Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0Qf24lBlSIQLm0Z7Lri8yI6XKJs.roa
File: 0Qf24lBlSIQLm0Z7Lri8yI6XKJs.roa (raw, json)
Hash identifier: oEK1Yke6plzWGoUkqSyGdsPtZzM6ChRgLJxhU9vzoY0=
Subject key identifier: D1:07:F6:E2:50:65:48:84:0B:9B:46:7B:2E:B8:BC:C8:8E:97:28:9B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194CC8EEEF45F527D287D78F38EB3754DE7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0Qf24lBlSIQLm0Z7Lri8yI6XKJs.roa
Signing time: Mon 03 Feb 2025 16:05:06 +0000
ROA not before: Mon 03 Feb 2025 16:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 89.34.229.0/24 maxlen: 24
89.37.197.0/24 maxlen: 24
89.47.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:8e:ee:f4:5f:52:7d:28:7d:78:f3:8e:b3:75:4d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 3 16:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d107f6e2506548840b9b467b2eb8bcc88e97289b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:b0:91:d3:df:8f:05:3f:4c:1c:56:fc:c1:
df:c4:6f:bd:72:54:4e:12:13:fc:58:ab:de:68:59:
b3:5e:90:c2:5a:c5:4a:5d:5b:1e:7b:b8:83:3d:31:
d0:9d:7b:45:9a:14:8e:1c:32:08:8e:ab:7f:22:32:
bb:da:c9:d6:bc:05:c0:93:e5:4f:6c:2d:08:92:e3:
db:5a:ff:42:21:63:33:e8:27:ab:d1:b4:1d:80:e9:
4e:0e:c8:0b:85:69:d5:23:64:ae:9a:7a:61:af:95:
37:af:a5:d1:36:ff:7f:4a:7a:70:71:19:03:ee:8e:
f3:7f:3a:5e:31:e6:57:41:c0:7a:62:9c:fa:ba:75:
ee:cf:74:9b:34:3e:59:4b:eb:6a:16:7e:9b:11:bf:
0f:df:14:86:f8:b8:e5:2d:5f:d3:33:b1:ce:fc:3a:
75:f3:05:05:5e:7c:b4:2d:68:a2:7b:13:02:a8:1d:
6a:fa:9e:c3:d5:92:b8:cb:6a:cb:ef:f5:e2:73:35:
4d:92:f9:ec:0a:5a:14:4f:37:35:c5:0a:1e:48:b0:
8a:14:32:c3:38:1a:b3:f4:c9:a2:e8:29:9c:59:0a:
4a:a3:0c:19:69:10:cc:04:28:11:4b:66:d9:59:44:
97:cb:99:10:d9:b8:e7:a1:8c:21:b9:e0:3f:6d:80:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:07:F6:E2:50:65:48:84:0B:9B:46:7B:2E:B8:BC:C8:8E:97:28:9B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0Qf24lBlSIQLm0Z7Lri8yI6XKJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.229.0/24
89.37.197.0/24
89.47.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:95:e6:96:a1:b6:28:39:48:0f:4c:78:7b:0f:ff:82:ff:44:
4a:4c:e3:17:99:32:a0:1a:ec:e6:e6:f5:98:86:d9:5d:a7:d4:
53:7e:c0:41:96:a5:a6:f6:1c:32:74:dd:33:17:f9:50:c7:06:
04:49:57:30:7c:69:0a:f7:dd:1e:f9:15:e6:dc:94:3a:b5:8f:
f1:0d:b4:ee:f5:ca:7e:6a:15:f8:de:4d:b0:46:46:fc:ed:7d:
60:ab:67:bc:03:33:6b:b6:8b:c9:16:fb:95:f7:9f:ed:3d:3b:
05:e4:4d:4c:77:e4:7e:5b:2e:d2:01:28:1d:f1:59:3c:9e:f3:
29:c3:f1:bd:d1:b3:68:04:f1:3d:b5:90:b3:d7:38:7e:8d:a2:
aa:28:87:89:22:ec:3e:ab:a8:fd:d7:ac:10:8a:9b:1f:8d:60:
7a:87:2e:ee:7b:1d:06:92:1f:20:d3:2d:6b:66:4a:05:36:ad:
da:56:cf:5e:63:a9:8a:c1:01:84:35:84:2c:27:79:7e:4d:85:
f7:6d:a1:10:a6:32:1b:ef:ad:ea:9e:b6:cf:27:4a:33:5b:0f:
55:32:de:ca:8e:02:8c:04:2f:da:7a:10:e2:d8:d4:fd:bc:00:
08:3f:19:8d:a7:2b:71:60:bb:b7:a3:51:8c:87:e6:5a:47:ea:
f1:de:92:9f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZTMju70X1J9KH14846zdU3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMjAzMTYwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTA3ZjZlMjUwNjU0ODg0MGI5YjQ2N2IyZWI4YmNjODhlOTcyODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7qwkdPfjwU/TBxW/MHfxG+9clRO
EhP8WKveaFmzXpDCWsVKXVsee7iDPTHQnXtFmhSOHDIIjqt/IjK72snWvAXAk+VP
bC0IkuPbWv9CIWMz6Cer0bQdgOlODsgLhWnVI2Sumnphr5U3r6XRNv9/SnpwcRkD
7o7zfzpeMeZXQcB6Ypz6unXuz3SbND5ZS+tqFn6bEb8P3xSG+LjlLV/TM7HO/Dp1
8wUFXny0LWiiexMCqB1q+p7D1ZK4y2rL7/XiczVNkvnsCloUTzc1xQoeSLCKFDLD
OBqz9Mmi6CmcWQpKowwZaRDMBCgRS2bZWUSXy5kQ2bjnoYwhueA/bYBn8QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNEH9uJQZUiEC5tGey64vMiOlyibMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMFFmMjRsQmxTSVFMbTBaN0xyaTh5STZYS0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSLlAwQA
WSXFAwQAWS95MA0GCSqGSIb3DQEBCwUAA4IBAQAQleaWobYoOUgPTHh7D/+C/0RK
TOMXmTKgGuzm5vWYhtldp9RTfsBBlqWm9hwydN0zF/lQxwYESVcwfGkK990e+RXm
3JQ6tY/xDbTu9cp+ahX43k2wRkb87X1gq2e8AzNrtovJFvuV95/tPTsF5E1Md+R+
Wy7SASgd8Vk8nvMpw/G90bNoBPE9tZCz1zh+jaKqKIeJIuw+q6j916wQipsfjWB6
hy7uex0Gkh8g0y1rZkoFNq3aVs9eY6mKwQGENYQsJ3l+TYX3baEQpjIb763qnrbP
J0ozWw9VMt7KjgKMBC/aehDi2NT9vAAIPxmNpytxYLu3o1GMh+ZaR+rx3pKf
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:25 2025 by rpki-client