Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/durT3uh2Ky_24MEFwd5Si3_aqOE.roa
File: durT3uh2Ky_24MEFwd5Si3_aqOE.roa (raw, json)
Hash identifier: i0j2EhlYHuhS0ygdpSwrmJ+zKaf6MX39QT07/Pv8Mlw=
Subject key identifier: 76:EA:D3:DE:E8:76:2B:2F:F6:E0:C1:05:C1:DE:52:8B:7F:DA:A8:E1
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01955D5004537D8B0CFEC3395DA06955C7D6
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/durT3uh2Ky_24MEFwd5Si3_aqOE.roa
Signing time: Mon 03 Mar 2025 18:41:19 +0000
ROA not before: Mon 03 Mar 2025 18:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 89.187.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:50:04:53:7d:8b:0c:fe:c3:39:5d:a0:69:55:c7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Mar 3 18:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ead3dee8762b2ff6e0c105c1de528b7fdaa8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:eb:b0:59:f7:ac:48:cf:a1:28:8f:08:a5:
0e:f4:30:c8:f8:5b:d7:a5:51:5e:5d:e5:2c:e6:a5:
2a:64:8f:ca:d6:94:b8:12:5f:e0:bd:d2:99:52:8d:
26:3a:97:8c:cb:da:63:04:1c:06:73:37:74:71:22:
a4:61:14:9f:65:34:10:4d:9e:c7:17:b2:0f:4d:7c:
12:8e:39:be:fe:d0:05:97:a6:88:07:84:59:d8:55:
3b:8f:17:ce:d1:8d:bc:16:10:ab:1c:c8:62:6f:35:
66:93:d9:a5:1e:bb:31:50:16:53:54:f2:64:d3:c2:
48:69:3b:0d:dd:bf:3c:ae:7d:7d:52:b5:8c:08:d5:
fa:d4:c3:50:6e:03:76:6a:03:ec:13:9d:79:88:ee:
a1:f1:7a:dc:56:29:fd:4c:9a:7a:7d:2f:e2:f0:14:
27:fc:2f:0e:c7:ec:e2:a9:32:44:3b:c5:56:7f:dd:
82:48:86:f2:fd:71:1d:7e:e7:f9:8d:90:c2:17:24:
7e:5f:c4:43:e6:4e:4c:75:d8:89:5c:fd:5f:47:0d:
66:43:a4:30:24:6e:a1:5a:06:90:fa:c8:df:4c:40:
53:53:7b:a5:c2:09:85:7e:11:f7:ed:c7:68:61:05:
11:14:88:7d:86:08:03:2f:b0:8a:49:c5:2f:b9:29:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EA:D3:DE:E8:76:2B:2F:F6:E0:C1:05:C1:DE:52:8B:7F:DA:A8:E1
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/durT3uh2Ky_24MEFwd5Si3_aqOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0f:08:2e:2a:26:74:be:71:2e:b1:d1:a2:33:e4:45:52:d0:
95:f4:06:d2:95:eb:c9:55:ab:a2:1d:73:6a:c0:09:be:af:0c:
31:c1:d2:54:df:28:de:58:f0:61:43:80:9a:57:f5:5c:d3:b9:
88:6d:eb:db:59:7e:12:9f:77:98:a7:d9:03:4e:2e:e4:c5:10:
a3:84:6f:a6:1a:dc:c3:a5:cb:43:3a:d0:32:2f:56:9e:1b:5a:
3f:a0:4a:37:83:04:3c:d6:a0:a1:bf:11:96:f9:08:1f:a5:ef:
bd:0c:eb:5a:48:72:c2:42:bd:d7:b9:bb:09:84:93:30:aa:80:
4b:5d:bc:73:e8:3c:1d:98:d3:2b:70:b5:bb:0d:ff:f6:f0:a9:
32:42:41:e3:8b:9a:38:5e:02:ee:e5:a1:3e:0e:ab:8f:10:1f:
84:0c:31:d0:0a:71:3c:ca:cc:a2:14:95:eb:2e:3e:13:da:bd:
00:7f:e1:64:10:7c:48:6c:1e:e5:ac:3f:8b:a0:13:e6:a0:11:
51:5b:c7:45:7a:cf:4b:ee:12:1b:56:40:4d:19:96:6a:69:c4:
2b:72:f9:4d:a3:7d:20:8b:73:f9:e6:bb:c0:11:bc:dc:61:e1:
71:6f:31:cd:a6:1f:8c:10:60:16:31:62:cf:b9:24:a4:f7:8e:
f2:eb:1b:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVdUARTfYsM/sM5XaBpVcfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjUwMzAzMTg0MTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmVhZDNkZWU4NzYyYjJmZjZlMGMxMDVjMWRlNTI4YjdmZGFhOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EDrsFn3rEjPoSiPCKUO9DDI+FvX
pVFeXeUs5qUqZI/K1pS4El/gvdKZUo0mOpeMy9pjBBwGczd0cSKkYRSfZTQQTZ7H
F7IPTXwSjjm+/tAFl6aIB4RZ2FU7jxfO0Y28FhCrHMhibzVmk9mlHrsxUBZTVPJk
08JIaTsN3b88rn19UrWMCNX61MNQbgN2agPsE515iO6h8XrcVin9TJp6fS/i8BQn
/C8Ox+ziqTJEO8VWf92CSIby/XEdfuf5jZDCFyR+X8RD5k5MddiJXP1fRw1mQ6Qw
JG6hWgaQ+sjfTEBTU3ulwgmFfhH37cdoYQURFIh9hggDL7CKScUvuSl2pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbq097odisv9uDBBcHeUot/2qjhMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvZHVyVDN1aDJLeV8yNE1FRndkNVNpM19hcU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbseMA0G
CSqGSIb3DQEBCwUAA4IBAQAODwguKiZ0vnEusdGiM+RFUtCV9AbSlevJVauiHXNq
wAm+rwwxwdJU3yjeWPBhQ4CaV/Vc07mIbevbWX4Sn3eYp9kDTi7kxRCjhG+mGtzD
pctDOtAyL1aeG1o/oEo3gwQ81qChvxGW+Qgfpe+9DOtaSHLCQr3XubsJhJMwqoBL
Xbxz6DwdmNMrcLW7Df/28KkyQkHji5o4XgLu5aE+DquPEB+EDDHQCnE8ysyiFJXr
Lj4T2r0Af+FkEHxIbB7lrD+LoBPmoBFRW8dFes9L7hIbVkBNGZZqacQrcvlNo30g
i3P55rvAEbzcYeFxbzHNph+MEGAWMWLPuSSk947y6xv9
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:59 2025 by rpki-client