Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/dZtDVAOFQQo8RrLeSZ7Lrg-rAbM.roa
File: dZtDVAOFQQo8RrLeSZ7Lrg-rAbM.roa (raw, json)
Hash identifier: WFU0D+7QECGpAhY4ndj9Wau9n6upBKewzpaPewwZFzo=
Subject key identifier: 75:9B:43:54:03:85:41:0A:3C:46:B2:DE:49:9E:CB:AE:0F:AB:01:B3
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0181D486C4055E1C0E4D2EE6DE25A7D30A4A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/dZtDVAOFQQo8RrLeSZ7Lrg-rAbM.roa
Signing time: Wed 06 Jul 2022 17:20:10 +0000
ROA not before: Wed 06 Jul 2022 17:20:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58023
IP address blocks: 89.47.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:86:c4:05:5e:1c:0e:4d:2e:e6:de:25:a7:d3:0a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 6 17:20:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=759b43540385410a3c46b2de499ecbae0fab01b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:57:07:13:4b:9c:7e:64:62:25:ae:02:3c:
41:82:fc:e1:67:ba:95:f2:f3:c6:60:6e:72:16:8e:
4f:20:45:98:6c:05:5d:bf:79:87:7f:5f:4a:1c:31:
85:de:6a:12:b8:41:48:b6:28:0b:94:4e:50:e9:5e:
00:21:78:49:ef:13:e3:d8:9a:84:a2:a3:9b:98:79:
19:ce:79:5a:50:64:61:51:ad:a1:0f:02:57:c7:f1:
f9:b7:37:02:24:18:9c:1a:7b:67:98:f8:77:cf:0d:
9e:5e:ad:3e:08:68:3c:ca:e8:f5:4a:38:85:38:46:
86:54:8a:7a:d3:55:51:3f:15:68:16:e3:9e:2b:89:
2b:0f:2a:45:e6:ee:b1:05:8c:3c:b6:fe:a9:93:d8:
33:55:53:51:a0:ee:58:c4:08:0a:e8:6f:84:f4:b9:
7d:a0:6c:0a:41:8c:1c:bc:72:3c:c3:84:3d:9e:c4:
97:1a:89:25:a2:57:c1:f8:c7:20:68:d4:3e:69:00:
f8:f2:29:c2:a8:f5:50:cc:87:19:a5:15:1d:df:5a:
27:30:9c:a8:8f:0b:e7:45:9b:07:7b:36:6c:34:b9:
64:be:91:13:0d:d0:8a:b8:88:18:20:7c:0b:bd:91:
27:6d:79:d3:a4:4f:97:1b:87:8e:96:3a:1b:87:6e:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9B:43:54:03:85:41:0A:3C:46:B2:DE:49:9E:CB:AE:0F:AB:01:B3
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/dZtDVAOFQQo8RrLeSZ7Lrg-rAbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b4:df:4c:0e:5f:4e:c4:ec:ef:38:b0:a4:47:5d:6f:22:11:
03:c8:42:4c:1c:b8:78:ad:fa:e9:63:0f:de:44:76:e5:6c:8d:
53:83:f4:ff:66:38:89:4b:7b:d5:b8:04:2f:39:85:00:b4:13:
97:10:0f:b4:07:84:d7:24:58:4d:a4:6f:ab:10:e5:c8:f4:31:
f2:d4:1b:8f:34:b1:c0:41:54:2c:21:a7:85:a9:29:58:89:75:
39:d9:89:59:15:52:61:a5:e0:76:3a:99:05:df:c4:69:97:4e:
ef:a5:d1:2c:a4:43:9a:4d:e7:c3:96:83:66:8f:40:dd:76:04:
58:c4:01:e0:7d:ad:1a:3a:9a:7d:13:63:cc:e8:64:09:b9:7d:
b0:31:3f:10:6a:a1:10:48:2d:79:55:91:c3:f0:41:96:0a:a2:
ce:d4:92:2b:1d:db:6e:cb:97:ac:01:b1:46:40:10:3b:20:da:
88:1f:24:d1:5d:fb:1a:e9:64:af:ec:b4:9b:7f:24:18:86:04:
66:04:52:e1:5c:1a:11:9a:4f:23:f1:e5:f1:e1:a1:96:cc:c3:
f7:79:ca:36:b1:4f:65:1b:3d:c7:a2:46:ef:d3:bc:a1:4b:a5:
b9:a8:ce:d0:7d:d3:d6:00:b0:bb:cc:cb:08:3e:4c:e0:31:73:
82:18:fa:ca
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYHUhsQFXhwOTS7m3iWn0wpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjIwNzA2MTcyMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTliNDM1NDAzODU0MTBhM2M0NmIyZGU0OTllY2JhZTBmYWIwMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz1XBxNLnH5kYiWuAjxBgvzhZ7qV
8vPGYG5yFo5PIEWYbAVdv3mHf19KHDGF3moSuEFItigLlE5Q6V4AIXhJ7xPj2JqE
oqObmHkZznlaUGRhUa2hDwJXx/H5tzcCJBicGntnmPh3zw2eXq0+CGg8yuj1SjiF
OEaGVIp601VRPxVoFuOeK4krDypF5u6xBYw8tv6pk9gzVVNRoO5YxAgK6G+E9Ll9
oGwKQYwcvHI8w4Q9nsSXGoklolfB+McgaNQ+aQD48inCqPVQzIcZpRUd31onMJyo
jwvnRZsHezZsNLlkvpETDdCKuIgYIHwLvZEnbXnTpE+XG4eOljobh24TTwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHWbQ1QDhUEKPEay3kmey64PqwGzMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2RadERWQU9GUVFvOFJyTGVTWjdMcmctckFiTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZL/ww
DQYJKoZIhvcNAQELBQADggEBAJq030wOX07E7O84sKRHXW8iEQPIQkwcuHit+ulj
D95EduVsjVOD9P9mOIlLe9W4BC85hQC0E5cQD7QHhNckWE2kb6sQ5cj0MfLUG480
scBBVCwhp4WpKViJdTnZiVkVUmGl4HY6mQXfxGmXTu+l0SykQ5pN58OWg2aPQN12
BFjEAeB9rRo6mn0TY8zoZAm5fbAxPxBqoRBILXlVkcPwQZYKos7Ukisd227Ll6wB
sUZAEDsg2ogfJNFd+xrpZK/stJt/JBiGBGYEUuFcGhGaTyPx5fHhoZbMw/d5yjax
T2UbPceiRu/TvKFLpbmoztB909YAsLvMywg+TOAxc4IY+so=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:49 2025 by rpki-client