Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OXB7LI6nEIyIps5TLLtR17f-91s.roa
File: OXB7LI6nEIyIps5TLLtR17f-91s.roa (raw, json)
Hash identifier: RJRHWS6G+6CJ7aGpLdu1AahTBvZ64q4AQeWKM/lcvrw=
Subject key identifier: 39:70:7B:2C:8E:A7:10:8C:88:A6:CE:53:2C:BB:51:D7:B7:FE:F7:5B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F642941270B0F0B051AA16DF75E3
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OXB7LI6nEIyIps5TLLtR17f-91s.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215931
IP address blocks: 89.190.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f6:42:94:12:70:b0:f0:b0:51:aa:16:df:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39707b2c8ea7108c88a6ce532cbb51d7b7fef75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:db:8d:7b:f5:bb:05:e6:d0:5c:29:14:5f:
04:5d:d0:ea:a5:71:35:2b:f4:56:d8:7e:99:bb:8e:
df:9c:a6:70:7e:ef:e0:ad:62:35:ca:0d:d1:8b:79:
56:a9:8f:16:8e:93:dd:ce:76:6a:7f:d7:87:bc:b3:
47:58:0a:c1:48:08:37:a6:f3:ad:e0:77:26:25:e4:
c2:3b:26:d3:c5:95:e1:a8:6a:0f:7d:b7:cc:0d:96:
cf:e3:dc:df:7c:b5:16:85:7c:8d:23:82:a8:12:a3:
3e:66:49:fa:b4:1e:18:96:d1:77:ee:83:b3:33:ea:
f2:02:92:37:a3:8b:07:b4:f7:66:8b:02:c6:a1:52:
7b:3c:05:7e:0d:3e:44:50:12:d2:7e:67:89:84:65:
9c:99:d2:a7:c2:f3:fa:80:a4:52:38:3c:71:9f:fa:
1f:91:b8:de:3e:00:ef:d5:6a:e8:b2:f2:09:8e:79:
df:00:71:ac:b9:26:fe:fe:44:8a:e7:99:89:44:03:
1b:1c:f7:9c:cb:b7:19:65:10:4a:78:fa:2d:58:61:
d4:a9:48:da:ed:c3:57:dd:ab:1c:a1:4d:6d:23:f2:
5b:b6:4f:77:8a:13:5d:fd:53:ba:a5:c5:2c:f5:77:
21:15:d6:8f:66:c0:14:3f:c2:2e:d5:6e:8f:5a:de:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:7B:2C:8E:A7:10:8C:88:A6:CE:53:2C:BB:51:D7:B7:FE:F7:5B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OXB7LI6nEIyIps5TLLtR17f-91s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e0:7d:83:a4:2a:c7:b1:0b:36:57:b6:21:2d:a4:9a:6c:44:
32:8e:b0:b8:85:05:7c:ba:01:6d:d8:e1:31:fa:ad:6b:56:8a:
ba:95:71:6d:e9:f8:12:2c:8f:f3:75:e2:c1:e5:cc:2b:43:11:
06:c7:6e:04:30:8b:65:42:c2:bb:fb:11:94:5e:eb:d1:47:d6:
89:4f:d8:f5:6f:98:a7:a4:0a:ec:f8:3f:36:58:e4:c2:b7:9d:
bc:e6:14:e0:6e:0e:be:26:15:7e:62:8c:e0:f4:9f:a2:4d:82:
bc:25:98:10:15:7d:31:e4:7a:e3:a6:cb:70:81:bb:b5:a2:20:
d1:9a:68:28:22:5a:6d:a9:7a:38:8b:47:ca:11:17:a7:15:d0:
09:af:7d:82:0c:b4:c6:74:d8:35:7b:a4:86:50:d0:28:7c:94:
99:87:87:de:98:af:88:78:cd:ca:3b:cb:74:59:45:a3:56:92:
a7:b0:bd:ca:75:33:0b:55:88:3a:68:be:74:4a:4d:ce:83:bb:
b4:c1:6d:db:7f:37:ca:1f:1d:6c:64:98:33:76:d5:1e:aa:66:
ee:76:6d:74:89:68:d6:06:28:a6:43:28:7f:00:cd:01:7d:76:
d8:1b:fd:36:25:86:51:65:85:9a:c3:68:ff:fb:9d:84:2d:c3:
10:6b:af:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/ZClBJwsPCwUaoW33XjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTcwN2IyYzhlYTcxMDhjODhhNmNlNTMyY2JiNTFkN2I3ZmVmNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyXbjXv1uwXm0FwpFF8EXdDqpXE1
K/RW2H6Zu47fnKZwfu/grWI1yg3Ri3lWqY8WjpPdznZqf9eHvLNHWArBSAg3pvOt
4HcmJeTCOybTxZXhqGoPfbfMDZbP49zffLUWhXyNI4KoEqM+Zkn6tB4YltF37oOz
M+ryApI3o4sHtPdmiwLGoVJ7PAV+DT5EUBLSfmeJhGWcmdKnwvP6gKRSODxxn/of
kbjePgDv1WrosvIJjnnfAHGsuSb+/kSK55mJRAMbHPecy7cZZRBKePotWGHUqUja
7cNX3ascoU1tI/Jbtk93ihNd/VO6pcUs9XchFdaPZsAUP8Iu1W6PWt4zYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlweyyOpxCMiKbOUyy7Ude3/vdbMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvT1hCN0xJNm5FSXlJcHM1VExMdFIxN2YtOTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWb6dMA0G
CSqGSIb3DQEBCwUAA4IBAQCW4H2DpCrHsQs2V7YhLaSabEQyjrC4hQV8ugFt2OEx
+q1rVoq6lXFt6fgSLI/zdeLB5cwrQxEGx24EMItlQsK7+xGUXuvRR9aJT9j1b5in
pArs+D82WOTCt5285hTgbg6+JhV+Yozg9J+iTYK8JZgQFX0x5Hrjpstwgbu1oiDR
mmgoIlptqXo4i0fKERenFdAJr32CDLTGdNg1e6SGUNAofJSZh4femK+IeM3KO8t0
WUWjVpKnsL3KdTMLVYg6aL50Sk3Og7u0wW3bfzfKHx1sZJgzdtUeqmbudm10iWjW
BiimQyh/AM0BfXbYG/02JYZRZYWaw2j/+52ELcMQa6/P
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:39 2025 by rpki-client