Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_hNdKOGndUgsTiLfc6CRXeExkvs.roa
File: _hNdKOGndUgsTiLfc6CRXeExkvs.roa (raw, json)
Hash identifier: wmOe/G2rheQEJX0KHOL05uQJzOBLfnkA/dOIDAX7FJ0=
Subject key identifier: FE:13:5D:28:E1:A7:75:48:2C:4E:22:DF:73:A0:91:5D:E1:31:92:FB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6CEE00C5C367F190E4F219575A5E2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_hNdKOGndUgsTiLfc6CRXeExkvs.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214730
IP address blocks: 89.34.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ce:e0:0c:5c:36:7f:19:0e:4f:21:95:75:a5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe135d28e1a775482c4e22df73a0915de13192fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:43:90:c2:52:16:f8:92:f6:86:2d:8f:34:
c1:3d:56:3a:6d:37:7e:b0:b9:f6:22:22:5a:ec:3c:
9f:69:52:28:00:10:1b:0a:14:0d:28:46:4a:fe:2d:
88:86:9c:f2:fe:99:4a:60:da:44:a3:52:48:4b:95:
a5:88:ef:1c:1c:26:eb:78:27:e0:6b:4b:66:ae:f9:
b1:17:02:ee:06:03:2a:b1:94:0a:2d:3d:dc:19:2d:
7e:25:8c:20:0c:72:b1:d8:78:8d:fa:0f:15:a4:06:
b4:d7:aa:35:e4:27:4e:83:b5:35:05:b0:03:d3:a6:
5d:0f:28:d8:32:0d:62:86:f9:7b:fd:49:d4:32:ea:
d0:e0:3a:b1:03:73:3b:06:8a:ea:72:c7:ee:14:70:
48:42:fb:fc:f2:74:e9:56:73:73:4e:92:2e:8e:4e:
a3:80:5d:43:5e:12:8a:a6:20:8f:90:ff:ca:95:af:
4a:dc:ae:3c:6f:2f:aa:80:83:e3:c3:eb:d2:bf:fc:
56:78:19:5e:f9:c3:8a:4f:52:b7:9b:6d:3a:55:67:
32:d9:5b:41:0a:6a:70:16:ef:8d:92:f8:36:74:40:
d8:31:aa:a6:e5:13:f2:f0:a0:14:45:0d:82:87:15:
b5:ed:4e:0b:67:c9:4c:aa:f2:e6:d8:8a:93:40:42:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:5D:28:E1:A7:75:48:2C:4E:22:DF:73:A0:91:5D:E1:31:92:FB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_hNdKOGndUgsTiLfc6CRXeExkvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:28:e0:e5:81:76:d9:a0:b1:cf:83:e6:ed:51:0d:c7:6f:33:
13:da:46:2d:56:22:db:14:fc:ed:0e:2b:6a:01:fe:0c:45:e5:
12:06:97:9d:9e:50:04:21:bc:af:c0:00:35:d0:40:9e:08:3d:
ec:e5:d7:0f:38:df:1c:00:63:37:7b:20:6d:01:15:a1:00:51:
7e:15:b7:6f:d9:0d:8c:15:1f:e3:28:b8:af:bc:79:87:9a:fa:
69:0a:ee:3f:ad:b7:f2:3e:ba:b0:69:a6:fc:ee:ab:21:d1:4f:
36:e1:89:c5:1f:52:79:53:58:eb:2a:29:2c:c0:32:52:d2:5f:
de:00:f9:16:dd:45:4d:44:c7:81:24:0f:b5:bb:38:13:4e:f5:
8b:cb:e4:c8:88:36:4b:81:48:9f:f1:5b:ea:1f:46:4d:3d:4d:
f4:9f:fe:2c:bd:3c:f3:67:4a:63:d8:0f:cc:ed:2e:ab:67:db:
4a:9f:67:71:d5:8b:d4:d4:07:8e:3a:59:84:8d:d9:e2:da:19:
5a:b4:51:df:3e:b9:fd:57:70:aa:1b:7a:5f:5e:79:89:08:53:
10:32:95:69:33:1f:4a:13:2b:23:b1:53:f8:9e:7d:05:15:70:
4d:5e:2c:2a:b9:0f:4a:28:9d:53:55:13:e0:26:2e:cb:0e:fc:
ba:04:11:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1s7gDFw2fxkOTyGVdaXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTEzNWQyOGUxYTc3NTQ4MmM0ZTIyZGY3M2EwOTE1ZGUxMzE5MmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA5DkMJSFviS9oYtjzTBPVY6bTd+
sLn2IiJa7DyfaVIoABAbChQNKEZK/i2Ihpzy/plKYNpEo1JIS5WliO8cHCbreCfg
a0tmrvmxFwLuBgMqsZQKLT3cGS1+JYwgDHKx2HiN+g8VpAa016o15CdOg7U1BbAD
06ZdDyjYMg1ihvl7/UnUMurQ4DqxA3M7BorqcsfuFHBIQvv88nTpVnNzTpIujk6j
gF1DXhKKpiCPkP/Kla9K3K48by+qgIPjw+vSv/xWeBle+cOKT1K3m206VWcy2VtB
CmpwFu+Nkvg2dEDYMaqm5RPy8KAURQ2ChxW17U4LZ8lMqvLm2IqTQEIEgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4TXSjhp3VILE4i33OgkV3hMZL7MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvX2hOZEtPR25kVWdzVGlMZmM2Q1JYZUV4a3ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLmMA0G
CSqGSIb3DQEBCwUAA4IBAQAdKODlgXbZoLHPg+btUQ3HbzMT2kYtViLbFPztDitq
Af4MReUSBpednlAEIbyvwAA10ECeCD3s5dcPON8cAGM3eyBtARWhAFF+Fbdv2Q2M
FR/jKLivvHmHmvppCu4/rbfyPrqwaab87qsh0U824YnFH1J5U1jrKikswDJS0l/e
APkW3UVNRMeBJA+1uzgTTvWLy+TIiDZLgUif8VvqH0ZNPU30n/4svTzzZ0pj2A/M
7S6rZ9tKn2dx1YvU1AeOOlmEjdni2hlatFHfPrn9V3CqG3pfXnmJCFMQMpVpMx9K
EysjsVP4nn0FFXBNXiwquQ9KKJ1TVRPgJi7LDvy6BBG4
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:07:49 2025 by rpki-client