Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sLi_BFJy-4vR8Yx2XlFcVRSWX-U.roa
File: sLi_BFJy-4vR8Yx2XlFcVRSWX-U.roa (raw, json)
Hash identifier: HAptujYyomSp8hCl3UgHakWWqeXqCtfmoxrc4xVr1XQ=
Subject key identifier: B0:B8:BF:04:52:72:FB:8B:D1:F1:8C:76:5E:51:5C:55:14:96:5F:E5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194EFA16A25D55C08F2F136495802344E49
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sLi_BFJy-4vR8Yx2XlFcVRSWX-U.roa
Signing time: Mon 10 Feb 2025 11:32:00 +0000
ROA not before: Mon 10 Feb 2025 11:32:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213449
IP address blocks: 89.144.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:a1:6a:25:d5:5c:08:f2:f1:36:49:58:02:34:4e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 10 11:32:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0b8bf045272fb8bd1f18c765e515c5514965fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:7c:0d:76:a4:cd:e8:65:93:9d:60:63:2c:
78:1a:2b:59:31:1e:aa:1b:b4:81:b9:d2:e1:27:94:
37:93:69:b1:1c:a2:69:06:71:06:6b:68:7e:46:8a:
dd:3a:33:55:13:55:6a:ac:d5:c9:a3:8c:ca:e8:21:
01:a9:be:7c:2b:2a:53:5b:98:d3:21:3b:cf:b6:c8:
23:52:8d:74:e8:21:b6:cb:ae:13:82:2a:17:ae:29:
99:6e:33:02:33:e5:f5:8f:76:bf:85:6f:39:82:81:
29:96:46:32:ab:52:42:15:14:99:70:ba:8b:c5:d9:
9a:e4:1c:2c:bd:51:2f:fc:c2:6f:97:f4:3a:20:b8:
7f:a8:7b:6a:0d:e5:e9:cb:da:7d:d4:4e:3d:9b:ec:
e3:29:2e:f9:2a:95:a7:8a:74:8f:2e:b8:7a:60:c9:
2a:ee:94:b6:ef:cb:3c:93:17:ac:16:79:04:11:db:
ed:09:14:5f:21:42:3a:65:9e:f6:0d:0f:af:f1:3b:
e3:fb:c3:19:54:cf:39:67:17:61:05:12:34:be:c7:
22:a0:09:98:1d:b6:c2:99:b1:5d:95:f9:0d:89:6b:
0b:d8:68:2f:df:9f:af:4a:98:91:eb:e0:e6:cf:43:
10:bc:ea:ba:b3:9d:b3:d6:a8:8a:2a:fd:1d:2d:96:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:BF:04:52:72:FB:8B:D1:F1:8C:76:5E:51:5C:55:14:96:5F:E5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sLi_BFJy-4vR8Yx2XlFcVRSWX-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7f:9c:b2:e5:02:66:26:74:4a:c5:5c:c9:39:a7:db:b4:8c:
b3:87:7f:1d:86:d5:7d:84:1a:4a:70:52:4b:c5:05:20:5e:a2:
6e:02:21:ce:3a:d8:7b:5e:b9:9f:17:03:dc:9a:6e:f7:6f:50:
20:ce:81:a0:4c:05:d6:04:4a:72:65:6f:77:79:6d:7a:34:58:
77:5d:48:41:ef:85:2e:84:75:f8:fa:b4:9d:6b:0d:5c:7d:6b:
43:b2:80:c3:50:36:22:1d:86:7a:e7:26:a9:6b:75:32:7a:98:
b9:33:58:0d:f5:84:93:7a:23:2b:55:3d:5f:ce:b6:63:fb:9f:
a9:bd:69:78:e4:c3:ed:e5:ea:f8:0c:b3:3b:63:a2:ad:c6:76:
a5:db:23:ee:03:28:93:75:f1:22:56:a7:d8:71:ee:88:af:62:
83:be:0d:c0:09:dc:9d:20:23:e2:67:d4:b9:81:d0:42:47:3d:
7d:a3:b9:f5:48:f6:5b:4a:6c:32:78:b0:40:f5:52:65:20:b7:
79:ac:32:73:37:c3:17:81:26:1c:a1:1b:dc:27:89:35:93:3e:
f3:b3:26:68:3d:f9:57:01:43:84:da:0f:c6:58:f4:57:53:db:
1c:10:6a:bb:81:8e:77:f3:ac:4e:e6:75:0c:8b:0f:19:b4:57:
82:96:00:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTvoWol1VwI8vE2SVgCNE5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjEwMTEzMjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGI4YmYwNDUyNzJmYjhiZDFmMThjNzY1ZTUxNWM1NTE0OTY1ZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlR8DXakzehlk51gYyx4GitZMR6q
G7SBudLhJ5Q3k2mxHKJpBnEGa2h+RordOjNVE1VqrNXJo4zK6CEBqb58KypTW5jT
ITvPtsgjUo106CG2y64TgioXrimZbjMCM+X1j3a/hW85goEplkYyq1JCFRSZcLqL
xdma5BwsvVEv/MJvl/Q6ILh/qHtqDeXpy9p91E49m+zjKS75KpWninSPLrh6YMkq
7pS278s8kxesFnkEEdvtCRRfIUI6ZZ72DQ+v8Tvj+8MZVM85ZxdhBRI0vscioAmY
HbbCmbFdlfkNiWsL2Ggv35+vSpiR6+Dmz0MQvOq6s52z1qiKKv0dLZbMQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLC4vwRScvuL0fGMdl5RXFUUll/lMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvc0xpX0JGSnktNHZSOFl4MlhsRmNWUlNXWC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZA/MA0G
CSqGSIb3DQEBCwUAA4IBAQCkf5yy5QJmJnRKxVzJOafbtIyzh38dhtV9hBpKcFJL
xQUgXqJuAiHOOth7XrmfFwPcmm73b1AgzoGgTAXWBEpyZW93eW16NFh3XUhB74Uu
hHX4+rSdaw1cfWtDsoDDUDYiHYZ65yapa3Uyepi5M1gN9YSTeiMrVT1fzrZj+5+p
vWl45MPt5er4DLM7Y6Ktxnal2yPuAyiTdfEiVqfYce6Ir2KDvg3ACdydICPiZ9S5
gdBCRz19o7n1SPZbSmwyeLBA9VJlILd5rDJzN8MXgSYcoRvcJ4k1kz7zsyZoPflX
AUOE2g/GWPRXU9scEGq7gY5386xO5nUMiw8ZtFeClgD7
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:19 2025 by rpki-client