Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa
File: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (raw, json)
Hash identifier: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=
Subject key identifier: 39:56:25:0A:34:3F:46:8F:16:32:99:F7:04:9A:88:F1:7D:1C:5F:1A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 019427485EEA5456C67C1DB4D79D458A9171
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41437
IP address blocks: 89.207.120.0/21 maxlen: 21
89.207.120.0/24 maxlen: 24
89.207.121.0/24 maxlen: 24
89.207.123.0/24 maxlen: 24
89.207.124.0/24 maxlen: 24
89.207.127.0/24 maxlen: 24
2001:a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5e:ea:54:56:c6:7c:1d:b4:d7:9d:45:8a:91:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3956250a343f468f163299f7049a88f17d1c5f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:6e:18:2c:4e:78:6f:ee:3a:6c:0a:e3:54:
02:71:f6:e5:b1:ca:0e:b5:ad:ae:3d:5c:07:14:e7:
16:d9:af:f8:3d:18:51:07:1c:85:78:ae:3d:65:95:
37:98:6b:d0:2c:1d:ce:1d:4c:03:d3:08:5e:77:74:
eb:02:f1:a3:46:99:ff:d9:07:5f:0b:03:6c:24:24:
ec:11:38:fa:82:05:ee:b5:7e:e5:e2:c7:27:b3:b4:
21:a6:b0:fa:6d:b4:18:ce:6d:cb:3d:a2:1c:0a:da:
e1:90:44:0a:4d:ad:9c:4d:6b:32:f7:d5:72:d6:fb:
b9:14:c2:c2:ac:00:92:06:82:a8:87:8e:53:9d:31:
43:05:14:d4:b8:f9:e1:e8:ca:0c:61:5d:29:6c:15:
b4:bd:85:c5:01:9a:ae:11:0b:b0:bd:51:f6:a8:f9:
9e:db:1d:51:6d:f9:a9:e4:97:75:0e:64:26:fd:11:
22:20:ed:b5:83:0e:e1:5a:15:de:2f:bd:dc:43:b3:
87:8f:76:9b:3e:48:0c:fc:43:c4:67:0b:e3:39:f1:
77:75:55:ba:f9:d5:5f:5b:a6:0f:ae:f6:64:e3:a6:
91:d1:76:98:0d:61:19:ed:c3:ec:8c:74:c6:c6:ec:
91:fa:c6:ae:60:79:11:72:8a:c8:2e:32:7f:5e:a9:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:25:0A:34:3F:46:8F:16:32:99:F7:04:9A:88:F1:7D:1C:5F:1A
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.120.0/21
IPv6:
2001:a00::/32
Signature Algorithm: sha256WithRSAEncryption
b3:db:ac:af:5a:b9:63:8d:db:fa:50:06:4a:3d:68:22:02:6f:
65:a5:8b:93:26:ea:e5:bf:03:11:7b:03:7d:dd:05:d1:ff:66:
3b:10:f5:4f:91:6e:90:70:85:77:39:76:38:0b:b3:ce:c8:b5:
c8:60:9a:8b:d7:8d:2b:af:c1:8f:a8:c5:c1:55:6e:bd:43:95:
31:3e:e5:11:8d:81:a6:94:3f:f4:a9:ec:80:8a:b3:95:d0:87:
51:2d:00:a2:5f:b5:e2:8f:c5:f3:31:09:fd:b5:f7:6f:7c:5f:
80:e2:cd:bf:a2:66:85:87:42:18:07:88:f1:b1:bc:74:b7:82:
a9:66:55:e8:1a:03:0f:cb:ae:bc:63:cf:90:4b:89:90:e4:4d:
96:52:dc:69:6e:07:42:b6:72:1c:41:87:e0:2e:a3:de:0d:cf:
e7:3d:8d:b6:a7:9c:82:b3:58:96:74:fe:0c:6a:a5:98:92:d9:
38:17:57:8a:b7:24:0c:b5:c3:65:93:88:e3:6c:6c:f5:41:fc:
12:2a:fb:ce:67:e1:6e:c9:20:a5:8b:20:af:bc:c8:76:77:f6:
52:5d:2f:44:05:7f:5c:94:61:40:f3:73:c7:41:43:07:12:7d:
2d:0b:5e:15:66:bc:24:dc:04:a7:e3:56:e3:47:f5:75:8d:cf:
29:f3:ef:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnSF7qVFbGfB20151FipFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGMxODk3NjI0ZjU3YmUzNGUwZjc2MGI5N2YxMTBhZDVi
NWRhM2EwHhcNMjUwMTAyMTM1MDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTU2MjUwYTM0M2Y0NjhmMTYzMjk5ZjcwNDlhODhmMTdkMWM1ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6duGCxOeG/uOmwK41QCcfblscoO
ta2uPVwHFOcW2a/4PRhRBxyFeK49ZZU3mGvQLB3OHUwD0whed3TrAvGjRpn/2Qdf
CwNsJCTsETj6ggXutX7l4scns7QhprD6bbQYzm3LPaIcCtrhkEQKTa2cTWsy99Vy
1vu5FMLCrACSBoKoh45TnTFDBRTUuPnh6MoMYV0pbBW0vYXFAZquEQuwvVH2qPme
2x1Rbfmp5Jd1DmQm/REiIO21gw7hWhXeL73cQ7OHj3abPkgM/EPEZwvjOfF3dVW6
+dVfW6YPrvZk46aR0XaYDWEZ7cPsjHTGxuyR+sauYHkRcorILjJ/Xql+QwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDlWJQo0P0aPFjKZ9wSaiPF9HF8aMB8GA1UdIwQY
MBaAFD6MGJdiT1e+NOD3YLl/EQrVtdo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjkt
ZjA3NmEwOGU2MDAzLzEvT1ZZbENqUV9SbzhXTXBuM0JKcUk4WDBjWHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjktZjA3NmEwOGU2MDAz
LzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDWc94MA0E
AgACMAcDBQAgAQoAMA0GCSqGSIb3DQEBCwUAA4IBAQCz26yvWrljjdv6UAZKPWgi
Am9lpYuTJurlvwMRewN93QXR/2Y7EPVPkW6QcIV3OXY4C7POyLXIYJqL140rr8GP
qMXBVW69Q5UxPuURjYGmlD/0qeyAirOV0IdRLQCiX7Xij8XzMQn9tfdvfF+A4s2/
omaFh0IYB4jxsbx0t4KpZlXoGgMPy668Y8+QS4mQ5E2WUtxpbgdCtnIcQYfgLqPe
Dc/nPY22p5yCs1iWdP4MaqWYktk4F1eKtyQMtcNlk4jjbGz1QfwSKvvOZ+FuySCl
iyCvvMh2d/ZSXS9EBX9clGFA83PHQUMHEn0tC14VZrwk3ASn41bjR/V1jc8p8+/N
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:44 2025 by rpki-client