Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/2JNf8PoETHUWKrlbGvJA_rrI9NI.roa
File: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (raw, json)
Hash identifier: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=
Subject key identifier: D8:93:5F:F0:FA:04:4C:75:16:2A:B9:5B:1A:F2:40:FE:BA:C8:F4:D2
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 01942520AAC53E089537C70D1623DFB82524
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/2JNf8PoETHUWKrlbGvJA_rrI9NI.roa
Signing time: Thu 02 Jan 2025 03:48:05 +0000
ROA not before: Thu 02 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 89.35.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:aa:c5:3e:08:95:37:c7:0d:16:23:df:b8:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Jan 2 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8935ff0fa044c75162ab95b1af240febac8f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:9a:b1:5d:2d:a1:5d:20:5f:c9:16:0e:1a:
b5:e5:cc:87:5d:e3:30:5e:15:7d:4b:0b:81:f6:ba:
e2:b4:28:69:e0:79:c8:63:b5:6e:89:d9:df:dc:ed:
62:65:f0:d0:80:ea:22:8c:f6:c7:7c:97:5c:c7:01:
4e:12:bd:c0:e6:7f:cc:0f:5b:3c:63:2f:3e:76:d5:
37:fe:8e:31:0f:7e:dc:90:bf:0d:53:ba:23:b4:95:
71:ad:24:7a:78:bd:24:7b:6c:e2:50:99:c4:7a:33:
a8:87:65:40:06:d9:43:c4:65:bf:67:f6:2e:e5:c9:
5e:26:eb:ec:86:6f:3d:a4:7e:c5:cf:f3:2f:80:0e:
56:87:d7:3d:fe:00:5f:09:d4:dc:08:7a:c4:0d:37:
ed:89:77:9e:f4:ef:6e:f7:a1:c7:cd:6a:b2:ce:94:
a9:20:14:7f:13:72:00:16:55:5f:f5:9e:72:a9:ff:
ea:79:6d:9c:7f:a5:26:ab:58:e4:61:cd:ac:c0:55:
ee:51:53:73:fa:fb:f7:5e:06:47:5a:1e:4a:9c:4e:
9d:ae:48:68:d2:3f:9d:32:01:9c:6c:46:d6:58:0f:
3c:f3:aa:68:3b:73:a2:63:cd:24:de:1f:1b:54:1d:
c2:fa:1d:a0:00:80:e4:be:bb:ee:69:42:a1:fa:81:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:5F:F0:FA:04:4C:75:16:2A:B9:5B:1A:F2:40:FE:BA:C8:F4:D2
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/2JNf8PoETHUWKrlbGvJA_rrI9NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.39.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5c:58:e2:9e:61:90:22:7e:40:7e:a9:f5:66:6a:51:b3:0a:
f7:e3:13:de:03:f5:74:07:94:5e:9b:18:6e:10:3e:b0:b8:a9:
9e:95:e0:83:4c:38:73:55:71:38:e4:1d:b0:12:d2:b2:65:6e:
1b:ea:6b:56:3a:52:1d:0d:4c:ab:0e:df:d7:59:18:ca:d4:9c:
d9:0b:b0:2a:81:7e:08:18:db:b2:78:e0:63:34:c0:ef:43:4e:
7d:04:4e:45:ee:9c:cf:b4:8a:25:9a:ce:6e:41:15:ed:cf:60:
3f:a7:d4:10:49:6b:c6:9d:75:01:e2:29:47:06:31:0a:fb:83:
02:29:1c:50:cf:65:71:07:f7:8e:50:d6:53:83:49:d6:ea:79:
95:3a:05:23:fb:73:56:20:4a:ea:a4:ca:68:e0:da:9e:3f:cd:
95:fd:ad:a7:0b:0c:89:3d:31:af:dc:f4:7c:bc:86:ba:11:85:
1b:ce:b0:d2:74:c0:5f:08:60:b4:db:20:43:0b:5e:65:d8:45:
a6:f0:4e:fb:18:bf:c8:eb:35:41:d9:53:e8:ca:b0:32:56:52:
9b:45:42:40:6b:22:b0:4d:80:1a:73:6f:90:52:79:d5:5c:4e:
29:03:fe:33:49:bc:c8:ca:31:45:07:f7:86:63:7a:88:1e:dd:
88:c6:d2:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIKrFPgiVN8cNFiPfuCUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj
ZWEwNTkwHhcNMjUwMTAyMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODkzNWZmMGZhMDQ0Yzc1MTYyYWI5NWIxYWYyNDBmZWJhYzhmNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphqasV0toV0gX8kWDhq15cyHXeMw
XhV9SwuB9rritChp4HnIY7Vuidnf3O1iZfDQgOoijPbHfJdcxwFOEr3A5n/MD1s8
Yy8+dtU3/o4xD37ckL8NU7ojtJVxrSR6eL0ke2ziUJnEejOoh2VABtlDxGW/Z/Yu
5cleJuvshm89pH7Fz/MvgA5Wh9c9/gBfCdTcCHrEDTftiXee9O9u96HHzWqyzpSp
IBR/E3IAFlVf9Z5yqf/qeW2cf6Umq1jkYc2swFXuUVNz+vv3XgZHWh5KnE6drkho
0j+dMgGcbEbWWA8886poO3OiY80k3h8bVB3C+h2gAIDkvrvuaUKh+oELiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNiTX/D6BEx1Fiq5WxryQP66yPTSMB8GA1UdIwQY
MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt
N2U1MDkxM2FjMDFkLzEvMkpOZjhQb0VUSFVXS3JsYkd2SkFfcnJJOU5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk
LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSMnMA0G
CSqGSIb3DQEBCwUAA4IBAQBpXFjinmGQIn5Afqn1ZmpRswr34xPeA/V0B5Remxhu
ED6wuKmeleCDTDhzVXE45B2wEtKyZW4b6mtWOlIdDUyrDt/XWRjK1JzZC7AqgX4I
GNuyeOBjNMDvQ059BE5F7pzPtIolms5uQRXtz2A/p9QQSWvGnXUB4ilHBjEK+4MC
KRxQz2VxB/eOUNZTg0nW6nmVOgUj+3NWIErqpMpo4NqeP82V/a2nCwyJPTGv3PR8
vIa6EYUbzrDSdMBfCGC02yBDC15l2EWm8E77GL/I6zVB2VPoyrAyVlKbRUJAayKw
TYAac2+QUnnVXE4pA/4zSbzIyjFFB/eGY3qIHt2IxtIt
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:05 2025 by rpki-client