Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa
File: tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa (raw, json)
Hash identifier: gVnI/4eE/aC58PSWg9zuIzqcxtqe9LJ1Nbo9TV7QxCQ=
Subject key identifier: B4:DB:C0:70:8B:75:01:F9:E6:AE:96:2B:F6:F6:24:90:59:DE:67:66
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019420D620B8E0C90C539B768C7B0E90DAF8
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197216
IP address blocks: 89.187.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:20:b8:e0:c9:0c:53:9b:76:8c:7b:0e:90:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4dbc0708b7501f9e6ae962bf6f6249059de6766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:cc:0f:3d:0e:48:7f:9d:ae:e5:45:f0:7d:
f6:87:9e:2d:22:d9:e0:bc:36:d9:ca:ee:7c:02:a6:
a0:88:73:c3:bf:b2:1d:d8:8d:65:7c:c0:ae:03:ce:
db:b9:c0:89:17:a4:6e:4a:46:5e:a0:d9:15:eb:41:
c3:74:1b:a2:93:2a:3d:a7:21:81:be:0f:2a:78:34:
09:2b:21:f3:34:4d:e7:b1:71:f7:7c:3b:76:2d:cb:
63:61:2d:a3:9d:ee:7c:2d:e5:e6:f0:ea:e1:ff:cf:
70:40:25:64:33:0e:9a:1c:55:b7:19:a0:8b:0b:b7:
ef:c6:8a:c9:86:62:6e:d2:e3:0e:db:2d:a7:d6:0b:
1b:3c:a5:eb:31:bb:4e:69:c4:fc:3f:fd:7b:9f:c4:
3e:35:db:ef:cd:42:4e:de:82:68:a5:a0:25:03:57:
b3:73:73:83:6c:c8:8e:73:18:a7:20:09:b1:e2:50:
db:32:dd:c3:22:de:e3:e8:b2:17:ab:64:15:73:1a:
0e:f6:40:20:52:87:01:3e:cd:b6:21:da:67:43:1a:
01:c5:1c:04:81:41:92:d3:9e:70:e4:da:5a:c3:b6:
26:88:06:28:5c:f2:c8:9e:6b:97:7b:d8:7c:d2:66:
bb:ce:c1:e5:d9:e3:94:1b:5e:37:6e:ba:ff:32:34:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:C0:70:8B:75:01:F9:E6:AE:96:2B:F6:F6:24:90:59:DE:67:66
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.83.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c5:17:ac:ab:4d:28:0c:62:fb:63:3f:df:aa:ac:7c:83:d9:
9a:88:54:e6:4d:6b:40:5d:0d:77:da:e9:9e:5d:f5:41:b7:de:
79:8f:f0:e1:49:b6:79:0e:7e:67:21:3e:88:70:ee:5b:1f:f7:
93:43:2a:69:53:3a:35:cc:b4:42:5c:f8:4b:c7:ff:7c:4c:5a:
31:f4:bf:cb:f9:05:b2:88:77:d3:24:76:de:f8:1f:b2:2f:22:
40:a2:63:41:56:48:b3:7a:91:7c:03:b6:b6:43:b5:68:02:e7:
85:38:0b:2d:47:21:16:eb:04:1a:5f:31:4a:f7:f1:f2:62:ec:
53:4e:2d:fd:80:48:69:94:29:a4:7a:d0:71:d6:06:63:2a:1e:
f5:eb:a7:c1:a8:ed:6f:34:83:e7:21:2f:77:f8:43:cd:c2:9d:
b8:fc:0d:dc:c5:07:70:ae:da:5c:ee:01:99:ab:f5:c5:b6:f5:
9b:1a:41:b5:eb:ac:fe:de:3f:8b:0d:fc:10:be:c3:01:1e:7a:
b0:9d:6b:f3:e5:0e:aa:a2:71:72:f5:49:37:a7:d1:a3:fe:91:
fc:61:bb:3a:6c:95:be:5f:d1:1c:42:56:d3:84:21:43:34:f2:
49:12:bc:1f:9f:9d:6f:1b:a8:79:67:3d:60:f2:e7:ef:72:cb:
c3:84:c9:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1iC44MkMU5t2jHsOkNr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjYyYWNlNjE1YjkwNmI0MmFiMjdmNGZiMWQyMDNkZjM2
ZDU0MzYwHhcNMjUwMTAxMDc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGRiYzA3MDhiNzUwMWY5ZTZhZTk2MmJmNmY2MjQ5MDU5ZGU2NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b3MDz0OSH+druVF8H32h54tItng
vDbZyu58AqagiHPDv7Id2I1lfMCuA87bucCJF6RuSkZeoNkV60HDdBuikyo9pyGB
vg8qeDQJKyHzNE3nsXH3fDt2LctjYS2jne58LeXm8Orh/89wQCVkMw6aHFW3GaCL
C7fvxorJhmJu0uMO2y2n1gsbPKXrMbtOacT8P/17n8Q+NdvvzUJO3oJopaAlA1ez
c3ODbMiOcxinIAmx4lDbMt3DIt7j6LIXq2QVcxoO9kAgUocBPs22IdpnQxoBxRwE
gUGS055w5Npaw7YmiAYoXPLInmuXe9h80ma7zsHl2eOUG143brr/MjTsyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLTbwHCLdQH55q6WK/b2JJBZ3mdmMB8GA1UdIwQY
MBaAFFO2Ks5hW5BrQqsn9PsdID3zbVQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDIt
OTcyYTRjM2RjM2YzLzEvdE52QWNJdDFBZm5tcnBZcjl2WWtrRm5lWjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDItOTcyYTRjM2RjM2Yz
LzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbtTMA0G
CSqGSIb3DQEBCwUAA4IBAQATxResq00oDGL7Yz/fqqx8g9maiFTmTWtAXQ132ume
XfVBt955j/DhSbZ5Dn5nIT6IcO5bH/eTQyppUzo1zLRCXPhLx/98TFox9L/L+QWy
iHfTJHbe+B+yLyJAomNBVkizepF8A7a2Q7VoAueFOAstRyEW6wQaXzFK9/HyYuxT
Ti39gEhplCmketBx1gZjKh7166fBqO1vNIPnIS93+EPNwp24/A3cxQdwrtpc7gGZ
q/XFtvWbGkG166z+3j+LDfwQvsMBHnqwnWvz5Q6qonFy9Uk3p9Gj/pH8Ybs6bJW+
X9EcQlbThCFDNPJJErwfn51vG6h5Zz1g8ufvcsvDhMlF
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:51 2025 by rpki-client