Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/T6JhpQJ7GfhKfWYbahYPdWCpCbc.roa
File: T6JhpQJ7GfhKfWYbahYPdWCpCbc.roa (raw, json)
Hash identifier: 9bLcwIo6ICMLX1a/hpxqK/D+YXDv5QDoANS09+vFqeA=
Subject key identifier: 4F:A2:61:A5:02:7B:19:F8:4A:7D:66:1B:6A:16:0F:75:60:A9:09:B7
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A3AB54A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/T6JhpQJ7GfhKfWYbahYPdWCpCbc.roa
Signing time: Fri 08 Apr 2022 14:11:20 +0000
ROA not before: Fri 08 Apr 2022 14:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 89.116.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171619658 (0xa3ab54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 8 14:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fa261a5027b19f84a7d661b6a160f7560a909b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:46:99:bb:45:5a:59:58:43:23:3e:fd:0d:
97:29:ed:b4:bc:01:71:3d:e1:9f:0f:02:42:a4:75:
06:27:a6:41:0b:5a:89:92:2e:ec:7e:d3:f1:ab:dd:
fe:24:8d:f9:6d:41:26:b3:91:45:5c:07:f9:1a:e0:
fa:55:ba:e9:dc:22:a8:11:ae:25:77:50:7f:b4:6b:
76:b3:80:ac:71:35:21:ce:76:df:f1:07:92:d8:3a:
51:97:5c:1b:5c:ee:7f:51:be:53:65:20:40:d0:bc:
d4:83:99:a7:c7:03:d1:a4:3d:2e:b8:df:f6:a6:5a:
a6:78:33:aa:6d:fb:2e:a4:51:cf:ea:21:60:ca:b6:
0c:89:48:3e:ea:66:f9:00:4f:22:32:a1:86:ac:d5:
fa:c4:d9:80:90:db:38:22:0f:1a:7f:4c:48:32:48:
43:ba:3a:2d:70:32:e4:a2:33:6b:84:62:01:ce:3e:
8d:08:e4:da:f1:cc:ea:de:73:ee:82:4a:fa:0d:51:
7f:5a:58:ae:10:c5:b1:14:68:77:2d:83:57:15:45:
6e:50:d3:82:5c:6e:3f:10:34:0d:8d:ad:e2:2d:a7:
57:ad:e6:75:3d:ef:62:bf:5e:22:49:91:b8:1d:07:
0b:e7:b8:b2:97:6a:23:20:42:cb:2b:d3:d5:87:0d:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:61:A5:02:7B:19:F8:4A:7D:66:1B:6A:16:0F:75:60:A9:09:B7
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/T6JhpQJ7GfhKfWYbahYPdWCpCbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e0:5f:1c:2b:b3:18:ac:0a:b6:9c:fd:81:ec:ca:3d:26:ef:
59:c6:f2:fc:29:22:ad:7b:2f:0f:f1:08:92:61:c4:e3:10:84:
bb:28:4c:ff:21:1b:32:e9:7c:0a:29:aa:7d:e1:cf:4a:f3:9e:
40:6e:bd:ba:f9:42:19:01:15:78:b8:e1:d5:ed:a8:b6:6c:c3:
07:8e:df:a6:32:f2:76:53:b5:39:9c:39:20:67:ef:d7:5b:40:
6b:32:52:c0:06:6e:f8:bd:1d:24:db:e7:09:07:95:1e:73:3f:
e9:76:1a:d6:be:97:71:5c:a7:52:57:6b:64:c8:ae:4e:b7:4b:
6a:a5:a5:79:3e:0a:8b:69:a5:99:46:21:32:39:90:f3:9c:5e:
aa:84:45:47:f0:02:9f:61:c6:e0:4a:5f:82:fd:00:b3:fe:90:
f8:e6:40:97:72:06:d4:e2:65:90:c7:5f:d8:51:e9:f4:e3:46:
e8:aa:a4:16:23:f1:28:5c:ac:57:f7:10:94:41:0e:69:bf:4b:
af:1b:cf:a5:d6:6b:22:25:c8:3c:2c:42:78:dc:b2:37:41:4c:
0e:7a:57:bc:1a:ca:5c:8b:92:17:b0:f6:b0:ba:66:f2:a8:cd:
90:11:af:32:46:cb:f5:a0:c6:8a:8b:f7:9e:6d:58:d3:6c:e1:
92:e3:28:e8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECjq1SjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDQw
ODE0MTEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGZhMjYxYTUwMjdi
MTlmODRhN2Q2NjFiNmExNjBmNzU2MGE5MDliNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/9Rpm7RVpZWEMjPv0NlynttLwBcT3hnw8CQqR1BiemQQta
iZIu7H7T8avd/iSN+W1BJrORRVwH+Rrg+lW66dwiqBGuJXdQf7RrdrOArHE1Ic52
3/EHktg6UZdcG1zuf1G+U2UgQNC81IOZp8cD0aQ9Lrjf9qZapngzqm37LqRRz+oh
YMq2DIlIPupm+QBPIjKhhqzV+sTZgJDbOCIPGn9MSDJIQ7o6LXAy5KIza4RiAc4+
jQjk2vHM6t5z7oJK+g1Rf1pYrhDFsRRody2DVxVFblDTglxuPxA0DY2t4i2nV63m
dT3vYr9eIkmRuB0HC+e4spdqIyBCyyvT1YcN/LUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRPomGlAnsZ+Ep9ZhtqFg91YKkJtzAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1Q2SmhwUUo3R2ZoS2ZXWWJhaFlQZFdDcENiYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl07zANBgkqhkiG9w0BAQsFAAOC
AQEAe+BfHCuzGKwKtpz9gezKPSbvWcby/CkirXsvD/EIkmHE4xCEuyhM/yEbMul8
CimqfeHPSvOeQG69uvlCGQEVeLjh1e2otmzDB47fpjLydlO1OZw5IGfv11tAazJS
wAZu+L0dJNvnCQeVHnM/6XYa1r6XcVynUldrZMiuTrdLaqWleT4Ki2mlmUYhMjmQ
85xeqoRFR/ACn2HG4Epfgv0As/6Q+OZAl3IG1OJlkMdf2FHp9ONG6KqkFiPxKFys
V/cQlEEOab9LrxvPpdZrIiXIPCxCeNyyN0FMDnpXvBrKXIuSF7D2sLpm8qjNkBGv
MkbL9aDGiov3nm1Y02zhkuMo6A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:11 2025 by rpki-client