Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/A2pcNT8MfpdYAm5SllAHrGXsfTU.roa
File: A2pcNT8MfpdYAm5SllAHrGXsfTU.roa (raw, json)
Hash identifier: 3QXFfCzArPk6LUy3vQ6J+b3D7wjuNaV1JJdwZn1EcXo=
Subject key identifier: 03:6A:5C:35:3F:0C:7E:97:58:02:6E:52:96:50:07:AC:65:EC:7D:35
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018D59B25101E37295EBDF220AA66F4653BD
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/A2pcNT8MfpdYAm5SllAHrGXsfTU.roa
Signing time: Tue 30 Jan 2024 09:27:54 +0000
ROA not before: Tue 30 Jan 2024 09:27:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
185.18.224.0/23 maxlen: 24
188.215.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:b2:51:01:e3:72:95:eb:df:22:0a:a6:6f:46:53:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 30 09:27:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=036a5c353f0c7e9758026e52965007ac65ec7d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:29:4e:9e:19:4d:6e:e4:65:0b:a4:1d:dc:
c5:95:d2:30:c3:2b:3a:d6:a8:18:2e:0f:de:88:74:
f1:fd:b0:71:ef:3a:59:be:e2:78:d0:25:4b:54:1e:
70:f2:08:36:eb:fc:34:25:19:ed:0b:bd:43:94:64:
97:22:5e:00:ac:7b:3f:60:b9:c2:1b:7a:ad:de:17:
8e:d8:bc:03:b5:82:7b:09:20:19:4a:71:a0:30:87:
7f:44:dd:85:97:bf:9a:65:79:57:fc:af:df:14:27:
93:af:74:77:8e:96:7a:3d:3c:e2:3f:73:cd:0b:d2:
a3:a9:be:81:16:58:40:70:25:c9:56:86:a1:e7:a6:
a2:76:22:87:43:57:ef:64:c8:25:ec:4a:a9:8a:62:
f9:0e:f7:9d:3d:ac:ef:cd:05:91:2c:8c:6c:8b:27:
c5:79:ae:5c:e8:9c:63:c2:49:f5:23:af:f5:2a:81:
4a:6a:59:1b:4e:18:42:2d:27:c4:22:1f:6d:21:0c:
6b:b0:c9:26:45:cd:33:79:42:80:d3:88:8b:53:ca:
25:61:9c:59:d6:9d:1b:ad:29:d9:75:70:d3:30:ca:
74:58:3f:d4:69:c2:ba:2e:bd:7e:38:9d:65:df:25:
d9:90:63:6f:7c:84:51:a1:06:c6:e4:1b:77:5f:d1:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:5C:35:3F:0C:7E:97:58:02:6E:52:96:50:07:AC:65:EC:7D:35
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/A2pcNT8MfpdYAm5SllAHrGXsfTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.128.0/22
89.46.232.0/21
185.18.224.0/23
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
67:6a:94:01:62:22:fc:97:39:41:45:44:60:1b:b6:0c:16:04:
f4:c9:6f:b4:36:12:3d:ee:2b:49:cf:d2:c2:00:c4:64:d5:b8:
b4:bd:4d:e0:42:ef:c7:45:7b:90:72:f5:40:5b:2f:7d:2f:c2:
c3:9b:5b:a3:20:4b:37:af:03:89:73:7c:59:72:31:62:3a:84:
37:de:cd:0b:04:3f:50:b4:ed:32:e9:43:40:c1:c5:2b:03:b7:
ff:cc:8f:35:33:3e:5f:a1:f7:4c:0f:2a:fa:16:c9:f2:49:36:
32:b3:fd:77:b4:a7:bd:d3:8f:00:47:35:77:52:53:bc:d1:ea:
3a:51:30:2a:fd:ce:e1:34:c2:91:76:e8:30:ca:ff:57:38:62:
32:8e:ef:a6:5f:98:fb:2e:1d:ed:2f:36:d4:bb:22:21:91:67:
23:b7:76:27:0d:71:8e:ef:f3:88:45:eb:53:0b:bd:d4:4a:bd:
be:c7:08:33:9a:bf:f1:9b:55:c1:e9:4e:cd:5f:3c:bb:53:3b:
ee:3a:a7:23:f8:fd:73:2f:73:59:de:87:2b:6e:75:fe:7f:47:
c0:0a:76:d4:2e:c8:5c:59:f1:f1:9e:c5:25:99:45:23:57:39:
20:a6:09:12:5b:01:86:af:dd:f3:c4:45:84:a2:38:7d:75:f1:
19:56:10:86
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY1ZslEB43KV698iCqZvRlO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTMwMDkyNzU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzZhNWMzNTNmMGM3ZTk3NTgwMjZlNTI5NjUwMDdhYzY1ZWM3ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWMpTp4ZTW7kZQukHdzFldIwwys6
1qgYLg/eiHTx/bBx7zpZvuJ40CVLVB5w8gg26/w0JRntC71DlGSXIl4ArHs/YLnC
G3qt3heO2LwDtYJ7CSAZSnGgMId/RN2Fl7+aZXlX/K/fFCeTr3R3jpZ6PTziP3PN
C9Kjqb6BFlhAcCXJVoah56aidiKHQ1fvZMgl7EqpimL5DvedPazvzQWRLIxsiyfF
ea5c6Jxjwkn1I6/1KoFKalkbThhCLSfEIh9tIQxrsMkmRc0zeUKA04iLU8olYZxZ
1p0brSnZdXDTMMp0WD/UacK6Lr1+OJ1l3yXZkGNvfIRRoQbG5Bt3X9EMDQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFANqXDU/DH6XWAJuUpZQB6xl7H01MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0EycGNOVDhNZnBkWUFtNVNsbEFIckdYc2ZUVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAJZLoAD
BANZLugDBAG5EuADBAK81ygwDQYJKoZIhvcNAQELBQADggEBAGdqlAFiIvyXOUFF
RGAbtgwWBPTJb7Q2Ej3uK0nP0sIAxGTVuLS9TeBC78dFe5By9UBbL30vwsObW6Mg
SzevA4lzfFlyMWI6hDfezQsEP1C07TLpQ0DBxSsDt//MjzUzPl+h90wPKvoWyfJJ
NjKz/Xe0p73TjwBHNXdSU7zR6jpRMCr9zuE0wpF26DDK/1c4YjKO76ZfmPsuHe0v
NtS7IiGRZyO3dicNcY7v84hF61MLvdRKvb7HCDOav/GbVcHpTs1fPLtTO+46pyP4
/XMvc1nehytudf5/R8AKdtQuyFxZ8fGexSWZRSNXOSCmCRJbAYav3fPERYSiOH11
8RlWEIY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:20 2025 by rpki-client