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:19 2025 by rpki-client