Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/h-KO6lw23C9b51-4F0ftvMZD1Ak.roa
File: h-KO6lw23C9b51-4F0ftvMZD1Ak.roa (raw, json)
Hash identifier: chBdggv2cfnZM870miewbOPEHVHXr00MhR3TVSRWGh8=
Subject key identifier: 87:E2:8E:EA:5C:36:DC:2F:5B:E7:5F:B8:17:47:ED:BC:C6:43:D4:09
Certificate issuer: /CN=682c16254e72dc4cca375409e59e81cc39c48730
Certificate serial: 0138DF79
Authority key identifier: 68:2C:16:25:4E:72:DC:4C:CA:37:54:09:E5:9E:81:CC:39:C4:87:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/h-KO6lw23C9b51-4F0ftvMZD1Ak.roa
Signing time: Sat 01 Jan 2022 09:00:45 +0000
ROA not before: Sat 01 Jan 2022 09:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201971
IP address blocks: 89.248.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20504441 (0x138df79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c16254e72dc4cca375409e59e81cc39c48730
Validity
Not Before: Jan 1 09:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87e28eea5c36dc2f5be75fb81747edbcc643d409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:08:15:d2:18:ab:3d:cd:d7:89:f9:e9:79:
5a:68:0e:b6:c8:ee:07:d6:07:bc:d5:73:7f:db:98:
88:ed:c8:6d:f3:ce:52:9b:74:ee:65:3b:c2:b5:b0:
aa:72:72:77:82:eb:09:91:7b:71:07:64:c0:73:26:
a3:47:49:f7:21:9f:83:78:22:ee:e1:33:16:d1:8a:
6a:1a:05:26:6c:66:6b:ca:8d:e6:7b:f6:7f:19:6b:
05:29:82:7e:78:34:24:7c:14:4e:8d:1e:d5:53:8c:
de:92:cd:ad:38:c2:fe:28:b8:55:1a:4e:d1:46:1d:
b6:a4:6d:19:7e:d4:55:a4:01:cb:16:a6:d6:b5:c3:
94:ef:9a:89:f3:f6:4b:d4:2a:c6:33:bd:b7:4a:60:
ce:e6:2b:02:c8:ab:ea:d8:6c:a5:76:81:e1:83:81:
aa:83:74:ce:51:d9:c0:d8:5d:8a:82:c2:a5:07:c4:
1b:c9:2c:1d:cd:31:56:5c:65:eb:5d:f7:25:ea:93:
39:1e:fd:1f:8f:dd:e7:9b:a1:5e:38:22:f3:13:13:
67:85:27:80:0d:d7:7f:b1:c0:48:3b:05:42:0f:62:
ac:04:c6:b0:6c:eb:54:ca:69:ae:4b:c7:e8:2d:96:
b3:09:38:b0:cc:81:b2:0f:bc:fb:99:69:2b:15:95:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:8E:EA:5C:36:DC:2F:5B:E7:5F:B8:17:47:ED:BC:C6:43:D4:09
X509v3 Authority Key Identifier:
keyid:68:2C:16:25:4E:72:DC:4C:CA:37:54:09:E5:9E:81:CC:39:C4:87:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/h-KO6lw23C9b51-4F0ftvMZD1Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.66.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6b:ff:39:64:b9:ce:96:6f:98:22:a7:3f:1f:3b:d8:2e:17:
e6:68:22:05:f9:40:4c:7a:3e:44:e2:4b:3a:47:6b:2f:f8:5f:
8d:1c:e1:4b:21:f0:c8:a4:e6:e2:e5:55:69:00:4c:57:90:81:
f4:94:4f:19:c4:b1:3c:a6:63:6a:1b:6d:eb:8f:b2:00:46:29:
75:b6:dd:e1:5d:9e:fe:57:b5:e2:f4:93:df:da:8e:ee:9e:13:
97:de:73:87:a5:20:85:a4:4a:b5:96:69:c0:4a:5f:03:b5:c0:
9c:07:79:6c:1c:a6:a0:29:99:3a:dc:8b:c2:4b:6b:36:8b:b9:
05:8d:9e:b7:55:74:f9:b7:62:88:24:05:44:65:d0:61:03:b4:
ac:09:0e:71:d6:f3:ec:0e:fb:a1:c2:5e:ee:df:dd:d4:e2:29:
d6:47:71:63:f0:3b:68:5d:bf:f3:90:b4:24:91:7e:24:77:99:
cd:9c:71:f1:50:af:0f:4b:5d:df:c0:68:09:b8:7e:fc:ee:90:
d5:64:53:cc:d3:36:5d:6e:26:6f:22:25:9a:28:a7:68:6b:e5:
23:22:ca:45:2a:3b:17:f4:b3:76:b8:0c:91:ec:a8:0b:1f:2d:
7a:0e:d3:76:46:b2:24:ec:3c:fc:06:20:59:8a:94:6b:ae:9c:
87:f2:99:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATjfeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODJjMTYyNTRlNzJkYzRjY2EzNzU0MDllNTllODFjYzM5YzQ4NzMwMB4XDTIyMDEw
MTA5MDA0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODdlMjhlZWE1YzM2
ZGMyZjViZTc1ZmI4MTc0N2VkYmNjNjQzZDQwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/oCBXSGKs9zdeJ+el5WmgOtsjuB9YHvNVzf9uYiO3IbfPO
Upt07mU7wrWwqnJyd4LrCZF7cQdkwHMmo0dJ9yGfg3gi7uEzFtGKahoFJmxma8qN
5nv2fxlrBSmCfng0JHwUTo0e1VOM3pLNrTjC/ii4VRpO0UYdtqRtGX7UVaQByxam
1rXDlO+aifP2S9QqxjO9t0pgzuYrAsir6thspXaB4YOBqoN0zlHZwNhdioLCpQfE
G8ksHc0xVlxl6133JeqTOR79H4/d55uhXjgi8xMTZ4UngA3Xf7HASDsFQg9irATG
sGzrVMpprkvH6C2Wswk4sMyBsg+8+5lpKxWVIokCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSH4o7qXDbcL1vnX7gXR+28xkPUCTAfBgNVHSMEGDAWgBRoLBYlTnLcTMo3
VAnlnoHMOcSHMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FDd1dKVTV5M0V6S04xUUo1WjZCekRuRWh6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvYzAxN2M5LTY3MTItNDEyMC05MjdjLWMzMThkZDhjNTAyNS8x
L2gtS082bHcyM0M5YjUxLTRGMGZ0dk1aRDFBay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
YzAxN2M5LTY3MTItNDEyMC05MjdjLWMzMThkZDhjNTAyNS8xL2FDd1dKVTV5M0V6
S04xUUo1WjZCekRuRWh6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFn4QjANBgkqhkiG9w0BAQsFAAOC
AQEAJGv/OWS5zpZvmCKnPx872C4X5mgiBflATHo+ROJLOkdrL/hfjRzhSyHwyKTm
4uVVaQBMV5CB9JRPGcSxPKZjahtt64+yAEYpdbbd4V2e/le14vST39qO7p4Tl95z
h6UghaRKtZZpwEpfA7XAnAd5bBymoCmZOtyLwktrNou5BY2et1V0+bdiiCQFRGXQ
YQO0rAkOcdbz7A77ocJe7t/d1OIp1kdxY/A7aF2/85C0JJF+JHeZzZxx8VCvD0td
38BoCbh+/O6Q1WRTzNM2XW4mbyIlmiinaGvlIyLKRSo7F/SzdrgMkeyoCx8teg7T
dkayJOw8/AYgWYqUa66ch/KZKQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:09:35 2025 by rpki-client