Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1G37n1LrAi7GT6cVHybwislBXbY.roa
File: 1G37n1LrAi7GT6cVHybwislBXbY.roa (raw, json)
Hash identifier: eXYf+LE3wGNuJRPmp+/3XrdlS7uD2gK4XVl4xeRoDFc=
Subject key identifier: D4:6D:FB:9F:52:EB:02:2E:C6:4F:A7:15:1F:26:F0:8A:C9:41:5D:B6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369ACF33648302C2A27A6383B939644
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1G37n1LrAi7GT6cVHybwislBXbY.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60118
IP address blocks: 89.42.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ac:f3:36:48:30:2c:2a:27:a6:38:3b:93:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d46dfb9f52eb022ec64fa7151f26f08ac9415db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:e6:08:e1:f0:38:be:23:2c:6d:f6:80:32:
fc:a9:c1:46:ce:36:50:0e:bf:2f:f3:8a:0e:84:a3:
b6:1f:93:40:92:e8:aa:21:6f:bb:d3:10:5b:c4:bf:
7a:28:7a:7d:ad:81:20:5b:80:a4:b8:09:3a:9d:34:
25:94:f2:4b:91:1d:ff:35:7e:05:b0:41:b0:4a:52:
7d:3c:90:4b:5b:a4:02:b9:20:3f:89:ac:f0:f6:88:
e3:e3:b0:31:23:d5:9c:d8:8e:1c:8b:0e:38:ae:8f:
69:12:85:46:e2:e1:cd:e1:dc:86:7b:78:8d:a9:db:
58:17:ca:c9:fb:a8:f9:9a:b9:02:17:50:66:ce:9d:
d7:7b:58:da:c5:bf:d6:a2:2b:74:3d:59:4d:3b:7a:
ae:1c:44:6b:a9:ce:43:a3:30:76:af:e8:3e:59:5f:
f7:25:00:fb:b4:97:36:df:c1:29:1f:15:2b:ff:2c:
8d:78:1f:3d:69:03:b5:a9:72:5e:a8:7f:5f:93:27:
81:fe:54:34:de:c8:68:23:91:9c:7b:8b:8d:ff:ea:
99:6c:c6:f1:34:66:9d:0b:25:47:d4:35:40:28:7d:
ac:06:0e:1b:3e:79:3a:50:23:04:31:51:5b:e0:be:
a6:7e:6c:ce:c1:e1:3c:06:06:cc:3b:05:de:23:7b:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:FB:9F:52:EB:02:2E:C6:4F:A7:15:1F:26:F0:8A:C9:41:5D:B6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1G37n1LrAi7GT6cVHybwislBXbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d4:38:cf:83:99:e3:f6:e6:0f:45:d6:da:e6:3e:32:6e:ab:
9c:48:b2:15:19:27:72:54:0e:d9:0e:a6:0d:01:55:86:a3:60:
1e:8a:09:b7:f2:07:90:3b:b2:bd:f9:fd:78:9e:4a:16:0f:4b:
91:89:f2:e7:c3:35:28:e3:c0:e5:1d:e0:a0:3b:4d:ef:21:e3:
bb:3d:a7:dc:15:f0:59:b7:70:a6:80:e8:32:66:b8:55:49:30:
f0:2c:62:25:04:8b:4f:cd:e6:d3:a8:a9:ed:28:e7:d7:11:ed:
08:a5:6f:f3:91:4e:b0:f8:50:c5:61:d2:a5:0d:92:9a:78:2e:
93:e1:ac:61:15:30:f7:7e:7e:65:c8:0a:8d:31:d3:03:3a:74:
64:7f:59:6a:80:89:42:29:f6:12:48:d9:53:bf:92:60:41:b2:
f9:80:5d:6d:7b:7e:67:48:1e:1e:3f:55:4a:58:5a:91:a0:2d:
db:78:0c:9a:3e:9b:bd:ff:cf:d1:91:1d:44:18:9e:45:f4:04:
16:04:92:d8:fd:39:34:ca:ef:80:f5:ba:f1:4e:d4:47:50:d0:
a8:a1:b1:69:50:53:80:4b:5d:1e:af:03:b7:30:ec:3e:da:29:
92:15:66:89:b6:80:15:42:51:47:15:31:2e:b1:0d:7b:76:f5:
15:a5:56:cf
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjaazzNkgwLConpjg7k5ZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDZkZmI5ZjUyZWIwMjJlYzY0ZmE3MTUxZjI2ZjA4YWM5NDE1ZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29fmCOHwOL4jLG32gDL8qcFGzjZQ
Dr8v84oOhKO2H5NAkuiqIW+70xBbxL96KHp9rYEgW4CkuAk6nTQllPJLkR3/NX4F
sEGwSlJ9PJBLW6QCuSA/iazw9ojj47AxI9Wc2I4ciw44ro9pEoVG4uHN4dyGe3iN
qdtYF8rJ+6j5mrkCF1Bmzp3Xe1jaxb/Woit0PVlNO3quHERrqc5DozB2r+g+WV/3
JQD7tJc238EpHxUr/yyNeB89aQO1qXJeqH9fkyeB/lQ03shoI5Gce4uN/+qZbMbx
NGadCyVH1DVAKH2sBg4bPnk6UCMEMVFb4L6mfmzOweE8BgbMOwXeI3ua6QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNRt+59S6wIuxk+nFR8m8IrJQV22MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xLzFHMzduMUxyQWk3R1Q2Y1ZIeWJ3aXNsQlhiWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKhow
DQYJKoZIhvcNAQELBQADggEBAIHUOM+DmeP25g9F1trmPjJuq5xIshUZJ3JUDtkO
pg0BVYajYB6KCbfyB5A7sr35/XieShYPS5GJ8ufDNSjjwOUd4KA7Te8h47s9p9wV
8Fm3cKaA6DJmuFVJMPAsYiUEi0/N5tOoqe0o59cR7Qilb/ORTrD4UMVh0qUNkpp4
LpPhrGEVMPd+fmXICo0x0wM6dGR/WWqAiUIp9hJI2VO/kmBBsvmAXW17fmdIHh4/
VUpYWpGgLdt4DJo+m73/z9GRHUQYnkX0BBYEktj9OTTK74D1uvFO1EdQ0KihsWlQ
U4BLXR6vA7cw7D7aKZIVZom2gBVCUUcVMS6xDXt29RWlVs8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:30 2025 by rpki-client