Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa
File: MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa (raw, json)
Hash identifier: mMR8wNV9W/fVKlAylzczxRufMEEM5D1dkFEiXzkFtBw=
Subject key identifier: 31:3C:D5:42:A8:35:39:03:99:AA:D4:C5:95:CA:59:DB:F5:67:3E:78
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61AA71B6B80411D1BF0A93331BCD3
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 89.43.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1a:a7:1b:6b:80:41:1d:1b:f0:a9:33:31:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313cd542a835390399aad4c595ca59dbf5673e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:ca:7a:03:85:19:94:a5:d7:2f:b3:39:49:
62:2e:a2:f0:55:1e:40:80:e7:07:6b:d9:cf:d7:cc:
40:39:29:7a:cb:53:24:75:5c:fd:89:ef:df:19:2e:
4a:35:dd:1d:34:3d:5e:50:75:f0:d4:b2:10:12:de:
2e:32:a5:78:9d:3e:84:70:23:2b:29:f9:b3:55:b4:
4f:5c:63:78:83:d2:28:10:33:4c:65:76:6b:51:a8:
ae:55:99:b6:89:71:c1:31:91:61:a6:6a:7d:f6:8f:
a6:71:f2:7e:a5:a5:e3:e8:ac:03:1c:57:fa:6b:03:
8f:b1:19:7e:e4:3d:56:8a:5d:cc:be:52:e2:c7:95:
52:82:d7:5b:92:59:2c:d1:2f:64:1e:21:e1:e5:2a:
3f:c2:4e:37:1c:2b:1b:fc:b9:44:3f:84:af:18:a7:
fe:35:1c:81:52:f1:90:e3:52:ae:5a:2d:c6:84:c3:
3e:f3:4b:74:a5:2a:aa:30:a8:68:d5:9c:84:fa:61:
b6:f7:54:a1:8a:d8:ff:04:6d:55:66:17:14:46:76:
9f:d5:58:1b:07:8f:a0:0b:74:b6:03:b4:fe:08:ae:
66:0e:83:aa:b6:8c:41:a0:a2:cb:03:23:69:ee:47:
74:9c:aa:95:2e:df:ce:0d:21:67:b3:2e:b8:97:fe:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:D5:42:A8:35:39:03:99:AA:D4:C5:95:CA:59:DB:F5:67:3E:78
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d1:f9:0b:e1:4b:7c:2a:b5:38:56:ea:16:1f:b2:9a:69:c3:
b7:f6:27:f1:d2:56:82:77:e6:f5:91:c5:86:8a:32:9d:ee:87:
d0:8c:46:e0:04:55:49:91:f9:6c:c8:4c:76:4b:93:05:73:7c:
35:5f:7f:79:d9:1a:30:65:d3:0b:ac:70:eb:3d:08:79:fb:8f:
8f:fa:df:4a:0b:e8:16:fe:fd:d6:aa:fb:5b:e4:00:5e:8e:cd:
27:aa:2b:cf:c7:d8:1e:29:8b:64:8d:3c:43:74:09:22:e7:61:
cd:7e:f7:ce:47:d8:9b:ac:3c:83:f1:0b:08:c8:3a:15:71:0c:
6e:69:75:8a:6e:53:61:0f:5f:6e:60:6e:ae:a6:5b:0e:c2:d9:
b5:40:93:ca:88:af:5d:59:f5:de:08:aa:59:69:cb:e2:dd:3f:
25:cc:f6:10:0d:97:d3:fe:c5:9d:0f:f8:44:6b:59:a0:b3:ee:
07:f2:09:17:4d:7a:1a:cf:d2:80:e1:53:63:24:1d:73:92:53:
3b:78:7f:c7:9d:2d:46:42:19:ed:31:ba:5f:e4:69:e4:09:cc:
4a:f8:93:ef:dd:a5:50:2e:9e:f5:6f:dc:63:7a:09:60:15:44:
76:27:b7:39:9f:69:1d:90:b7:f4:b0:81:c5:36:bb:57:3a:80:
39:bc:72:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1hqnG2uAQR0b8KkzMbzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwMTAxMDc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTNjZDU0MmE4MzUzOTAzOTlhYWQ0YzU5NWNhNTlkYmY1NjczZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hfKegOFGZSl1y+zOUliLqLwVR5A
gOcHa9nP18xAOSl6y1MkdVz9ie/fGS5KNd0dND1eUHXw1LIQEt4uMqV4nT6EcCMr
KfmzVbRPXGN4g9IoEDNMZXZrUaiuVZm2iXHBMZFhpmp99o+mcfJ+paXj6KwDHFf6
awOPsRl+5D1Wil3MvlLix5VSgtdbklks0S9kHiHh5So/wk43HCsb/LlEP4SvGKf+
NRyBUvGQ41KuWi3GhMM+80t0pSqqMKho1ZyE+mG291Shitj/BG1VZhcURnaf1Vgb
B4+gC3S2A7T+CK5mDoOqtoxBoKLLAyNp7kd0nKqVLt/ODSFnsy64l/7yJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDE81UKoNTkDmarUxZXKWdv1Zz54MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvTVR6VlFxZzFPUU9acXRURmxjcFoyX1ZuUG5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSspMA0G
CSqGSIb3DQEBCwUAA4IBAQCp0fkL4Ut8KrU4VuoWH7KaacO39ifx0laCd+b1kcWG
ijKd7ofQjEbgBFVJkflsyEx2S5MFc3w1X3952RowZdMLrHDrPQh5+4+P+t9KC+gW
/v3Wqvtb5ABejs0nqivPx9geKYtkjTxDdAki52HNfvfOR9ibrDyD8QsIyDoVcQxu
aXWKblNhD19uYG6uplsOwtm1QJPKiK9dWfXeCKpZacvi3T8lzPYQDZfT/sWdD/hE
a1mgs+4H8gkXTXoaz9KA4VNjJB1zklM7eH/HnS1GQhntMbpf5GnkCcxK+JPv3aVQ
Lp71b9xjeglgFUR2J7c5n2kdkLf0sIHFNrtXOoA5vHKP
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:20 2025 by rpki-client