Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/asdYyJ4nRJ3RdcGK9wo6QRRQbAg.roa
File: asdYyJ4nRJ3RdcGK9wo6QRRQbAg.roa (raw, json)
Hash identifier: KzjHFrTPJD+uYVuRsFIWgsYS3jPiyRUMYstohv1GySU=
Subject key identifier: 6A:C7:58:C8:9E:27:44:9D:D1:75:C1:8A:F7:0A:3A:41:14:50:6C:08
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423698CE4B377C31D6E647BDC235898A7
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/asdYyJ4nRJ3RdcGK9wo6QRRQbAg.roa
Signing time: Wed 01 Jan 2025 19:48:27 +0000
ROA not before: Wed 01 Jan 2025 19:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34714
IP address blocks: 89.40.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8c:e4:b3:77:c3:1d:6e:64:7b:dc:23:58:98:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac758c89e27449dd175c18af70a3a4114506c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:92:f0:d9:95:65:1f:9b:c2:94:f4:3d:b6:
78:cc:f6:2d:5d:e4:44:76:0c:60:9f:8c:0c:62:60:
93:c6:61:56:51:25:20:ef:b9:4f:b4:18:b6:3c:11:
64:b9:b1:45:f9:61:61:0f:94:65:be:7e:12:9b:4a:
ad:6d:db:a6:b6:50:50:c8:1d:65:32:f6:25:78:67:
de:f5:e1:c5:66:55:b6:9e:59:1e:50:db:68:f7:9f:
42:f4:a2:a5:3c:b1:47:e8:61:67:56:39:cd:35:51:
3c:c4:7e:c4:55:c5:d5:24:2e:82:a1:44:dd:7d:1e:
35:01:71:2e:22:0b:86:30:b6:85:2b:90:e6:2f:cf:
0a:c9:4c:01:f1:a4:de:ae:95:6e:76:bc:ea:5c:a9:
41:9d:25:60:87:0b:6b:f6:ab:c8:1d:d1:3a:e0:52:
51:3a:7c:af:8a:32:8e:b5:5b:91:fa:31:80:37:48:
1d:4d:c3:cb:29:79:39:66:5d:1a:15:35:b2:cd:74:
92:35:91:bb:95:c1:fd:63:c0:4b:48:9d:ef:c5:ad:
0e:29:f5:c6:73:73:ab:fd:a9:3a:13:e9:c7:b3:74:
c1:c9:71:0a:f5:59:8c:a4:37:f9:f1:4c:c5:6e:41:
1d:8d:32:89:db:31:f8:d9:9f:be:2b:40:74:fc:74:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:58:C8:9E:27:44:9D:D1:75:C1:8A:F7:0A:3A:41:14:50:6C:08
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/asdYyJ4nRJ3RdcGK9wo6QRRQbAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1e:30:68:a5:db:62:f7:6b:15:2d:ae:63:76:14:6e:bd:5c:
c9:79:fa:9c:9d:2a:f0:28:79:1a:69:0c:0d:e9:f4:a8:c8:cc:
c7:0d:99:6c:c2:87:aa:39:bb:3a:80:2e:9a:5a:dd:56:48:4c:
20:c4:d9:ed:66:61:cc:50:26:7d:2e:04:c2:69:7f:ee:3e:05:
6f:d9:26:30:28:fc:52:07:30:27:dc:a1:ec:9f:b3:ae:5c:22:
c7:19:4f:a1:e1:a4:d6:fe:13:c5:6f:2f:a1:9c:74:b7:30:62:
af:9c:35:8a:64:a7:d7:cb:95:8f:b3:98:6f:48:cd:62:f9:73:
b7:c0:2d:1e:4d:1f:d6:84:e0:74:79:6d:6f:f5:cc:70:53:b5:
37:b1:49:98:4c:48:9d:fe:25:23:c2:50:0a:36:b9:db:01:c5:
9a:43:99:db:ff:ee:fe:59:6f:c7:5d:69:c6:47:e8:cd:a7:d8:
ec:5e:0a:0a:27:8a:3a:48:77:d0:d7:df:1d:e2:05:8b:de:1f:
d8:7d:9b:ea:97:75:9f:f3:7e:03:d9:27:c7:75:ae:1f:7e:33:
0c:65:47:27:eb:0e:8f:86:cc:39:7d:8a:1d:41:58:71:40:fc:
ad:8d:b5:a1:f0:58:fa:df:ee:fb:b9:9e:d8:ab:ec:0b:b1:3f:
34:72:25:da
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjaYzks3fDHW5ke9wjWJinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWM3NThjODllMjc0NDlkZDE3NWMxOGFmNzBhM2E0MTE0NTA2YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6WS8NmVZR+bwpT0PbZ4zPYtXeRE
dgxgn4wMYmCTxmFWUSUg77lPtBi2PBFkubFF+WFhD5Rlvn4Sm0qtbdumtlBQyB1l
MvYleGfe9eHFZlW2nlkeUNto959C9KKlPLFH6GFnVjnNNVE8xH7EVcXVJC6CoUTd
fR41AXEuIguGMLaFK5DmL88KyUwB8aTerpVudrzqXKlBnSVghwtr9qvIHdE64FJR
OnyvijKOtVuR+jGAN0gdTcPLKXk5Zl0aFTWyzXSSNZG7lcH9Y8BLSJ3vxa0OKfXG
c3Or/ak6E+nHs3TByXEK9VmMpDf58UzFbkEdjTKJ2zH42Z++K0B0/HR6GQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGrHWMieJ0Sd0XXBivcKOkEUUGwIMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2FzZFl5SjRuUkozUmRjR0s5d282UVJSUWJBZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKCIw
DQYJKoZIhvcNAQELBQADggEBAG8eMGil22L3axUtrmN2FG69XMl5+pydKvAoeRpp
DA3p9KjIzMcNmWzCh6o5uzqALppa3VZITCDE2e1mYcxQJn0uBMJpf+4+BW/ZJjAo
/FIHMCfcoeyfs65cIscZT6HhpNb+E8VvL6GcdLcwYq+cNYpkp9fLlY+zmG9IzWL5
c7fALR5NH9aE4HR5bW/1zHBTtTexSZhMSJ3+JSPCUAo2udsBxZpDmdv/7v5Zb8dd
acZH6M2n2OxeCgonijpId9DX3x3iBYveH9h9m+qXdZ/zfgPZJ8d1rh9+MwxlRyfr
Do+GzDl9ih1BWHFA/K2NtaHwWPrf7vu5ntir7AuxPzRyJdo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:37 2025 by rpki-client