Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2603_4eYDWCGygcGL8EXAGU4HA0.roa
File: 2603_4eYDWCGygcGL8EXAGU4HA0.roa (raw, json)
Hash identifier: QUWeEpOeu3h2/mqcQxjWEZtD1hcV6BWhRrsr6ABTzA8=
Subject key identifier: DB:AD:37:FF:87:98:0D:60:86:CA:07:06:2F:C1:17:00:65:38:1C:0D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195A2EE2368D7796252F8003DC3106A26D8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2603_4eYDWCGygcGL8EXAGU4HA0.roa
Signing time: Mon 17 Mar 2025 07:07:50 +0000
ROA not before: Mon 17 Mar 2025 07:07:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:ee:23:68:d7:79:62:52:f8:00:3d:c3:10:6a:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 17 07:07:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbad37ff87980d6086ca07062fc1170065381c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:b0:90:a1:84:99:61:62:e2:d8:6f:43:2f:
af:9d:74:06:f8:19:6c:94:b4:32:75:12:a1:69:70:
97:eb:f8:24:4d:df:36:e5:55:3e:e5:d8:54:8a:ce:
9f:30:0f:74:ed:46:a1:75:1a:53:b0:5e:7d:8a:b4:
88:c7:6b:12:93:b6:65:98:5d:1b:ea:d6:a6:59:19:
be:01:e2:e3:80:22:d7:f4:bc:87:8c:b0:e6:b5:ea:
9b:d7:2f:c7:a5:f4:81:5d:f8:7f:29:1f:20:00:41:
30:37:d5:64:0d:d8:94:eb:9c:9a:0d:26:5f:6e:f0:
f1:5c:43:91:07:60:94:5f:64:07:38:eb:7a:14:a8:
b2:a7:89:0b:bc:ad:86:fb:fb:b8:b8:66:08:f0:20:
b5:5a:4e:c3:e0:a8:7f:f3:08:51:54:c5:d3:b2:87:
fe:5a:b1:68:46:bf:c8:c0:be:50:d8:60:0e:f9:85:
9c:9b:3e:ba:e0:dd:89:bc:63:46:f7:a0:78:fe:15:
b2:fc:c1:a7:44:2b:58:e6:50:2c:4c:9e:40:de:85:
fd:45:c5:1a:dd:81:07:be:82:86:13:3a:33:ed:2c:
dc:c4:60:25:74:b6:19:70:47:92:79:05:1a:37:83:
5c:e2:6e:02:87:21:83:23:8d:16:fe:ff:b5:78:4e:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AD:37:FF:87:98:0D:60:86:CA:07:06:2F:C1:17:00:65:38:1C:0D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2603_4eYDWCGygcGL8EXAGU4HA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
12:6a:70:b5:0f:40:a0:8c:f4:2e:d4:9b:b7:c1:db:b9:fd:1d:
4d:77:15:88:a4:d3:dd:4a:64:b3:a4:3b:ea:62:bf:e7:98:fa:
45:98:e7:08:fd:50:fd:54:fc:18:04:0f:7e:6c:3d:83:26:8d:
87:83:3b:0f:f0:58:49:ca:36:31:67:4d:a1:e9:6a:d4:67:31:
56:0b:0b:01:ca:f3:84:12:5b:56:48:a4:09:7d:0a:9e:1e:2e:
9c:3e:09:4e:59:c0:21:c3:ca:50:98:f8:2b:cd:aa:eb:e8:7a:
3d:3f:c6:fc:22:0a:79:e0:da:08:2f:b7:19:16:da:e0:4f:b8:
f7:63:34:8c:59:99:4a:06:89:9f:a7:5e:64:33:80:d5:3e:95:
79:aa:12:dd:a1:22:e2:26:03:96:f8:0b:f9:9c:6c:5d:b8:2a:
d0:a8:4d:23:0e:ee:1e:9f:d4:43:8e:3e:10:cb:25:f7:b9:57:
c1:cf:2a:d3:77:ff:1c:87:8c:13:62:3f:f3:29:3e:f0:2f:0b:
3f:f2:18:72:f7:63:49:71:8e:b5:b8:2b:78:88:08:54:ed:9e:
73:d7:a2:f5:df:0b:ba:03:b3:7a:9a:b7:4b:3d:59:a5:80:56:
3f:e1:f5:2e:b7:a2:02:ed:e0:92:65:37:d1:73:5d:fc:1c:a0:
78:a5:23:3d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZWi7iNo13liUvgAPcMQaibYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMzE3MDcwNzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmFkMzdmZjg3OTgwZDYwODZjYTA3MDYyZmMxMTcwMDY1MzgxYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIOwkKGEmWFi4thvQy+vnXQG+Bls
lLQydRKhaXCX6/gkTd825VU+5dhUis6fMA907UahdRpTsF59irSIx2sSk7ZlmF0b
6tamWRm+AeLjgCLX9LyHjLDmteqb1y/HpfSBXfh/KR8gAEEwN9VkDdiU65yaDSZf
bvDxXEORB2CUX2QHOOt6FKiyp4kLvK2G+/u4uGYI8CC1Wk7D4Kh/8whRVMXTsof+
WrFoRr/IwL5Q2GAO+YWcmz664N2JvGNG96B4/hWy/MGnRCtY5lAsTJ5A3oX9RcUa
3YEHvoKGEzoz7SzcxGAldLYZcEeSeQUaN4Nc4m4ChyGDI40W/v+1eE4OLwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNutN/+HmA1ghsoHBi/BFwBlOBwNMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMjYwM180ZVlEV0NHeWdjR0w4RVhBR1U0SEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZKlED
BAJZKlAwDQYJKoZIhvcNAQELBQADggEBABJqcLUPQKCM9C7Um7fB27n9HU13FYik
091KZLOkO+piv+eY+kWY5wj9UP1U/BgED35sPYMmjYeDOw/wWEnKNjFnTaHpatRn
MVYLCwHK84QSW1ZIpAl9Cp4eLpw+CU5ZwCHDylCY+CvNquvoej0/xvwiCnng2ggv
txkW2uBPuPdjNIxZmUoGiZ+nXmQzgNU+lXmqEt2hIuImA5b4C/mcbF24KtCoTSMO
7h6f1EOOPhDLJfe5V8HPKtN3/xyHjBNiP/MpPvAvCz/yGHL3Y0lxjrW4K3iICFTt
nnPXovXfC7oDs3qat0s9WaWAVj/h9S63ogLt4JJlN9FzXfwcoHilIz0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:39:06 2025 by rpki-client