Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PdEVTTK0ZlqMOWic9VeaFQKZYig.roa
File: PdEVTTK0ZlqMOWic9VeaFQKZYig.roa (raw, json)
Hash identifier: WY1O1/P5mKehPFCznaB/K0ig7hM5BSs7A0Kf8uyysOw=
Subject key identifier: 3D:D1:15:4D:32:B4:66:5A:8C:39:68:9C:F5:57:9A:15:02:99:62:28
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236991E77A7A71AF080FE68C066CA12C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PdEVTTK0ZlqMOWic9VeaFQKZYig.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41414
IP address blocks: 89.38.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:91:e7:7a:7a:71:af:08:0f:e6:8c:06:6c:a1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd1154d32b4665a8c39689cf5579a1502996228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:77:7c:a5:70:a1:c3:ce:ab:32:ca:b2:10:
1e:6c:22:69:d0:25:33:39:ab:6f:2b:73:88:9f:2c:
76:ae:9e:2f:5c:84:37:7f:4e:50:e7:8f:cc:6f:73:
15:02:90:87:79:6b:28:9d:07:28:4a:64:f6:0d:9c:
9b:34:63:dd:a6:1d:a6:cf:93:91:7b:68:6f:b3:bb:
49:1a:12:0a:83:2c:74:df:15:cd:77:de:d3:76:e1:
28:71:40:12:0b:16:6c:3e:1f:b5:1c:f0:94:39:3f:
93:6e:64:67:be:1d:a1:a2:cc:be:2a:27:9c:fe:88:
dc:82:b5:bd:04:65:f5:c3:cb:ea:33:af:03:9a:55:
b5:f4:ed:2a:00:13:40:8b:4e:39:a5:c4:ae:9c:db:
58:8c:d1:5e:87:33:24:18:91:a4:70:a2:e2:49:d0:
a2:8c:ee:a2:31:82:9e:86:eb:22:11:5c:6d:44:5f:
75:04:1c:36:c4:02:5a:cc:33:7b:b7:a5:0f:f4:8a:
e9:0e:ae:75:ae:08:42:8e:ce:c5:92:dd:38:5c:ad:
8c:f8:d4:73:35:32:43:c8:ed:0e:f9:f2:5b:0c:f6:
3a:ef:41:68:60:5c:ea:f8:e4:3a:51:f6:2d:4f:cc:
fe:75:27:3e:66:c7:59:ba:7e:1b:56:b2:1f:6a:ed:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:15:4D:32:B4:66:5A:8C:39:68:9C:F5:57:9A:15:02:99:62:28
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PdEVTTK0ZlqMOWic9VeaFQKZYig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.57.0/24
Signature Algorithm: sha256WithRSAEncryption
50:95:87:ae:2b:6a:d1:6f:ca:e1:44:01:07:f9:5f:20:30:be:
e3:e4:12:f3:b6:4a:55:d9:a4:98:43:53:37:5a:07:3b:80:66:
a5:95:e4:fb:e6:e6:c5:a0:ff:b3:41:be:b6:b7:4b:ca:be:9f:
8a:2b:5a:ca:2c:b6:b6:bb:9b:56:21:71:ed:2f:00:bd:c6:3d:
6c:1d:18:2f:be:5e:4d:87:55:b0:0f:df:9b:2d:05:07:33:d6:
21:9b:9b:d8:5c:b8:f5:b9:0e:ae:63:8a:32:25:59:d0:e3:2f:
a4:ad:af:13:cd:5e:5e:b4:75:7d:10:c8:fd:49:e2:1f:ce:b8:
7b:7a:f3:7f:55:88:69:09:47:d5:0d:f6:d1:16:f1:8b:b3:56:
ff:a7:35:40:35:67:f4:71:70:5f:0f:47:08:b3:31:93:39:f7:
f4:eb:fd:97:3d:48:7d:dc:db:78:97:1a:76:9f:19:ad:de:da:
53:60:82:2c:20:39:54:51:de:13:84:05:66:e3:62:78:42:e8:
76:68:cf:80:f2:64:c6:e2:b4:f3:1e:d9:9a:39:e9:90:60:c7:
bf:b9:08:b6:1e:33:ae:f4:3b:5d:9b:7c:9b:a3:f3:a5:8c:ba:
de:53:51:d2:fc:9e:4b:50:a3:92:5e:26:8f:61:8c:00:b2:e4:
b5:53:6f:9b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjaZHnenpxrwgP5owGbKEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGQxMTU0ZDMyYjQ2NjVhOGMzOTY4OWNmNTU3OWExNTAyOTk2MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZF3fKVwocPOqzLKshAebCJp0CUz
OatvK3OInyx2rp4vXIQ3f05Q54/Mb3MVApCHeWsonQcoSmT2DZybNGPdph2mz5OR
e2hvs7tJGhIKgyx03xXNd97TduEocUASCxZsPh+1HPCUOT+TbmRnvh2hosy+Kiec
/ojcgrW9BGX1w8vqM68DmlW19O0qABNAi045pcSunNtYjNFehzMkGJGkcKLiSdCi
jO6iMYKehusiEVxtRF91BBw2xAJazDN7t6UP9IrpDq51rghCjs7Fkt04XK2M+NRz
NTJDyO0O+fJbDPY670FoYFzq+OQ6UfYtT8z+dSc+ZsdZun4bVrIfau0oeQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFD3RFU0ytGZajDlonPVXmhUCmWIoMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1BkRVZUVEswWmxxTU9XaWM5VmVhRlFLWllpZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZJjkw
DQYJKoZIhvcNAQELBQADggEBAFCVh64ratFvyuFEAQf5XyAwvuPkEvO2SlXZpJhD
UzdaBzuAZqWV5Pvm5sWg/7NBvra3S8q+n4orWsostra7m1Yhce0vAL3GPWwdGC++
Xk2HVbAP35stBQcz1iGbm9hcuPW5Dq5jijIlWdDjL6StrxPNXl60dX0QyP1J4h/O
uHt6839ViGkJR9UN9tEW8YuzVv+nNUA1Z/RxcF8PRwizMZM59/Tr/Zc9SH3c23iX
GnafGa3e2lNggiwgOVRR3hOEBWbjYnhC6HZoz4DyZMbitPMe2Zo56ZBgx7+5CLYe
M670O12bfJuj86WMut5TUdL8nktQo5JeJo9hjACy5LVTb5s=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:37 2025 by rpki-client