Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/z5igsMrTcSuTyt_u7BJfX9d-yuw.roa
File: z5igsMrTcSuTyt_u7BJfX9d-yuw.roa (raw, json)
Hash identifier: jv32+RjZLTNzJOlf5TIPBAGZdJEKjeDa4qUHR2iQZhY=
Subject key identifier: CF:98:A0:B0:CA:D3:71:2B:93:CA:DF:EE:EC:12:5F:5F:D7:7E:CA:EC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6B420682483549A8F944A8FE63336
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/z5igsMrTcSuTyt_u7BJfX9d-yuw.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 89.33.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b4:20:68:24:83:54:9a:8f:94:4a:8f:e6:33:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf98a0b0cad3712b93cadfeeec125f5fd77ecaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:d6:90:6f:db:73:eb:5f:cf:6b:e4:35:f2:
bd:63:f1:8f:a1:27:7f:76:62:7c:3e:98:87:1d:71:
d7:ef:a7:c2:0e:b6:c9:5d:f9:23:46:11:9e:65:6b:
7e:12:0a:48:34:ed:92:ae:22:a7:c0:4e:60:98:17:
ff:2d:7d:e5:58:09:f7:73:cf:dd:7e:2f:71:88:34:
3a:af:8d:2a:d3:91:7b:05:21:65:49:a9:2f:a9:49:
d0:7c:07:34:e8:b5:2e:d5:84:e5:51:0f:16:98:a8:
40:f3:ec:f4:20:95:b2:0a:3e:78:8f:91:7d:60:f8:
52:34:4e:4a:fe:a8:f8:78:3f:48:d7:26:12:ca:e6:
6a:3b:4f:fc:c7:e2:3e:de:79:9e:1e:67:72:1d:d5:
d9:24:53:60:6a:be:78:ec:d8:e1:3a:8e:74:08:4f:
06:a3:eb:a2:6e:a4:75:8d:ff:ba:ec:61:de:77:c2:
22:5e:fa:0a:25:32:1a:2e:14:e2:4b:fb:64:d6:d9:
c6:7d:2e:5d:37:a6:93:c9:d4:5a:52:e1:14:61:4c:
dd:b4:05:21:fc:ab:e7:38:aa:04:c5:bf:ab:a0:57:
e8:b7:03:f3:a1:5c:e9:d2:c4:0e:81:5e:f7:3a:1e:
db:b1:42:b3:c1:37:4b:8d:b5:3c:d8:cc:d1:5e:17:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:98:A0:B0:CA:D3:71:2B:93:CA:DF:EE:EC:12:5F:5F:D7:7E:CA:EC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/z5igsMrTcSuTyt_u7BJfX9d-yuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6b:fd:83:95:78:f8:91:f4:fe:dd:79:17:37:bf:b3:22:9f:
d6:00:c7:3c:8c:af:37:51:ab:b1:c0:cf:39:5c:00:c1:74:2d:
e1:e9:ba:da:ca:cb:98:86:95:82:de:fa:27:0b:81:75:b1:60:
cc:d9:87:44:fa:0f:cc:ec:30:d9:1e:0b:05:d9:01:96:54:8e:
a1:65:19:0f:4e:36:a5:93:e6:e4:18:f1:09:c3:a3:71:e4:ee:
a1:14:5e:af:32:0f:68:a0:6d:f4:ee:eb:58:89:ca:f7:3a:84:
e6:e4:85:4a:05:b4:0c:14:b5:1c:3a:cb:3b:e5:bf:6f:d3:4d:
1e:34:7a:4b:0c:ca:a3:53:c7:dc:92:e5:e9:38:81:ac:ac:47:
fe:ed:9a:a5:0c:9c:1b:7b:0b:60:68:38:46:05:bf:59:ab:fb:
61:72:d1:a5:4e:21:d4:c6:fd:be:95:48:fc:3e:d8:8b:f6:14:
6f:7a:78:cf:dc:7a:00:21:eb:04:25:75:83:ff:60:7e:fb:18:
3d:e4:30:48:d0:4f:8d:e7:21:e9:c7:5a:b8:9e:19:21:f1:9d:
da:98:51:7b:4d:60:92:d4:ae:0c:e7:a0:d8:fb:30:1b:90:e4:
c3:18:b4:48:1a:d6:cd:d8:90:96:ec:d6:e2:cf:b4:2b:cb:2a:
ea:d0:bb:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1rQgaCSDVJqPlEqP5jM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjk4YTBiMGNhZDM3MTJiOTNjYWRmZWVlYzEyNWY1ZmQ3N2VjYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjnWkG/bc+tfz2vkNfK9Y/GPoSd/
dmJ8PpiHHXHX76fCDrbJXfkjRhGeZWt+EgpINO2SriKnwE5gmBf/LX3lWAn3c8/d
fi9xiDQ6r40q05F7BSFlSakvqUnQfAc06LUu1YTlUQ8WmKhA8+z0IJWyCj54j5F9
YPhSNE5K/qj4eD9I1yYSyuZqO0/8x+I+3nmeHmdyHdXZJFNgar547NjhOo50CE8G
o+uibqR1jf+67GHed8IiXvoKJTIaLhTiS/tk1tnGfS5dN6aTydRaUuEUYUzdtAUh
/KvnOKoExb+roFfotwPzoVzp0sQOgV73Oh7bsUKzwTdLjbU82MzRXhdf2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+YoLDK03Erk8rf7uwSX1/XfsrsMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvejVpZ3NNclRjU3VUeXRfdTdCSmZYOWQteXV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHCMA0G
CSqGSIb3DQEBCwUAA4IBAQCEa/2DlXj4kfT+3XkXN7+zIp/WAMc8jK83UauxwM85
XADBdC3h6braysuYhpWC3vonC4F1sWDM2YdE+g/M7DDZHgsF2QGWVI6hZRkPTjal
k+bkGPEJw6Nx5O6hFF6vMg9ooG307utYicr3OoTm5IVKBbQMFLUcOss75b9v000e
NHpLDMqjU8fckuXpOIGsrEf+7ZqlDJwbewtgaDhGBb9Zq/thctGlTiHUxv2+lUj8
PtiL9hRvenjP3HoAIesEJXWD/2B++xg95DBI0E+N5yHpx1q4nhkh8Z3amFF7TWCS
1K4M56DY+zAbkOTDGLRIGtbN2JCW7Nbiz7Qryyrq0Lvf
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:05 2025 by rpki-client