Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/at_SsqmuruHw3U3ih5ZvkPERAo4.roa
File: at_SsqmuruHw3U3ih5ZvkPERAo4.roa (raw, json)
Hash identifier: qgllsDkXSoqmopmK6Nvv+gOUGdbl9WK4/RlYS45trQE=
Subject key identifier: 6A:DF:D2:B2:A9:AE:AE:E1:F0:DD:4D:E2:87:96:6F:90:F1:11:02:8E
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 0194274780950E30C53114B23AECFBA5A1D5
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/at_SsqmuruHw3U3ih5ZvkPERAo4.roa
Signing time: Thu 02 Jan 2025 13:49:44 +0000
ROA not before: Thu 02 Jan 2025 13:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205839
IP address blocks: 89.18.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:80:95:0e:30:c5:31:14:b2:3a:ec:fb:a5:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 2 13:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6adfd2b2a9aeaee1f0dd4de287966f90f111028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:d3:25:f8:8c:5e:90:84:21:aa:cb:90:d7:
16:b1:d8:10:8e:62:57:5a:f7:06:3f:8e:02:e3:b6:
c3:b7:fb:f0:53:98:0e:f8:e4:e1:bd:e7:74:82:58:
f1:99:82:7d:31:04:79:dc:9a:32:24:88:4f:c5:29:
95:29:62:07:ab:7c:60:84:c6:c5:52:29:e2:22:70:
94:80:35:e8:80:b1:61:41:6c:a0:aa:eb:9c:cd:bc:
be:2e:83:d2:4e:10:44:33:17:5e:d4:46:b6:15:8d:
55:1b:46:10:f4:2e:89:91:f2:94:bf:1e:fc:e8:fc:
4e:31:05:c5:31:55:26:57:48:c0:83:1e:58:d5:f7:
a2:d8:b9:dc:8a:49:56:9b:8a:86:7b:02:e3:fd:d8:
3b:60:3f:a0:da:56:43:23:56:c6:00:56:76:28:98:
d3:45:74:7f:13:e1:d1:25:bc:df:02:f9:cc:8e:df:
a6:d3:e2:21:78:8f:c7:b4:75:d6:c9:50:8b:7d:99:
29:65:a4:e7:a2:32:98:02:16:ea:e6:6a:94:cc:6f:
9e:98:33:5d:96:10:41:50:2e:03:9d:ac:6b:35:21:
da:42:08:2f:a9:f6:ed:00:e7:22:ce:2b:3f:05:45:
53:d9:f7:96:db:08:3c:53:de:5b:a5:c0:03:f7:fa:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:D2:B2:A9:AE:AE:E1:F0:DD:4D:E2:87:96:6F:90:F1:11:02:8E
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/at_SsqmuruHw3U3ih5ZvkPERAo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.183.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0d:08:f9:3b:6e:f7:e3:97:8f:01:ec:af:33:59:80:8e:a6:
ab:50:00:d3:11:a4:a3:0e:4c:69:fd:27:50:97:39:a1:a4:b6:
54:93:73:cb:60:a1:40:16:a5:9e:12:2e:b3:b5:18:e9:fb:db:
a7:88:3f:b9:ed:49:2e:54:7e:84:3f:bc:cd:30:1c:0a:db:4f:
5d:97:66:a8:53:f8:9a:e2:5f:3e:cc:52:51:39:93:2e:3d:34:
9b:17:d8:a7:ae:fd:d3:ca:09:61:8a:fd:5d:e1:ff:d6:be:60:
45:f6:d9:a7:32:64:fc:24:ed:c6:8a:c8:04:b9:d7:76:79:72:
bb:7c:5f:03:79:5f:55:3d:05:ad:b1:70:83:13:5a:e4:18:78:
3c:c9:83:0d:83:0e:17:13:f3:6a:27:c6:c4:07:52:b1:5c:a3:
22:30:d8:51:71:58:9b:c1:f1:81:4a:ff:ff:d1:7b:63:9c:70:
12:f8:b5:42:69:1d:eb:02:a3:22:2e:d8:cf:5c:62:6b:c5:a1:
f0:18:18:32:e2:61:5a:25:c0:cb:6d:51:a1:d3:0e:19:96:e4:
53:92:77:6b:30:fd:9f:2e:bf:10:67:b2:4f:37:45:64:a7:a8:
14:de:f0:f4:8a:c6:2a:0b:c6:f8:e4:bd:bd:f2:25:e3:3f:58:
e5:89:6d:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR4CVDjDFMRSyOuz7paHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjUwMTAyMTM0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWRmZDJiMmE5YWVhZWUxZjBkZDRkZTI4Nzk2NmY5MGYxMTEwMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRLTJfiMXpCEIarLkNcWsdgQjmJX
WvcGP44C47bDt/vwU5gO+OThved0gljxmYJ9MQR53JoyJIhPxSmVKWIHq3xghMbF
UiniInCUgDXogLFhQWygquuczby+LoPSThBEMxde1Ea2FY1VG0YQ9C6JkfKUvx78
6PxOMQXFMVUmV0jAgx5Y1fei2LnciklWm4qGewLj/dg7YD+g2lZDI1bGAFZ2KJjT
RXR/E+HRJbzfAvnMjt+m0+IheI/HtHXWyVCLfZkpZaTnojKYAhbq5mqUzG+emDNd
lhBBUC4DnaxrNSHaQggvqfbtAOcizis/BUVT2feW2wg8U95bpcAD9/p/oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGrf0rKprq7h8N1N4oeWb5DxEQKOMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvYXRfU3NxbXVydUh3M1UzaWg1WnZrUEVSQW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRK3MA0G
CSqGSIb3DQEBCwUAA4IBAQAIDQj5O27345ePAeyvM1mAjqarUADTEaSjDkxp/SdQ
lzmhpLZUk3PLYKFAFqWeEi6ztRjp+9uniD+57UkuVH6EP7zNMBwK209dl2aoU/ia
4l8+zFJROZMuPTSbF9inrv3Tyglhiv1d4f/WvmBF9tmnMmT8JO3GisgEudd2eXK7
fF8DeV9VPQWtsXCDE1rkGHg8yYMNgw4XE/NqJ8bEB1KxXKMiMNhRcVibwfGBSv//
0XtjnHAS+LVCaR3rAqMiLtjPXGJrxaHwGBgy4mFaJcDLbVGh0w4ZluRTkndrMP2f
Lr8QZ7JPN0Vkp6gU3vD0isYqC8b45L298iXjP1jliW2P
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:18 2025 by rpki-client