Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Grazm8nOe0wycN3WsYdd9Y_SJkQ.roa
File: Grazm8nOe0wycN3WsYdd9Y_SJkQ.roa (raw, json)
Hash identifier: ew1yjdf5hud19exN/4C6kPmiUI/tf2mOrQxi0ZBV16c=
Subject key identifier: 1A:B6:B3:9B:C9:CE:7B:4C:32:70:DD:D6:B1:87:5D:F5:8F:D2:26:44
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC20C4035A837963C8AE219C4FA41A
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Grazm8nOe0wycN3WsYdd9Y_SJkQ.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209375
IP address blocks: 89.33.135.0/24 maxlen: 24
193.169.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:20:c4:03:5a:83:79:63:c8:ae:21:9c:4f:a4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ab6b39bc9ce7b4c3270ddd6b1875df58fd22644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:c3:8e:dc:2d:60:05:27:90:d0:92:27:76:
36:e2:b5:35:7e:ce:e5:c2:c4:55:38:7b:ad:9a:a3:
ee:76:7d:17:68:20:6d:d7:a6:73:04:0c:7c:53:93:
2d:45:c9:a5:be:82:ae:33:17:32:19:32:52:0e:1d:
55:db:64:7d:71:46:72:6a:76:1e:42:0e:5b:86:77:
82:26:f6:c8:cd:97:79:b8:a1:3e:62:8c:e4:2e:57:
07:49:f2:4e:47:6b:8e:fb:09:3d:38:50:b0:d5:c2:
7f:cc:d3:cb:0f:e3:12:34:10:68:04:41:19:a9:52:
8a:a0:a7:75:92:26:e8:2d:f7:89:e6:3d:1e:b9:c6:
83:3e:bf:1f:bb:4a:95:f5:7c:d9:56:1b:b3:0a:c4:
54:54:36:f3:1e:d4:1b:05:73:1e:d6:8d:78:26:4e:
64:89:a6:21:6e:b4:02:ab:8c:97:e2:69:14:35:56:
22:ae:b2:25:a4:6e:71:d3:df:22:8c:1f:47:08:8e:
95:ec:3b:3d:8b:ec:94:c2:0f:9a:85:0e:d7:da:74:
aa:af:78:db:58:23:d5:63:5a:5c:fd:89:81:6b:8a:
d5:0b:87:0b:83:0f:ac:ad:9e:e8:76:2b:1b:da:1e:
ba:8d:71:53:dc:eb:17:fe:5b:a6:51:d1:e3:39:74:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:B3:9B:C9:CE:7B:4C:32:70:DD:D6:B1:87:5D:F5:8F:D2:26:44
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Grazm8nOe0wycN3WsYdd9Y_SJkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.135.0/24
193.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ff:d1:bd:bb:e8:b1:19:bd:2a:83:58:d5:dc:cf:3e:f2:75:
97:df:b1:0a:07:80:59:ce:8a:d6:42:62:dc:e5:66:91:56:7c:
40:c9:99:fc:26:37:c3:a9:0a:87:48:5e:40:c8:7c:c8:19:f3:
fe:23:38:93:69:43:40:be:03:48:b9:b5:f4:9a:76:18:3b:49:
77:9a:72:bc:a7:88:2e:29:ed:6e:f1:50:f1:a7:29:ce:ab:c4:
3e:ac:c2:a9:29:49:65:d2:da:cf:ea:9b:57:dd:11:00:c7:d1:
1f:1a:39:75:15:f7:b7:18:e9:d4:9d:ef:19:ef:be:4b:f1:73:
cd:4e:43:2f:77:46:f7:8a:24:92:1d:bb:c3:0c:df:d2:03:6d:
01:d1:45:2a:c8:d7:cf:96:20:95:80:2d:b6:55:c5:a2:67:47:
2c:96:7c:95:99:c2:e8:4c:4d:55:7d:d5:68:f7:0e:97:5d:59:
10:a6:f7:79:33:d4:c9:eb:85:43:44:33:76:cd:b6:87:3b:a9:
7a:66:aa:63:c9:98:7e:67:06:3b:66:a2:ff:00:5a:ac:9b:5d:
03:92:7d:b1:41:fe:91:bf:2d:d6:de:d1:2a:d0:ea:11:b1:00:
3d:74:5c:7d:54:4a:ce:49:b7:19:b1:03:fb:9c:e1:58:36:1a:
6f:84:e9:44
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQi/CDEA1qDeWPIriGcT6QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWI2YjM5YmM5Y2U3YjRjMzI3MGRkZDZiMTg3NWRmNThmZDIyNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYzDjtwtYAUnkNCSJ3Y24rU1fs7l
wsRVOHutmqPudn0XaCBt16ZzBAx8U5MtRcmlvoKuMxcyGTJSDh1V22R9cUZyanYe
Qg5bhneCJvbIzZd5uKE+YozkLlcHSfJOR2uO+wk9OFCw1cJ/zNPLD+MSNBBoBEEZ
qVKKoKd1kiboLfeJ5j0eucaDPr8fu0qV9XzZVhuzCsRUVDbzHtQbBXMe1o14Jk5k
iaYhbrQCq4yX4mkUNVYirrIlpG5x098ijB9HCI6V7Ds9i+yUwg+ahQ7X2nSqr3jb
WCPVY1pc/YmBa4rVC4cLgw+srZ7odisb2h66jXFT3OsX/lumUdHjOXQwVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBq2s5vJzntMMnDd1rGHXfWP0iZEMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvR3Jhem04bk9lMHd5Y04zV3NZZGQ5WV9TSmtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSGHAwQA
wamvMA0GCSqGSIb3DQEBCwUAA4IBAQAl/9G9u+ixGb0qg1jV3M8+8nWX37EKB4BZ
zorWQmLc5WaRVnxAyZn8JjfDqQqHSF5AyHzIGfP+IziTaUNAvgNIubX0mnYYO0l3
mnK8p4guKe1u8VDxpynOq8Q+rMKpKUll0trP6ptX3REAx9EfGjl1Ffe3GOnUne8Z
775L8XPNTkMvd0b3iiSSHbvDDN/SA20B0UUqyNfPliCVgC22VcWiZ0cslnyVmcLo
TE1VfdVo9w6XXVkQpvd5M9TJ64VDRDN2zbaHO6l6ZqpjyZh+ZwY7ZqL/AFqsm10D
kn2xQf6Rvy3W3tEq0OoRsQA9dFx9VErOSbcZsQP7nOFYNhpvhOlE
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:13 2025 by rpki-client