Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5h-XrAZYMnlnWZ9n9bdzSuaA470.roa
File: 5h-XrAZYMnlnWZ9n9bdzSuaA470.roa (raw, json)
Hash identifier: vVZJKVmhPJDUfANfzLW1gir9emTc4u8aGreB7R7Z+98=
Subject key identifier: E6:1F:97:AC:06:58:32:79:67:59:9F:67:F5:B7:73:4A:E6:80:E3:BD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6CD135DF4FFFA8298630DD4860D7B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5h-XrAZYMnlnWZ9n9bdzSuaA470.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 89.42.85.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cd:13:5d:f4:ff:fa:82:98:63:0d:d4:86:0d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e61f97ac0658327967599f67f5b7734ae680e3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:35:e1:d0:81:5a:be:29:c2:92:db:9d:63:
97:45:fe:b2:08:47:17:8b:77:4a:95:c7:ea:2e:fa:
f6:9c:d3:d0:60:72:33:46:73:59:c7:3f:a2:0f:86:
50:b4:0c:b4:d0:55:c9:1d:97:1c:f4:bc:8f:b4:6c:
d6:93:cb:b2:3e:41:2d:8d:9c:1e:42:38:b6:76:1f:
96:4c:64:23:a2:8b:55:81:a1:10:8c:c7:4a:57:0b:
59:8e:71:cd:83:04:41:c0:8b:35:71:81:e9:33:c4:
f7:37:30:f2:78:48:65:48:2e:a6:c6:86:75:04:21:
84:07:3f:a2:37:9d:a3:5f:1b:fd:77:f6:84:35:30:
62:4e:9a:04:50:06:bb:bc:4b:ab:06:86:d8:45:74:
e3:d9:d5:5b:e4:55:f0:82:3b:85:78:95:bd:27:67:
44:8b:bb:92:e8:9c:20:98:f3:2e:d6:38:a9:5a:20:
1b:da:ba:43:dd:10:a4:94:83:8c:ae:2f:d2:42:1b:
b1:f8:1a:d7:10:f6:06:dc:9d:0e:c6:25:f0:0d:87:
7b:82:0e:aa:01:4f:dd:e8:18:9a:9d:a7:e1:a3:dc:
41:79:4a:ca:ef:2e:80:59:06:f4:b3:e5:f9:48:2f:
0a:64:3e:f9:a6:2a:18:63:1e:00:65:5e:fd:79:56:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1F:97:AC:06:58:32:79:67:59:9F:67:F5:B7:73:4A:E6:80:E3:BD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5h-XrAZYMnlnWZ9n9bdzSuaA470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
89.46.2.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d9:00:cf:aa:a8:52:b2:c9:b5:b2:16:cf:92:76:61:a3:ca:
6e:c0:da:1a:e6:5b:1e:49:07:6b:5a:af:82:30:82:e0:21:6e:
ab:7d:35:78:07:2d:42:14:08:c6:d8:05:a0:b3:46:cc:23:7b:
5e:2c:2e:aa:3f:cd:69:91:af:18:42:81:3d:4d:fe:eb:3a:81:
f2:9c:89:03:46:d7:11:19:b1:09:dc:fd:5e:da:30:c7:90:c6:
25:35:f8:5e:73:f6:64:3f:fc:fc:72:ed:98:bc:40:c3:da:4d:
b6:63:28:43:a4:3c:42:9c:b0:e8:45:4c:58:d2:8d:3f:8d:75:
47:c5:af:9d:e9:e1:e5:97:1f:ea:43:79:15:8b:a6:1b:da:4d:
af:10:00:74:4b:4f:7f:db:83:18:71:cb:05:9c:33:ac:53:85:
9f:6e:78:aa:7b:a7:d8:d3:77:60:65:2c:de:b5:53:06:8a:4e:
0c:9d:ec:fa:f5:fb:e8:ba:3e:d0:0a:81:40:82:61:cf:7c:5d:
29:62:fb:ac:4e:d5:37:4e:83:52:98:a6:28:3d:62:78:77:4a:
d0:c0:26:87:70:23:88:b6:d1:95:7b:e9:65:87:f4:12:75:96:
ef:8d:2f:09:36:73:2b:9a:b5:5a:0b:b9:65:17:8e:e1:51:db:
cd:17:ba:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1s0TXfT/+oKYYw3Uhg17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjFmOTdhYzA2NTgzMjc5Njc1OTlmNjdmNWI3NzM0YWU2ODBlM2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMM14dCBWr4pwpLbnWOXRf6yCEcX
i3dKlcfqLvr2nNPQYHIzRnNZxz+iD4ZQtAy00FXJHZcc9LyPtGzWk8uyPkEtjZwe
Qji2dh+WTGQjootVgaEQjMdKVwtZjnHNgwRBwIs1cYHpM8T3NzDyeEhlSC6mxoZ1
BCGEBz+iN52jXxv9d/aENTBiTpoEUAa7vEurBobYRXTj2dVb5FXwgjuFeJW9J2dE
i7uS6JwgmPMu1jipWiAb2rpD3RCklIOMri/SQhux+BrXEPYG3J0OxiXwDYd7gg6q
AU/d6Bianafho9xBeUrK7y6AWQb0s+X5SC8KZD75pioYYx4AZV79eVZ1fQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOYfl6wGWDJ5Z1mfZ/W3c0rmgOO9MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvNWgtWHJBWllNbmxuV1o5bjliZHpTdWFBNDcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSpVAwQA
WS4CMA0GCSqGSIb3DQEBCwUAA4IBAQBV2QDPqqhSssm1shbPknZho8puwNoa5lse
SQdrWq+CMILgIW6rfTV4By1CFAjG2AWgs0bMI3teLC6qP81pka8YQoE9Tf7rOoHy
nIkDRtcRGbEJ3P1e2jDHkMYlNfhec/ZkP/z8cu2YvEDD2k22YyhDpDxCnLDoRUxY
0o0/jXVHxa+d6eHllx/qQ3kVi6Yb2k2vEAB0S09/24MYccsFnDOsU4Wfbniqe6fY
03dgZSzetVMGik4Mnez69fvouj7QCoFAgmHPfF0pYvusTtU3ToNSmKYoPWJ4d0rQ
wCaHcCOIttGVe+llh/QSdZbvjS8JNnMrmrVaC7llF47hUdvNF7oR
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:37:23 2025 by rpki-client