Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OgijKHN6oBheDKTjSl5ZV_jMAn8.roa
File: OgijKHN6oBheDKTjSl5ZV_jMAn8.roa (raw, json)
Hash identifier: 54BWE39QAKa0NEUs0YNFB+0b6M6R2R+pB7jqQHO7aKE=
Subject key identifier: 3A:08:A3:28:73:7A:A0:18:5E:0C:A4:E3:4A:5E:59:57:F8:CC:02:7F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194B7FDBC6E31264CD34AE15416B070D305
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OgijKHN6oBheDKTjSl5ZV_jMAn8.roa
Signing time: Thu 30 Jan 2025 16:14:06 +0000
ROA not before: Thu 30 Jan 2025 16:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147293
IP address blocks: 89.43.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:fd:bc:6e:31:26:4c:d3:4a:e1:54:16:b0:70:d3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 30 16:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a08a328737aa0185e0ca4e34a5e5957f8cc027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:85:c2:af:f0:e4:b0:db:45:79:95:ae:ad:
82:9f:a9:1e:4a:3d:b4:42:a1:e8:96:93:49:a4:eb:
56:8f:52:9e:93:f8:be:72:e0:61:3e:db:53:54:0d:
1b:ba:a3:62:97:8d:bd:b5:42:b3:5d:5d:91:1e:d0:
91:d1:81:f6:44:89:7c:84:c2:0b:e7:d4:ee:4d:13:
25:7c:f1:7a:08:b6:50:5e:d8:47:fb:ab:55:92:66:
b6:79:94:c3:f9:0f:49:77:b4:a0:2f:d6:a6:7e:9e:
66:3a:a3:61:7d:cc:65:af:61:3c:71:dd:57:0b:1e:
34:39:53:8f:23:72:3c:20:84:91:8c:e5:38:8f:77:
a0:9e:b9:55:83:cd:c1:ce:b9:f7:a7:6d:0b:39:32:
e1:f4:ee:aa:19:27:5b:cd:28:19:25:ee:b8:09:42:
71:0c:79:1a:46:8c:66:69:a0:6b:69:3d:ea:1b:84:
b3:5d:fb:5f:39:49:31:df:63:ac:07:c3:0d:a0:57:
c0:52:ac:7a:ca:57:9b:78:c8:d0:79:89:e5:6d:47:
d7:48:bc:86:e1:14:76:9b:df:76:26:c1:9a:6d:80:
30:e0:3d:6f:ba:cb:26:09:7c:b7:33:10:43:c3:d8:
ce:40:04:3d:f8:53:3b:45:c6:11:5a:01:67:2f:c1:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:08:A3:28:73:7A:A0:18:5E:0C:A4:E3:4A:5E:59:57:F8:CC:02:7F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OgijKHN6oBheDKTjSl5ZV_jMAn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.141.0/24
Signature Algorithm: sha256WithRSAEncryption
03:da:e0:60:82:9b:23:00:52:09:29:2a:dd:29:51:59:f5:9a:
1c:34:f7:72:9a:88:39:e8:20:68:e2:75:e1:b9:0e:40:52:68:
a5:73:08:27:92:45:5e:2a:c9:24:a2:5a:28:70:19:43:78:54:
a2:fb:52:af:98:91:69:b1:75:56:18:76:5f:e9:da:4a:c1:ca:
8b:d4:f9:8b:94:96:02:09:c5:d9:ea:a4:e4:cc:1e:77:78:f2:
1c:61:7b:4a:ae:a8:6b:00:d8:a6:60:44:67:f9:ec:fb:df:4b:
71:0e:1f:09:c5:d4:4c:c6:6f:ef:0f:f9:3d:a6:b8:6b:58:3a:
3b:91:23:9d:c5:fc:90:1b:97:02:f5:ff:93:62:70:1e:9a:5b:
7e:8c:00:a5:14:a7:0c:b0:07:c0:6c:55:18:dc:12:5f:28:32:
c3:8b:b6:88:d3:fc:d6:28:7d:38:fb:38:e9:9e:96:12:c1:be:
d9:1b:70:b1:2d:c6:13:99:56:2d:32:f5:38:33:3f:c1:b0:e8:
e8:51:93:a6:35:05:9e:5d:dd:c1:fc:28:d8:d2:c7:d0:ea:41:
de:6c:aa:a2:fe:1f:d0:fe:5a:16:1a:e0:21:4a:b5:dc:89:ac:
36:10:55:56:5d:1c:17:c2:87:04:2a:ea:1b:03:f2:6b:a4:06:
d7:12:11:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS3/bxuMSZM00rhVBawcNMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTMwMTYxNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTA4YTMyODczN2FhMDE4NWUwY2E0ZTM0YTVlNTk1N2Y4Y2MwMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGOFwq/w5LDbRXmVrq2Cn6keSj20
QqHolpNJpOtWj1Kek/i+cuBhPttTVA0buqNil429tUKzXV2RHtCR0YH2RIl8hMIL
59TuTRMlfPF6CLZQXthH+6tVkma2eZTD+Q9Jd7SgL9amfp5mOqNhfcxlr2E8cd1X
Cx40OVOPI3I8IISRjOU4j3egnrlVg83Bzrn3p20LOTLh9O6qGSdbzSgZJe64CUJx
DHkaRoxmaaBraT3qG4SzXftfOUkx32OsB8MNoFfAUqx6ylebeMjQeYnlbUfXSLyG
4RR2m992JsGabYAw4D1vussmCXy3MxBDw9jOQAQ9+FM7RcYRWgFnL8EfRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDoIoyhzeqAYXgyk40peWVf4zAJ/MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvT2dpaktITjZvQmhlREtUalNsNVpWX2pNQW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSuNMA0G
CSqGSIb3DQEBCwUAA4IBAQAD2uBggpsjAFIJKSrdKVFZ9ZocNPdymog56CBo4nXh
uQ5AUmilcwgnkkVeKskkoloocBlDeFSi+1KvmJFpsXVWGHZf6dpKwcqL1PmLlJYC
CcXZ6qTkzB53ePIcYXtKrqhrANimYERn+ez730txDh8JxdRMxm/vD/k9prhrWDo7
kSOdxfyQG5cC9f+TYnAemlt+jAClFKcMsAfAbFUY3BJfKDLDi7aI0/zWKH04+zjp
npYSwb7ZG3CxLcYTmVYtMvU4Mz/BsOjoUZOmNQWeXd3B/CjY0sfQ6kHebKqi/h/Q
/loWGuAhSrXciaw2EFVWXRwXwocEKuobA/JrpAbXEhFU
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:25 2025 by rpki-client