Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C7YuK1KRdGRUuAbjio19k2L6X5k.roa
File: C7YuK1KRdGRUuAbjio19k2L6X5k.roa (raw, json)
Hash identifier: X84lzkY1KDZOPK9NuaLVhaS6U7XaNgUEYaATwpIrjIo=
Subject key identifier: 0B:B6:2E:2B:52:91:74:64:54:B8:06:E3:8A:8D:7D:93:62:FA:5F:99
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019534903DBC55E25DC0F12042B8E6390E21
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C7YuK1KRdGRUuAbjio19k2L6X5k.roa
Signing time: Sun 23 Feb 2025 20:47:03 +0000
ROA not before: Sun 23 Feb 2025 20:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214762
IP address blocks: 89.144.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:34:90:3d:bc:55:e2:5d:c0:f1:20:42:b8:e6:39:0e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 23 20:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bb62e2b5291746454b806e38a8d7d9362fa5f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:f2:b8:00:7b:c5:2d:fb:dd:55:8d:ea:5b:
68:32:c6:59:c7:b9:21:5f:1c:9e:c3:02:ef:f3:78:
46:55:14:0d:4f:6d:29:34:9b:2c:00:17:29:1c:54:
cf:31:86:b3:68:a0:68:e4:c2:1a:10:bc:75:78:56:
e9:92:3a:4b:36:d7:d9:a2:c5:73:ad:57:e8:c0:68:
dd:57:c4:e5:f6:32:b2:f1:59:2d:bf:41:d5:a2:40:
ad:48:b0:06:c2:20:d3:d6:e9:79:b5:c1:4f:98:7f:
37:6c:a2:58:75:cf:df:9c:f8:9b:5e:f3:79:f8:91:
c0:80:d3:86:54:30:f7:52:9b:2c:9f:2c:54:91:16:
1e:42:c6:78:54:3b:75:37:e0:c0:e6:31:14:be:53:
e8:7d:52:7f:81:81:ad:e4:d5:77:da:1d:1e:02:50:
78:c3:c7:46:41:7d:23:02:3d:c5:69:5e:07:ee:6f:
b9:e1:7a:93:5d:84:3d:29:8a:4d:d0:bf:82:88:16:
c6:d7:f0:2a:8b:b5:bb:df:26:82:35:c0:bf:7d:ac:
68:3b:9e:80:32:75:40:2f:9a:dd:0d:11:07:2f:12:
ca:16:3f:6a:e6:c6:39:a2:ed:f2:fa:b8:8d:e0:80:
c4:9d:96:82:95:86:36:ca:b1:5c:93:98:d1:84:3a:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:2E:2B:52:91:74:64:54:B8:06:E3:8A:8D:7D:93:62:FA:5F:99
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C7YuK1KRdGRUuAbjio19k2L6X5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:7e:95:75:20:5b:07:dc:53:77:1b:9d:98:56:42:51:6f:3a:
99:ce:29:f3:7c:5c:e8:9a:ce:b2:95:3e:45:48:dd:84:ed:05:
f1:bc:e5:d0:05:09:ba:8e:b0:5e:87:a3:8f:8c:e4:ea:31:8c:
45:ae:b8:04:6c:ff:71:e8:93:4b:ed:c1:bf:36:f3:c6:1c:ff:
d4:7a:77:e1:84:6a:18:e7:77:15:a7:ca:92:7d:9a:2a:e0:ca:
95:ff:1b:f7:0a:08:82:b4:f2:1b:c3:0b:be:91:81:9e:79:d0:
b9:83:25:96:8f:d6:53:98:b8:17:37:6a:1e:01:37:cd:3b:8f:
ef:ac:23:d9:62:51:91:e0:dc:55:ff:23:3e:16:1c:4a:e4:d6:
ce:c8:cb:ae:74:59:e0:af:e0:61:1a:db:51:f4:73:44:16:1f:
98:0f:4a:80:e4:86:36:c7:d3:12:6f:9e:51:19:77:da:32:f8:
bc:77:51:a3:60:61:d5:53:78:64:2b:9b:93:12:0b:2e:ab:e5:
de:95:b9:4f:91:48:e9:10:07:0b:39:41:f6:f7:73:17:13:a2:
5f:c4:0a:9b:5f:04:1f:a1:41:5f:3e:2f:64:ce:3b:a0:1a:49:
d0:fc:14:ae:f0:ee:66:e9:5c:fb:96:b6:72:67:be:38:02:80:
5a:78:63:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU0kD28VeJdwPEgQrjmOQ4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjIzMjA0NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmI2MmUyYjUyOTE3NDY0NTRiODA2ZTM4YThkN2Q5MzYyZmE1Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOTyuAB7xS373VWN6ltoMsZZx7kh
XxyewwLv83hGVRQNT20pNJssABcpHFTPMYazaKBo5MIaELx1eFbpkjpLNtfZosVz
rVfowGjdV8Tl9jKy8Vktv0HVokCtSLAGwiDT1ul5tcFPmH83bKJYdc/fnPibXvN5
+JHAgNOGVDD3UpssnyxUkRYeQsZ4VDt1N+DA5jEUvlPofVJ/gYGt5NV32h0eAlB4
w8dGQX0jAj3FaV4H7m+54XqTXYQ9KYpN0L+CiBbG1/Aqi7W73yaCNcC/faxoO56A
MnVAL5rdDREHLxLKFj9q5sY5ou3y+riN4IDEnZaClYY2yrFck5jRhDob2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAu2LitSkXRkVLgG44qNfZNi+l+ZMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQzdZdUsxS1JkR1JVdUFiamlvMTlrMkw2WDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZAgMA0G
CSqGSIb3DQEBCwUAA4IBAQC4fpV1IFsH3FN3G52YVkJRbzqZzinzfFzoms6ylT5F
SN2E7QXxvOXQBQm6jrBeh6OPjOTqMYxFrrgEbP9x6JNL7cG/NvPGHP/UenfhhGoY
53cVp8qSfZoq4MqV/xv3CgiCtPIbwwu+kYGeedC5gyWWj9ZTmLgXN2oeATfNO4/v
rCPZYlGR4NxV/yM+FhxK5NbOyMuudFngr+BhGttR9HNEFh+YD0qA5IY2x9MSb55R
GXfaMvi8d1GjYGHVU3hkK5uTEgsuq+XelblPkUjpEAcLOUH293MXE6JfxAqbXwQf
oUFfPi9kzjugGknQ/BSu8O5m6Vz7lrZyZ744AoBaeGMH
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:58 2025 by rpki-client