Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/7kAjdsFeoGIlffyRccGeBTEu_FE.roa
File: 7kAjdsFeoGIlffyRccGeBTEu_FE.roa (raw, json)
Hash identifier: V5X41O+8NhL09TYkx6MudBsqNZ4WocGTuULsSpgpD3E=
Subject key identifier: EE:40:23:76:C1:5E:A0:62:25:7D:FC:91:71:C1:9E:05:31:2E:FC:51
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 0194228DD0D4284CD9E272CB1EF1D3F67291
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/7kAjdsFeoGIlffyRccGeBTEu_FE.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 89.35.0.0/23 maxlen: 24
89.40.42.0/24 maxlen: 24
93.113.205.0/24 maxlen: 24
188.213.50.0/24 maxlen: 24
188.213.213.0/24 maxlen: 24
188.214.150.0/24 maxlen: 24
194.26.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d0:d4:28:4c:d9:e2:72:cb:1e:f1:d3:f6:72:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee402376c15ea062257dfc9171c19e05312efc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:03:a3:96:7c:19:a3:14:32:ce:fb:15:8a:
44:5f:4c:21:f0:07:34:50:80:2a:6f:88:36:8d:b5:
67:29:e1:c2:b5:41:51:22:b3:05:a2:39:af:c7:e5:
0a:df:6e:e2:3b:3d:5f:76:2a:0f:8f:96:06:fc:7d:
b9:bd:c7:60:6e:ec:78:cd:9f:98:a1:7b:4e:20:b0:
4a:45:46:84:58:68:c9:70:1f:e7:49:89:88:7f:ce:
50:3c:50:a1:78:e1:bd:04:11:3d:6b:37:c0:d6:fa:
a3:bf:5a:26:76:d9:95:11:12:66:52:f2:2a:84:19:
a1:4a:2d:13:e3:40:04:83:84:c2:53:a3:18:c0:92:
1f:f5:b1:89:9b:9f:d6:38:f9:a7:f9:78:9a:01:47:
5c:32:bc:58:4c:e6:a6:9f:41:73:7e:d1:81:66:0e:
d7:62:a9:8f:40:46:32:52:5d:79:94:3e:e2:20:32:
98:74:a7:4d:7a:a0:82:70:0a:ff:fc:00:9b:5a:6f:
32:4b:7d:91:6f:31:3f:f4:19:31:0d:1c:43:f3:d8:
53:af:84:a8:5d:f1:ea:69:58:98:14:4a:d4:a8:e3:
e5:5b:2c:53:68:19:a3:9a:14:6a:10:a1:13:14:ac:
07:39:ab:9a:68:a3:f2:81:5f:f3:f6:e6:10:1d:aa:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:23:76:C1:5E:A0:62:25:7D:FC:91:71:C1:9E:05:31:2E:FC:51
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/7kAjdsFeoGIlffyRccGeBTEu_FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.0.0/23
89.40.42.0/24
93.113.205.0/24
188.213.50.0/24
188.213.213.0/24
188.214.150.0/24
194.26.128.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f0:4e:a8:22:9f:a9:fd:b5:e3:64:60:c5:a5:12:54:b8:0e:
9b:3a:7f:bc:8f:96:d3:11:63:65:20:80:0c:19:17:0d:ce:0d:
bb:ce:38:83:15:58:ed:1a:10:51:e0:74:2f:a8:7c:26:1d:91:
b8:53:71:18:90:eb:4d:1b:54:c1:a0:56:33:bd:4c:71:a7:11:
83:74:f2:08:76:b5:17:07:c2:28:7f:17:30:a3:83:ad:37:7e:
a3:80:25:01:78:0b:80:12:98:e9:98:4b:59:f4:dd:0e:07:dd:
96:0f:33:98:1f:61:bc:80:3d:cd:07:d7:f4:25:24:8e:fe:28:
ba:76:1c:da:8c:f3:35:d0:5d:81:d4:30:b4:b8:0e:1c:b1:db:
a2:bd:3c:95:89:b3:75:2e:4c:9d:ba:4d:bb:5d:dd:d8:6e:1e:
dd:13:d4:96:33:51:28:e8:30:75:53:73:5f:88:c8:1b:f5:a8:
bc:9e:22:61:8b:7e:cd:cc:a5:91:e8:53:3b:1a:78:fe:60:52:
bc:e4:b0:0f:cd:ef:a1:01:34:11:30:57:de:3c:61:b9:6a:69:
ec:79:70:87:1f:e6:2f:65:61:a8:a6:7f:9c:f4:5d:a1:c5:92:
40:31:55:8b:08:02:cc:23:f2:8e:53:03:3b:d5:6e:2b:27:71:
5e:42:8f:45
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQijdDUKEzZ4nLLHvHT9nKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz
NjE3MzEwHhcNMjUwMTAxMTU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTQwMjM3NmMxNWVhMDYyMjU3ZGZjOTE3MWMxOWUwNTMxMmVmYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EYDo5Z8GaMUMs77FYpEX0wh8Ac0
UIAqb4g2jbVnKeHCtUFRIrMFojmvx+UK327iOz1fdioPj5YG/H25vcdgbux4zZ+Y
oXtOILBKRUaEWGjJcB/nSYmIf85QPFCheOG9BBE9azfA1vqjv1omdtmVERJmUvIq
hBmhSi0T40AEg4TCU6MYwJIf9bGJm5/WOPmn+XiaAUdcMrxYTOamn0FzftGBZg7X
YqmPQEYyUl15lD7iIDKYdKdNeqCCcAr//ACbWm8yS32RbzE/9BkxDRxD89hTr4So
XfHqaViYFErUqOPlWyxTaBmjmhRqEKETFKwHOauaaKPygV/z9uYQHaqUKwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFO5AI3bBXqBiJX38kXHBngUxLvxRMB8GA1UdIwQY
MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt
ODQyODU4MTIyYmJjLzEvN2tBamRzRmVvR0lsZmZ5UmNjR2VCVEV1X0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj
LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBWSMAAwQA
WSgqAwQAXXHNAwQAvNUyAwQAvNXVAwQAvNaWAwQAwhqAMA0GCSqGSIb3DQEBCwUA
A4IBAQCJ8E6oIp+p/bXjZGDFpRJUuA6bOn+8j5bTEWNlIIAMGRcNzg27zjiDFVjt
GhBR4HQvqHwmHZG4U3EYkOtNG1TBoFYzvUxxpxGDdPIIdrUXB8Iofxcwo4OtN36j
gCUBeAuAEpjpmEtZ9N0OB92WDzOYH2G8gD3NB9f0JSSO/ii6dhzajPM10F2B1DC0
uA4csduivTyVibN1Lkyduk27Xd3Ybh7dE9SWM1Eo6DB1U3NfiMgb9ai8niJhi37N
zKWR6FM7Gnj+YFK85LAPze+hATQRMFfePGG5amnseXCHH+YvZWGopn+c9F2hxZJA
MVWLCALMI/KOUwM71W4rJ3FeQo9F
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:05:37 2025 by rpki-client