Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxtXnWk-oYZ7Qby89ddSCgu91ts.roa
File: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (raw, json)
Hash identifier: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=
Subject key identifier: A7:1B:57:9D:69:3E:A1:86:7B:41:BC:BC:F5:D7:52:0A:0B:BD:D6:DB
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194478929E8E829D13B8C10A8DDA2869953
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxtXnWk-oYZ7Qby89ddSCgu91ts.roa
Signing time: Wed 08 Jan 2025 20:09:19 +0000
ROA not before: Wed 08 Jan 2025 20:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213323
IP address blocks: 89.42.132.0/24 maxlen: 24
89.42.135.0/24 maxlen: 24
93.174.166.0/24 maxlen: 24
185.248.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:89:29:e8:e8:29:d1:3b:8c:10:a8:dd:a2:86:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 8 20:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a71b579d693ea1867b41bcbcf5d7520a0bbdd6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:d5:9d:f8:01:48:24:57:af:5e:fa:ae:f9:
d6:b4:17:84:c8:55:22:75:e2:2e:6c:16:1b:fe:33:
05:9c:45:af:2a:b7:6e:7e:6e:ba:64:98:07:7e:81:
a4:38:6d:3e:ba:20:18:fe:80:db:65:a8:79:ed:ae:
e5:41:9f:2a:26:46:48:c9:be:4c:77:77:0b:f4:a6:
fe:12:3b:46:66:78:82:07:69:1e:fa:bc:a8:d2:c9:
1c:73:3a:ba:90:ea:ba:0e:f3:fc:f2:b4:3e:6b:0b:
bc:a9:1c:d8:e7:ec:ad:a7:42:f1:cd:49:74:ab:55:
22:62:3f:7c:c2:c1:74:33:42:d5:8b:7f:63:24:90:
44:b1:4e:b2:9c:bd:0c:95:78:0f:26:16:34:b6:16:
16:19:cf:98:d2:31:b2:c6:39:77:b1:c6:0c:54:fc:
0b:0e:77:92:00:39:cc:a6:df:33:46:bd:17:c5:f5:
6d:17:78:3b:c7:04:67:b3:f9:f9:22:f7:69:b1:41:
b1:c4:4f:d9:0d:2b:d5:f7:db:b7:2a:be:4a:19:ef:
c9:d8:5a:9a:99:37:42:35:cc:68:bf:86:7b:da:1f:
b8:3e:16:5c:0a:16:91:13:68:19:76:18:63:f5:30:
d5:15:d4:49:e0:cf:27:18:e7:bc:db:8e:0e:f4:45:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:57:9D:69:3E:A1:86:7B:41:BC:BC:F5:D7:52:0A:0B:BD:D6:DB
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxtXnWk-oYZ7Qby89ddSCgu91ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.132.0/24
89.42.135.0/24
93.174.166.0/24
185.248.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:91:fb:ab:29:e1:20:79:46:fa:42:6e:37:2b:88:4f:12:15:
72:ed:79:3d:98:20:46:0e:4f:48:74:f6:25:97:0a:15:3e:52:
cd:ef:a7:17:b0:00:fc:db:0b:d0:b9:e3:04:ea:92:39:af:ba:
b7:f0:33:d1:66:c1:11:4c:79:bd:da:4c:d7:1a:0b:70:4e:8b:
a8:21:63:69:b1:0c:d8:99:3c:f5:ec:54:ce:d5:de:01:26:a3:
d5:97:5f:7a:3c:09:e5:67:a8:9f:ea:2f:12:81:db:fd:b5:c9:
68:f7:da:ea:ac:4d:83:fd:4a:a2:3d:ba:01:ec:68:13:41:e1:
2e:71:4b:00:ff:13:78:6a:49:02:80:0d:e5:70:37:01:a8:48:
ca:9e:f3:77:c8:0e:43:43:ff:87:f3:83:6c:b7:ad:04:15:24:
ad:36:da:f3:30:a3:38:a0:b4:bf:b2:1d:57:59:08:45:6b:f3:
a9:b1:02:ba:ef:a1:3c:22:ec:13:35:e3:f4:a3:46:ac:27:14:
c6:2a:ce:0b:3b:3d:87:40:fa:a5:ea:35:77:f7:99:5e:64:56:
99:00:6d:cb:b6:91:21:6d:ac:e5:95:54:17:5e:fe:06:42:7a:
c1:b2:3a:42:50:82:c1:c0:f4:88:f1:15:a5:72:c5:5d:ee:2d:
fe:65:56:23
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZRHiSno6CnRO4wQqN2ihplTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMTA4MjAwOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzFiNTc5ZDY5M2VhMTg2N2I0MWJjYmNmNWQ3NTIwYTBiYmRkNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xvVnfgBSCRXr176rvnWtBeEyFUi
deIubBYb/jMFnEWvKrdufm66ZJgHfoGkOG0+uiAY/oDbZah57a7lQZ8qJkZIyb5M
d3cL9Kb+EjtGZniCB2ke+ryo0skcczq6kOq6DvP88rQ+awu8qRzY5+ytp0LxzUl0
q1UiYj98wsF0M0LVi39jJJBEsU6ynL0MlXgPJhY0thYWGc+Y0jGyxjl3scYMVPwL
DneSADnMpt8zRr0XxfVtF3g7xwRns/n5IvdpsUGxxE/ZDSvV99u3Kr5KGe/J2Fqa
mTdCNcxov4Z72h+4PhZcChaRE2gZdhhj9TDVFdRJ4M8nGOe8244O9EXHZwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKcbV51pPqGGe0G8vPXXUgoLvdbbMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvcHh0WG5Xay1vWVo3UWJ5ODlkZFNDZ3U5MXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSqEAwQA
WSqHAwQAXa6mAwQAufiKMA0GCSqGSIb3DQEBCwUAA4IBAQCjkfurKeEgeUb6Qm43
K4hPEhVy7Xk9mCBGDk9IdPYllwoVPlLN76cXsAD82wvQueME6pI5r7q38DPRZsER
THm92kzXGgtwTouoIWNpsQzYmTz17FTO1d4BJqPVl196PAnlZ6if6i8Sgdv9tclo
99rqrE2D/UqiPboB7GgTQeEucUsA/xN4akkCgA3lcDcBqEjKnvN3yA5DQ/+H84Ns
t60EFSStNtrzMKM4oLS/sh1XWQhFa/OpsQK676E8IuwTNeP0o0asJxTGKs4LOz2H
QPql6jV395leZFaZAG3LtpEhbazllVQXXv4GQnrBsjpCUILBwPSI8RWlcsVd7i3+
ZVYj
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:19:49 2025 by rpki-client