Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/u4vEOX2nKg80wekEGKq3jxNqd7k.roa
File: u4vEOX2nKg80wekEGKq3jxNqd7k.roa (raw, json)
Hash identifier: dNV06JWhYd6W5kceRRCX4FAPcyVY51Y3uLB0l71eME0=
Subject key identifier: BB:8B:C4:39:7D:A7:2A:0F:34:C1:E9:04:18:AA:B7:8F:13:6A:77:B9
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C22DBE5F662BE655B18660224EDAB
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/u4vEOX2nKg80wekEGKq3jxNqd7k.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 89.248.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:22:db:e5:f6:62:be:65:5b:18:66:02:24:ed:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb8bc4397da72a0f34c1e90418aab78f136a77b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:85:6f:5c:bf:7a:34:6d:d8:35:b2:59:3e:
ac:d0:1b:77:eb:d4:a8:dd:21:85:ba:29:98:5a:34:
e8:c7:f8:54:4b:19:d1:43:eb:90:45:12:9b:58:a7:
24:1c:12:b8:0b:4b:22:08:b7:50:4f:17:3e:b6:85:
57:8f:29:1b:8b:e0:b4:b5:79:b0:3f:8b:76:86:7f:
be:c3:b0:ac:66:69:f9:50:d0:5d:32:d6:0c:8d:21:
d9:67:a2:99:da:fc:af:2b:db:09:e1:f9:a8:13:87:
b3:81:06:51:11:cc:0e:bd:bf:e7:fa:be:c8:d1:27:
fd:84:05:00:c0:4b:76:45:33:e6:fd:ba:4d:1c:2a:
ea:23:77:5d:a9:6a:65:c4:51:d4:c0:06:f3:53:c0:
5e:cb:f2:1f:ec:84:20:50:9f:bc:c7:32:50:57:3d:
89:6f:7c:32:2a:34:76:ef:ff:48:3b:ff:3b:ce:18:
40:1e:66:19:37:9e:6b:9e:ee:38:7a:57:1d:dd:4d:
37:09:ab:7e:b2:61:0a:97:d1:26:0e:83:31:0b:f8:
64:aa:60:69:3c:92:26:5c:b8:60:e6:c6:52:cd:3b:
f0:75:bc:d1:e3:52:b7:37:3b:ce:75:0a:b5:1a:94:
a1:ea:27:bf:16:e5:1c:a1:a7:90:78:f9:1e:4b:0d:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:C4:39:7D:A7:2A:0F:34:C1:E9:04:18:AA:B7:8F:13:6A:77:B9
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/u4vEOX2nKg80wekEGKq3jxNqd7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.71.0/24
Signature Algorithm: sha256WithRSAEncryption
70:12:e0:b6:48:21:91:7f:00:a3:96:df:16:5a:09:9b:1a:f0:
55:ca:79:5c:f4:c5:16:c9:50:92:bb:9e:a6:23:c3:b2:21:61:
25:bb:44:fe:12:f1:24:9b:44:31:f4:16:07:81:71:a7:ed:a0:
8c:06:9b:e9:81:e5:83:7f:5c:c3:ea:87:ab:e6:43:d1:df:4b:
35:3f:b5:7c:cd:2a:76:31:a3:be:94:07:6c:96:17:d3:a7:f6:
ec:3a:0d:9f:d7:21:5f:65:4b:1b:f2:da:73:e4:a6:25:e5:49:
ad:90:ce:9d:fb:34:d5:17:d5:de:09:cc:50:23:72:a3:b7:76:
78:21:e1:7c:d5:19:f3:a9:3e:19:7e:6f:4c:8e:24:06:04:87:
fd:a5:a2:44:92:c1:13:4a:1f:e7:3f:43:f4:a0:98:bb:b2:f6:
aa:eb:84:a4:94:47:e2:b7:6d:96:01:a6:81:15:32:8e:ec:f9:
70:e8:c5:21:a3:55:f0:8f:43:ac:98:5f:b8:50:20:f5:d2:04:
85:99:d7:15:69:b4:4d:ee:b3:dd:82:c5:1f:b3:33:9c:a2:6e:
d0:47:bf:80:14:52:9c:82:be:47:ae:92:74:0d:1a:01:90:c3:
ec:72:4d:5d:e2:a3:8f:c9:3a:9a:84:ea:29:41:9f:d0:dc:47:
eb:ee:1e:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbCLb5fZivmVbGGYCJO2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjIxM2JmMTYyNzU0OGVmZGZiMWIyZTI2NDViYWFmMWQ5
ODNhYTAwHhcNMjUwMTAyMDk1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjhiYzQzOTdkYTcyYTBmMzRjMWU5MDQxOGFhYjc4ZjEzNmE3N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8GFb1y/ejRt2DWyWT6s0Bt369So
3SGFuimYWjTox/hUSxnRQ+uQRRKbWKckHBK4C0siCLdQTxc+toVXjykbi+C0tXmw
P4t2hn++w7CsZmn5UNBdMtYMjSHZZ6KZ2vyvK9sJ4fmoE4ezgQZREcwOvb/n+r7I
0Sf9hAUAwEt2RTPm/bpNHCrqI3ddqWplxFHUwAbzU8Bey/If7IQgUJ+8xzJQVz2J
b3wyKjR27/9IO/87zhhAHmYZN55rnu44elcd3U03Cat+smEKl9EmDoMxC/hkqmBp
PJImXLhg5sZSzTvwdbzR41K3NzvOdQq1GpSh6ie/FuUcoaeQePkeSw2iTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLuLxDl9pyoPNMHpBBiqt48Tane5MB8GA1UdIwQY
MBaAFIiyE78WJ1SO/fsbLiZFuq8dmDqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2Ut
NzI3MzVlMTE4ZDUxLzEvdTR2RU9YMm5LZzgwd2VrRUdLcTNqeE5xZDdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2UtNzI3MzVlMTE4ZDUx
LzEvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfhHMA0G
CSqGSIb3DQEBCwUAA4IBAQBwEuC2SCGRfwCjlt8WWgmbGvBVynlc9MUWyVCSu56m
I8OyIWElu0T+EvEkm0Qx9BYHgXGn7aCMBpvpgeWDf1zD6oer5kPR30s1P7V8zSp2
MaO+lAdslhfTp/bsOg2f1yFfZUsb8tpz5KYl5UmtkM6d+zTVF9XeCcxQI3Kjt3Z4
IeF81RnzqT4Zfm9MjiQGBIf9paJEksETSh/nP0P0oJi7svaq64SklEfit22WAaaB
FTKO7Plw6MUho1Xwj0OsmF+4UCD10gSFmdcVabRN7rPdgsUfszOcom7QR7+AFFKc
gr5HrpJ0DRoBkMPsck1d4qOPyTqahOopQZ/Q3Efr7h4b
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:55 2025 by rpki-client