Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/yqZjmug9GsaZs2yzjsqhOhow0Gs.roa
File: yqZjmug9GsaZs2yzjsqhOhow0Gs.roa (raw, json)
Hash identifier: 8UDxSmCi2lRguk1NiONf8kminjfZnS5fdtY3cN8ONoI=
Subject key identifier: CA:A6:63:9A:E8:3D:1A:C6:99:B3:6C:B3:8E:CA:A1:3A:1A:30:D0:6B
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019428266E5711B138BB466558DE788943F9
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/yqZjmug9GsaZs2yzjsqhOhow0Gs.roa
Signing time: Thu 02 Jan 2025 17:53:14 +0000
ROA not before: Thu 02 Jan 2025 17:53:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.206.0/23 maxlen: 24
185.21.254.0/24 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:6e:57:11:b1:38:bb:46:65:58:de:78:89:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 17:53:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa6639ae83d1ac699b36cb38ecaa13a1a30d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:80:f1:a0:52:78:11:17:ed:10:c2:29:d2:65:
db:e2:a3:7c:3c:c3:5c:5e:32:20:84:44:c5:66:ff:
2d:c7:c8:95:cf:9c:22:60:b1:0b:30:9f:23:da:96:
35:9c:ac:12:ed:ed:e8:d3:61:87:08:1a:72:d4:d2:
cb:89:7a:d7:1a:ca:66:14:43:08:c8:58:5b:6e:6c:
a8:2f:63:c0:a9:8b:86:78:fa:f2:24:f1:df:e2:2d:
33:2f:24:fb:72:5a:96:c1:0f:bc:c8:57:ac:d1:8b:
dc:57:e1:ee:de:eb:81:5f:89:d8:6f:21:fc:68:c8:
2f:5f:b0:48:42:07:cb:99:13:2f:8d:a9:ac:23:19:
ad:1b:b5:e4:a1:98:34:45:19:2d:6e:44:f6:37:04:
cb:9b:1e:49:bc:b0:5a:ae:61:a1:57:15:d4:2c:c9:
24:9e:4b:16:c0:d7:06:c4:fd:81:f1:70:17:71:02:
00:e0:3d:44:a1:0c:b3:02:25:57:81:f1:b1:a3:41:
11:79:2f:c8:72:4a:35:bc:4a:5e:0f:86:14:9a:3b:
de:7b:c7:0a:92:f6:dd:87:73:d3:03:f8:b0:db:38:
43:15:c3:fa:3c:76:47:84:52:f8:36:4c:c9:d2:e0:
34:49:b8:ad:31:53:8c:a7:8f:06:25:e0:97:7f:18:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:63:9A:E8:3D:1A:C6:99:B3:6C:B3:8E:CA:A1:3A:1A:30:D0:6B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/yqZjmug9GsaZs2yzjsqhOhow0Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.206.0/23
185.21.254.0/24
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
45:ca:cd:0f:f7:f5:b8:24:11:68:af:89:25:d3:48:c9:17:06:
40:20:34:de:34:e4:b5:ba:2a:6e:ac:63:fa:1b:35:2e:90:fa:
e5:7d:d8:1c:fb:3c:46:5a:15:2c:92:8e:d5:22:4f:46:3c:8a:
2b:42:0b:de:2b:cc:c3:54:fc:c1:62:04:71:4c:8e:ed:40:86:
5b:c9:be:48:a1:2d:1e:58:cc:b2:90:5c:89:b0:10:33:51:a0:
4a:65:47:95:08:d7:1f:7e:c7:e6:60:fc:97:e5:2a:2a:ca:50:
38:19:1e:49:d9:38:62:1d:84:cc:33:9e:c5:57:43:b4:8f:7f:
0b:b0:ca:89:84:be:24:47:00:89:dc:5f:38:36:a4:d1:50:fa:
c4:b2:2d:60:30:cb:f1:d8:ca:fa:3f:35:91:09:f5:ec:b5:33:
49:15:c8:d6:5e:07:85:19:5a:16:af:1d:d1:69:c4:e2:41:a6:
10:4f:80:8e:10:00:4d:4b:ae:ab:00:bf:ab:51:63:26:b2:be:
89:83:e8:1c:39:2d:86:81:ae:93:cd:e4:95:40:4b:c4:68:b0:
22:e5:5b:f4:e0:a9:92:08:2d:bd:9a:ab:a7:6b:9d:51:9e:73:
5f:eb:d3:e0:76:f9:05:62:07:e8:c0:8e:9b:98:12:24:76:b8:
b4:89:ff:4b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQoJm5XEbE4u0ZlWN54iUP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjUwMTAyMTc1MzE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWE2NjM5YWU4M2QxYWM2OTliMzZjYjM4ZWNhYTEzYTFhMzBkMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIDxoFJ4ERftEMIp0mXb4qN8PMNc
XjIghETFZv8tx8iVz5wiYLELMJ8j2pY1nKwS7e3o02GHCBpy1NLLiXrXGspmFEMI
yFhbbmyoL2PAqYuGePryJPHf4i0zLyT7clqWwQ+8yFes0YvcV+Hu3uuBX4nYbyH8
aMgvX7BIQgfLmRMvjamsIxmtG7XkoZg0RRktbkT2NwTLmx5JvLBarmGhVxXULMkk
nksWwNcGxP2B8XAXcQIA4D1EoQyzAiVXgfGxo0EReS/Icko1vEpeD4YUmjvee8cK
kvbdh3PTA/iw2zhDFcP6PHZHhFL4NkzJ0uA0SbitMVOMp48GJeCXfxji+QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMqmY5roPRrGmbNss47KoToaMNBrMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEveXFaam11ZzlHc2FaczJ5empzcWhPaG93MEdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDWfnAAwQB
WfnOAwQAuRX+AwQE1CrAMA0GCSqGSIb3DQEBCwUAA4IBAQBFys0P9/W4JBFor4kl
00jJFwZAIDTeNOS1uipurGP6GzUukPrlfdgc+zxGWhUsko7VIk9GPIorQgveK8zD
VPzBYgRxTI7tQIZbyb5IoS0eWMyykFyJsBAzUaBKZUeVCNcffsfmYPyX5SoqylA4
GR5J2ThiHYTMM57FV0O0j38LsMqJhL4kRwCJ3F84NqTRUPrEsi1gMMvx2Mr6PzWR
CfXstTNJFcjWXgeFGVoWrx3RacTiQaYQT4COEABNS66rAL+rUWMmsr6Jg+gcOS2G
ga6TzeSVQEvEaLAi5Vv04KmSCC29mquna51RnnNf69PgdvkFYgfowI6bmBIkdri0
if9L
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:12 2025 by rpki-client