Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa
File: sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa (raw, json)
Hash identifier: kx5EWM4e9UqILncO7G7gUfdu6rl4RFiOFynpDnpX02c=
Subject key identifier: B0:8D:9D:18:E1:2B:F2:76:64:E8:3D:58:35:B1:1A:EF:09:5A:67:23
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019426D9E0972A7A690B754F27AD666EE7E1
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 89.186.51.0/24 maxlen: 24
89.186.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e0:97:2a:7a:69:0b:75:4f:27:ad:66:6e:e7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b08d9d18e12bf27664e83d5835b11aef095a6723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:05:6f:f6:8e:33:57:83:fc:8e:df:b3:59:
e7:52:07:ed:0b:2d:d0:b8:5f:50:a1:21:d4:a6:d4:
31:e5:7a:29:a4:fd:4d:dc:6c:1b:bd:2f:df:77:bc:
8a:cb:95:d6:86:e4:41:db:06:2b:fe:e1:c8:7c:cb:
0d:41:61:ae:56:5c:2a:bc:cc:20:92:f0:33:f8:d5:
18:0a:d1:b7:d8:38:f9:c5:9a:1b:db:ef:8a:5f:c6:
31:81:4f:02:3f:92:d4:52:16:a3:fd:b6:9a:96:a2:
d9:3d:78:aa:a9:2f:55:0a:a0:f5:b0:2a:d7:71:f4:
60:e8:b2:85:5f:07:f8:9f:a4:15:9f:7d:59:15:6a:
9a:f6:d0:50:36:4b:22:6a:6c:29:c2:f8:94:f4:8f:
a8:86:13:a6:c4:16:46:6a:9b:c2:98:55:91:d3:4a:
ab:35:ad:da:7c:77:62:3d:6d:06:4b:eb:52:c4:e3:
30:25:20:51:a8:ee:84:78:b5:92:52:90:50:7c:81:
6a:f2:25:fa:ab:e2:07:89:94:2a:e1:d9:16:bb:74:
11:ca:82:01:7e:2e:59:89:11:e0:21:b5:b2:f2:30:
70:5c:09:2b:a5:07:43:b0:62:0a:4f:df:82:bd:ab:
0e:4d:1e:5e:fa:a4:d8:c2:cd:36:e4:d7:44:e4:d7:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8D:9D:18:E1:2B:F2:76:64:E8:3D:58:35:B1:1A:EF:09:5A:67:23
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.51.0-89.186.52.255
Signature Algorithm: sha256WithRSAEncryption
36:dc:87:17:2a:27:ea:01:38:e8:fd:db:23:23:c6:53:d8:26:
4f:bf:64:ef:2a:2c:53:64:67:44:96:c5:5b:27:15:6d:41:cc:
be:e6:09:08:22:02:1f:d1:4e:75:ae:e7:a4:65:9f:cd:9d:91:
29:6a:59:1e:ed:66:fe:9c:65:42:05:3d:f6:fc:b1:40:fc:c4:
02:df:32:aa:f3:46:f1:de:fc:b3:73:6e:25:0b:f8:d5:d3:4a:
dd:2c:10:b9:0e:16:aa:d7:08:4a:17:7b:02:a8:8e:bf:af:55:
58:0e:32:41:76:22:bd:7e:65:52:a0:81:87:bd:a8:32:6f:48:
e6:90:ee:98:c1:89:ca:f4:db:fd:5a:a6:43:3b:4e:83:ba:1b:
a7:97:e9:71:74:af:00:8f:b3:a7:0b:95:83:53:c0:a1:2f:1a:
70:26:f2:34:77:9c:09:0d:13:9a:22:b6:9b:f3:c6:ce:49:65:
27:93:e7:e8:46:46:59:5c:d3:15:1a:df:2f:9e:82:a7:18:46:
18:30:59:4c:1b:9e:ab:14:ba:51:4f:f5:33:c5:06:67:aa:5d:
fc:a8:1f:fa:69:21:74:1c:05:65:3b:fe:4a:1a:e5:d5:4c:8e:
01:95:7f:f9:43:9d:0a:d0:27:7c:8f:a6:ef:dc:c1:f7:ae:c7:
e4:b5:c0:02
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQm2eCXKnppC3VPJ61mbufhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzAwNTYxOTY4OGVmYmFmZmQwNmUxMDhhNDNiZGYyMDY0
M2UwZDYwHhcNMjUwMTAyMTE1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDhkOWQxOGUxMmJmMjc2NjRlODNkNTgzNWIxMWFlZjA5NWE2NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDwFb/aOM1eD/I7fs1nnUgftCy3Q
uF9QoSHUptQx5XoppP1N3GwbvS/fd7yKy5XWhuRB2wYr/uHIfMsNQWGuVlwqvMwg
kvAz+NUYCtG32Dj5xZob2++KX8YxgU8CP5LUUhaj/baalqLZPXiqqS9VCqD1sCrX
cfRg6LKFXwf4n6QVn31ZFWqa9tBQNksiamwpwviU9I+ohhOmxBZGapvCmFWR00qr
Na3afHdiPW0GS+tSxOMwJSBRqO6EeLWSUpBQfIFq8iX6q+IHiZQq4dkWu3QRyoIB
fi5ZiRHgIbWy8jBwXAkrpQdDsGIKT9+CvasOTR5e+qTYws025NdE5Nc8BQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLCNnRjhK/J2ZOg9WDWxGu8JWmcjMB8GA1UdIwQY
MBaAFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYt
Y2Q0YmQ0NDI3NWM1LzEvc0kyZEdPRXI4blprNkQxWU5iRWE3d2xhWnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYtY2Q0YmQ0NDI3NWM1
LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZujMD
BABZujQwDQYJKoZIhvcNAQELBQADggEBADbchxcqJ+oBOOj92yMjxlPYJk+/ZO8q
LFNkZ0SWxVsnFW1BzL7mCQgiAh/RTnWu56Rln82dkSlqWR7tZv6cZUIFPfb8sUD8
xALfMqrzRvHe/LNzbiUL+NXTSt0sELkOFqrXCEoXewKojr+vVVgOMkF2Ir1+ZVKg
gYe9qDJvSOaQ7pjBicr02/1apkM7ToO6G6eX6XF0rwCPs6cLlYNTwKEvGnAm8jR3
nAkNE5oitpvzxs5JZSeT5+hGRllc0xUa3y+egqcYRhgwWUwbnqsUulFP9TPFBmeq
XfyoH/ppIXQcBWU7/koa5dVMjgGVf/lDnQrQJ3yPpu/cwfeux+S1wAI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:02 2025 by rpki-client