Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Qn1FZ69JB8DvxfTpuj7UOgdfC9I.roa
File: Qn1FZ69JB8DvxfTpuj7UOgdfC9I.roa (raw, json)
Hash identifier: sSNoejNhDx3NCfNLZ3K8fSH77kRDgvNVRYKNQ6jdkQE=
Subject key identifier: 42:7D:45:67:AF:49:07:C0:EF:C5:F4:E9:BA:3E:D4:3A:07:5F:0B:D2
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD52662063662C0A439FA1A6ACC2014
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Qn1FZ69JB8DvxfTpuj7UOgdfC9I.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48669
IP address blocks: 89.38.104.0/24 maxlen: 24
93.115.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:26:62:06:36:62:c0:a4:39:fa:1a:6a:cc:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=427d4567af4907c0efc5f4e9ba3ed43a075f0bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:0e:b9:ca:78:4d:e7:3a:00:ea:33:5d:ad:
4a:1e:57:1a:89:99:4a:b4:ce:56:f8:82:41:02:6d:
ae:d9:2a:56:31:27:72:41:a7:d9:65:52:ac:ea:06:
b4:cb:fd:79:cf:15:5f:de:a3:50:54:c8:4c:2c:40:
6f:80:52:90:63:f0:ea:7e:d9:4a:6a:d1:3e:a1:33:
3f:75:b0:61:3e:ac:f0:69:f4:4d:f2:f7:e5:f4:ea:
38:25:69:44:7d:db:7e:fc:bd:ae:5c:f6:d3:f1:c0:
9f:85:eb:aa:e1:85:2a:f2:35:e9:9a:63:ef:6b:51:
b3:95:0c:e5:73:30:c0:58:56:90:df:b8:c2:46:5f:
e3:49:af:d3:f9:36:49:15:a9:36:f8:33:92:53:1f:
e2:a3:78:de:1b:ab:d5:fb:5e:a3:46:25:25:d1:6a:
00:c3:21:94:63:36:07:df:92:f2:f5:5e:9f:c8:28:
64:0c:87:fd:85:ec:f6:e2:c3:74:47:5f:19:b2:9a:
14:91:07:8a:91:77:5c:4c:a4:a6:f5:98:c2:8e:3e:
4a:52:27:64:c1:66:6d:ff:94:0e:48:2c:e9:3b:7e:
68:44:b2:cf:03:7f:3b:4c:34:8a:1a:44:aa:28:3b:
24:2a:c6:77:e9:a7:cc:09:80:da:36:83:10:39:33:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:45:67:AF:49:07:C0:EF:C5:F4:E9:BA:3E:D4:3A:07:5F:0B:D2
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Qn1FZ69JB8DvxfTpuj7UOgdfC9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.104.0/24
93.115.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f8:e2:93:87:ae:97:1b:fc:cc:c1:9f:30:1d:2a:32:5f:2d:
6d:2d:af:e5:51:ab:c8:15:06:be:f8:15:15:5a:38:ed:63:0d:
97:0e:54:bd:70:5b:3d:2d:f5:fc:ca:4b:e9:02:d0:24:ef:fe:
f1:e8:22:e6:cc:3a:b7:8d:d1:fa:82:66:9b:62:84:7e:9a:a0:
b4:4d:0c:4b:29:f1:be:e7:6e:7f:aa:40:1a:27:19:4f:c0:93:
da:6c:6b:b6:f4:42:45:59:31:fd:73:bd:2f:df:08:9d:1e:e6:
df:76:0b:ad:ac:f6:3e:9a:d4:77:b7:01:19:87:6e:c4:e0:06:
34:e1:31:f6:57:5a:3a:72:ff:fc:3c:be:66:48:ae:b5:08:4b:
1e:0f:b5:f3:1c:fc:94:c1:71:03:44:75:14:d8:ee:8f:fe:64:
49:a7:ef:ba:45:fe:f7:61:d5:8d:27:d5:ba:b8:b3:50:a2:c3:
c7:a4:be:2f:dd:18:46:ea:71:9c:1d:59:d1:89:81:c9:36:a8:
7b:3f:9a:32:72:54:36:63:39:7e:c6:23:6f:38:39:29:e1:6e:
c2:04:d2:6b:0a:6c:5f:fc:9f:7a:00:74:53:0b:4a:91:f9:c9:
63:a7:50:f1:14:3e:bb:79:52:4e:d8:7a:37:5f:0c:03:78:fc:
b4:ab:27:24
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv1SZiBjZiwKQ5+hpqzCAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjdkNDU2N2FmNDkwN2MwZWZjNWY0ZTliYTNlZDQzYTA3NWYwYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjQOucp4Tec6AOozXa1KHlcaiZlK
tM5W+IJBAm2u2SpWMSdyQafZZVKs6ga0y/15zxVf3qNQVMhMLEBvgFKQY/DqftlK
atE+oTM/dbBhPqzwafRN8vfl9Oo4JWlEfdt+/L2uXPbT8cCfheuq4YUq8jXpmmPv
a1GzlQzlczDAWFaQ37jCRl/jSa/T+TZJFak2+DOSUx/io3jeG6vV+16jRiUl0WoA
wyGUYzYH35Ly9V6fyChkDIf9hez24sN0R18ZspoUkQeKkXdcTKSm9ZjCjj5KUidk
wWZt/5QOSCzpO35oRLLPA387TDSKGkSqKDskKsZ36afMCYDaNoMQOTMoIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEJ9RWevSQfA78X06bo+1DoHXwvSMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1FuMUZaNjlKQjhEdnhmVHB1ajdVT2dkZkM5SS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABZJmgD
BABdcyAwDQYJKoZIhvcNAQELBQADggEBAA744pOHrpcb/MzBnzAdKjJfLW0tr+VR
q8gVBr74FRVaOO1jDZcOVL1wWz0t9fzKS+kC0CTv/vHoIubMOreN0fqCZptihH6a
oLRNDEsp8b7nbn+qQBonGU/Ak9psa7b0QkVZMf1zvS/fCJ0e5t92C62s9j6a1He3
ARmHbsTgBjThMfZXWjpy//w8vmZIrrUISx4PtfMc/JTBcQNEdRTY7o/+ZEmn77pF
/vdh1Y0n1bq4s1Ciw8ekvi/dGEbqcZwdWdGJgck2qHs/mjJyVDZjOX7GI284OSnh
bsIE0msKbF/8n3oAdFMLSpH5yWOnUPEUPrt5Uk7YejdfDAN4/LSrJyQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:35 2025 by rpki-client