Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/S66fO7T7UZW_Wl9tM7ViQmCbAR4.roa
File: S66fO7T7UZW_Wl9tM7ViQmCbAR4.roa (raw, json)
Hash identifier: OhN5Pdm8hmUTRC0RLNvn/PPx2npIFs/hd8F0psv7GN4=
Subject key identifier: 4B:AE:9F:3B:B4:FB:51:95:BF:5A:5F:6D:33:B5:62:42:60:9B:01:1E
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019421442B661CF4114D3262FAF275616AC7
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/S66fO7T7UZW_Wl9tM7ViQmCbAR4.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48894
IP address blocks: 152.89.232.0/23 maxlen: 23
152.89.234.0/24 maxlen: 24
152.89.235.0/24 maxlen: 24
2a09:37c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2b:66:1c:f4:11:4d:32:62:fa:f2:75:61:6a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bae9f3bb4fb5195bf5a5f6d33b56242609b011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:58:58:31:b3:c0:81:15:fa:6b:39:3c:7f:
67:40:bd:c5:9e:39:fa:48:b0:d9:01:d7:de:6d:10:
a3:f0:d5:c6:3e:5a:3c:1a:97:2e:f3:5c:98:2f:19:
2a:40:1e:4f:77:c4:5b:c9:0d:c7:e5:98:5f:d7:5c:
7e:c0:d2:22:d6:1c:e7:b7:80:58:86:4e:fa:ac:2a:
37:53:f9:b1:af:15:f2:62:3a:21:c1:f8:69:a9:48:
62:8d:6e:31:49:33:3e:d2:0a:68:73:d1:03:28:af:
b9:b8:fd:f3:c4:a8:69:9d:07:ea:66:4e:ce:84:c2:
60:c8:7a:00:f1:87:f4:d1:ac:59:1a:d9:19:43:0b:
93:ef:f9:24:b9:ad:c5:97:ca:e1:a0:f8:e0:a7:e2:
2d:5f:ec:4e:67:cf:01:86:3c:de:7e:9f:25:84:33:
4e:ac:97:96:b8:94:39:3d:a1:05:3a:a1:9c:d1:af:
52:8d:ef:74:15:57:fd:e7:32:fa:b4:6a:73:4e:3c:
56:db:36:5e:45:6a:99:8f:aa:db:0b:7e:fa:a5:f6:
62:e3:d2:c5:7c:97:7b:a0:92:7a:f1:98:57:3b:9a:
71:40:fc:d7:4e:a5:c4:16:33:04:53:34:3a:51:1e:
79:84:b3:36:5f:e1:0e:aa:e7:d7:a1:e9:77:6a:9d:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AE:9F:3B:B4:FB:51:95:BF:5A:5F:6D:33:B5:62:42:60:9B:01:1E
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/S66fO7T7UZW_Wl9tM7ViQmCbAR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.232.0/22
IPv6:
2a09:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
b3:c8:91:05:72:fa:7b:85:07:53:eb:f4:cd:1c:56:df:82:e9:
38:e6:62:a0:08:86:98:ae:f0:06:03:3e:5a:b8:d9:98:fb:17:
f0:72:2c:65:ce:c1:09:a1:b0:4b:24:2e:d6:06:4c:96:ea:1c:
8c:80:78:93:24:5e:e3:f8:b7:26:73:67:fa:65:43:6a:05:98:
b6:01:99:a4:3e:b0:cc:5f:fb:5f:15:83:b7:6c:f5:da:fb:c9:
d6:44:df:a9:72:6b:dc:bd:a2:38:e2:01:66:21:99:d9:2a:19:
a8:8e:54:65:b0:19:3e:4a:28:48:05:39:09:53:76:c3:85:c2:
7f:be:ae:2e:ac:0c:e2:9b:1e:c8:3a:8e:b8:c5:29:36:a2:94:
65:fe:f0:27:ab:72:28:a4:ce:d3:d9:21:0c:95:cd:e6:22:bc:
85:c5:a9:32:f0:b1:ba:40:00:6b:0d:22:05:32:5a:cf:4c:b5:
e8:69:18:9d:af:e8:5f:fe:df:70:29:ae:d5:52:da:6b:01:ef:
72:23:27:0a:ca:5a:d0:58:1a:26:21:55:d7:63:a0:a9:d2:84:
cb:fb:fa:b8:df:a0:b0:2f:e3:c7:e0:45:69:b2:d1:94:27:06:
1b:24:a9:e6:5f:17:b0:6c:fd:47:a4:02:5e:46:c7:0c:a9:30:
ca:a7:33:d8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhRCtmHPQRTTJi+vJ1YWrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjUwMTAxMDk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmFlOWYzYmI0ZmI1MTk1YmY1YTVmNmQzM2I1NjI0MjYwOWIwMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwANYWDGzwIEV+ms5PH9nQL3Fnjn6
SLDZAdfebRCj8NXGPlo8Gpcu81yYLxkqQB5Pd8RbyQ3H5Zhf11x+wNIi1hznt4BY
hk76rCo3U/mxrxXyYjohwfhpqUhijW4xSTM+0gpoc9EDKK+5uP3zxKhpnQfqZk7O
hMJgyHoA8Yf00axZGtkZQwuT7/kkua3Fl8rhoPjgp+ItX+xOZ88Bhjzefp8lhDNO
rJeWuJQ5PaEFOqGc0a9Sje90FVf95zL6tGpzTjxW2zZeRWqZj6rbC376pfZi49LF
fJd7oJJ68ZhXO5pxQPzXTqXEFjMEUzQ6UR55hLM2X+EOqufXoel3ap0SMQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEuunzu0+1GVv1pfbTO1YkJgmwEeMB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEvUzY2Zk83VDdVWldfV2w5dE03VmlRbUNiQVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCmFnoMA0E
AgACMAcDBQMqCTfAMA0GCSqGSIb3DQEBCwUAA4IBAQCzyJEFcvp7hQdT6/TNHFbf
guk45mKgCIaYrvAGAz5auNmY+xfwcixlzsEJobBLJC7WBkyW6hyMgHiTJF7j+Lcm
c2f6ZUNqBZi2AZmkPrDMX/tfFYO3bPXa+8nWRN+pcmvcvaI44gFmIZnZKhmojlRl
sBk+SihIBTkJU3bDhcJ/vq4urAzimx7IOo64xSk2opRl/vAnq3IopM7T2SEMlc3m
IryFxaky8LG6QABrDSIFMlrPTLXoaRidr+hf/t9wKa7VUtprAe9yIycKylrQWBom
IVXXY6Cp0oTL+/q436CwL+PH4EVpstGUJwYbJKnmXxewbP1HpAJeRscMqTDKpzPY
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:57:51 2025 by rpki-client