Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa
File: 89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa (raw, json)
Hash identifier: K5oebEL4UYGbpI6omznf50HWdMyeoL9B3ezd2prsxV4=
Subject key identifier: F3:D9:4C:36:B8:43:D8:5E:71:D0:A7:BF:BF:66:C1:5C:F1:10:62:05
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0195474949E28F7465BDC5DD3CEB0001BB6C
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa
Signing time: Thu 27 Feb 2025 12:02:20 +0000
ROA not before: Thu 27 Feb 2025 12:02:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207633
IP address blocks: 2.59.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:49:49:e2:8f:74:65:bd:c5:dd:3c:eb:00:01:bb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Feb 27 12:02:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3d94c36b843d85e71d0a7bfbf66c15cf1106205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:08:15:8b:05:4a:56:16:53:3c:4e:8a:88:
75:1a:eb:8a:29:2e:c0:ba:eb:72:1c:3b:0a:2b:72:
cb:d7:94:fd:d9:79:8f:8d:6e:6f:75:f2:6c:d3:f0:
5f:8b:dd:3e:dc:b6:5e:13:27:f7:bc:80:a0:48:28:
57:be:39:8b:32:31:b1:d7:e7:80:00:c7:33:82:05:
3e:52:40:37:8b:c3:25:8f:9c:2b:47:e5:18:9e:30:
ac:6f:82:f5:5a:26:62:85:a1:67:e3:ef:56:6a:64:
a9:10:b7:1f:e7:14:4e:32:16:71:c1:55:1b:93:3c:
e4:6b:cd:ea:20:0b:dd:eb:4d:4a:ba:86:c7:4f:c6:
4f:e3:a3:48:9a:36:5d:aa:df:f8:db:79:5e:32:92:
86:4d:36:47:88:3f:47:d0:c0:93:c0:54:40:0c:df:
94:ed:b8:e5:73:8b:0e:dc:1c:d8:b5:51:af:0a:c7:
ad:01:8a:54:72:97:ea:5c:2b:17:f0:f9:32:9c:bb:
a8:f7:f8:c6:33:d3:11:9d:9c:d4:70:09:80:4e:c5:
25:5a:db:27:bd:52:8d:06:8a:bc:07:55:d7:88:52:
de:9c:97:ba:de:6d:b5:d4:67:24:af:7d:92:f5:c6:
6f:86:85:61:17:a1:28:be:73:51:81:2f:cc:aa:78:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:4C:36:B8:43:D8:5E:71:D0:A7:BF:BF:66:C1:5C:F1:10:62:05
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b1:87:85:3c:c8:10:5c:77:60:ee:34:ed:7b:62:e3:4b:41:
55:9f:07:87:3c:39:84:2b:3d:96:1e:ad:d1:7c:f5:83:ef:90:
4e:19:21:f8:a6:c0:91:69:08:57:7f:73:da:8f:6a:d1:40:4e:
aa:ce:f2:31:d8:4c:a1:8d:7c:2d:9b:ef:94:44:45:4e:49:55:
2e:ce:24:d4:f9:06:94:21:e1:80:a9:4e:46:80:da:d3:e7:b2:
8a:84:d4:c7:39:53:0c:39:18:ce:0d:92:c3:43:c4:b4:f8:f5:
d5:15:f5:32:a1:35:1b:ff:f8:03:d8:7e:29:e6:99:99:8c:13:
98:6f:30:bf:ea:85:a6:07:d5:26:2e:cc:67:2c:0d:33:83:16:
f5:64:47:8c:b2:1b:b6:b1:5e:c6:f2:8d:eb:e4:c5:47:99:39:
4b:c2:5c:a7:c8:12:d5:fb:b7:83:dc:2e:fc:ed:90:71:f9:0c:
d5:d1:ba:97:d2:fd:9c:fd:80:c4:ba:59:f7:09:2f:13:2c:c9:
2f:91:5d:27:a7:12:ba:c4:a6:2d:c9:c9:f2:85:6a:e7:7a:9b:
b2:c6:61:5c:dc:5d:1b:48:ca:14:44:d9:14:08:d2:76:44:17:
a2:fc:54:f3:70:a7:14:20:2e:7e:f7:7e:66:57:26:80:20:7b:
3a:dc:fb:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVHSUnij3RlvcXdPOsAAbtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjUwMjI3MTIwMjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2Q5NGMzNmI4NDNkODVlNzFkMGE3YmZiZjY2YzE1Y2YxMTA2MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEIFYsFSlYWUzxOioh1GuuKKS7A
uutyHDsKK3LL15T92XmPjW5vdfJs0/Bfi90+3LZeEyf3vICgSChXvjmLMjGx1+eA
AMczggU+UkA3i8Mlj5wrR+UYnjCsb4L1WiZihaFn4+9WamSpELcf5xROMhZxwVUb
kzzka83qIAvd601KuobHT8ZP46NImjZdqt/423leMpKGTTZHiD9H0MCTwFRADN+U
7bjlc4sO3BzYtVGvCsetAYpUcpfqXCsX8PkynLuo9/jGM9MRnZzUcAmATsUlWtsn
vVKNBoq8B1XXiFLenJe63m211Gckr32S9cZvhoVhF6EovnNRgS/Mqnhp0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPZTDa4Q9hecdCnv79mwVzxEGIFMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvODlsTU5yaEQyRjV4MEtlX3YyYkJYUEVRWWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAju1MA0G
CSqGSIb3DQEBCwUAA4IBAQBPsYeFPMgQXHdg7jTte2LjS0FVnweHPDmEKz2WHq3R
fPWD75BOGSH4psCRaQhXf3Paj2rRQE6qzvIx2EyhjXwtm++UREVOSVUuziTU+QaU
IeGAqU5GgNrT57KKhNTHOVMMORjODZLDQ8S0+PXVFfUyoTUb//gD2H4p5pmZjBOY
bzC/6oWmB9UmLsxnLA0zgxb1ZEeMshu2sV7G8o3r5MVHmTlLwlynyBLV+7eD3C78
7ZBx+QzV0bqX0v2c/YDEuln3CS8TLMkvkV0npxK6xKYtycnyhWrnepuyxmFc3F0b
SMoURNkUCNJ2RBei/FTzcKcUIC5+935mVyaAIHs63Ptb
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:12 2025 by rpki-client