Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa
File: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (raw, json)
Hash identifier: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=
Subject key identifier: 57:45:A3:D2:38:70:D1:1C:5A:B5:91:FF:9F:1F:23:4E:B2:C5:11:C7
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01942445545A1C132596E31BA42EDA7398CD
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 89.248.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:54:5a:1c:13:25:96:e3:1b:a4:2e:da:73:98:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5745a3d23870d11c5ab591ff9f1f234eb2c511c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:2b:73:2f:1a:5d:28:6a:0b:fb:ec:24:4e:
89:a0:e1:d5:09:45:23:80:8d:41:98:ec:8c:8a:a3:
e2:5f:6b:16:40:e0:27:83:df:d6:32:d8:bb:6d:bb:
0c:bc:8a:e1:8d:23:af:5b:22:5a:1f:63:b9:be:3b:
cb:ec:2a:b1:ec:a2:94:ad:36:28:24:9a:5b:04:a4:
56:2c:40:87:81:7b:62:1b:85:27:31:ed:c7:fd:82:
ac:d4:be:11:e8:24:56:6a:6d:f8:a7:ae:7c:76:f7:
e0:74:2f:79:4f:35:69:94:37:3f:07:e2:4e:6c:d0:
42:dc:32:f0:20:77:a7:8c:a1:31:6b:f3:1d:da:99:
18:0f:de:dc:8c:a9:fc:88:a0:47:97:0a:e4:56:64:
2b:74:c5:a7:a8:c9:44:16:e9:de:77:d1:ae:ed:09:
2e:14:62:21:46:b6:ae:10:3f:b6:f0:d4:30:fe:12:
80:1d:49:4d:0c:bf:8d:73:10:d2:21:e6:94:35:c1:
e0:90:51:02:0a:6e:8e:53:c6:65:87:11:c5:27:06:
59:24:c1:be:58:61:29:2a:d4:ff:dd:1e:ee:de:c0:
45:0b:55:34:d6:8c:c7:d4:2e:b2:98:dd:03:fd:bd:
6a:90:4b:73:ff:34:84:b7:4d:80:b7:3d:4b:6c:2c:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:A3:D2:38:70:D1:1C:5A:B5:91:FF:9F:1F:23:4E:B2:C5:11:C7
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.66.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:36:88:57:93:84:b5:4f:6a:71:25:a4:dd:6a:08:cd:b3:e5:
81:c8:5b:a4:42:0c:3f:74:1a:ba:f9:32:42:56:73:3b:fc:5c:
6a:bb:4c:db:29:c8:57:8d:7f:16:51:89:e4:8a:73:9b:fa:0b:
ce:45:dd:4a:57:94:d6:6a:1d:ab:b3:f7:9b:08:f0:8a:ab:7c:
a9:8f:b9:06:7e:89:85:80:e5:c7:ca:0f:76:b5:fb:96:fa:ab:
11:59:bd:11:b9:49:c9:f2:7b:3e:11:cf:fe:13:7d:39:12:6d:
03:cb:28:e1:6c:68:b2:b1:9b:6d:57:fb:6f:9f:84:fb:d7:ae:
95:a3:d9:cf:0b:11:38:cc:2c:89:f9:1c:9d:27:32:c3:39:e3:
f3:32:d3:68:28:53:e7:f5:db:e8:4b:3a:fe:0e:0e:a4:c8:f2:
9e:49:f6:3d:b8:ea:c9:74:a1:33:4f:1f:46:35:85:ca:d0:94:
22:ab:5e:9e:60:4b:30:ab:5d:98:3e:22:33:9b:d3:1e:11:41:
46:6e:d1:9a:b2:6b:f8:94:f2:27:49:96:fa:7c:30:3b:10:11:
34:ac:ec:c8:21:91:0d:50:c7:48:bc:c3:ab:68:6d:68:01:f4:
6e:d9:1b:a3:ca:5b:a9:bb:2d:9c:64:08:9f:98:ca:0c:23:ff:
7f:27:e6:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRVRaHBMlluMbpC7ac5jNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw
MWUwNTkwHhcNMjUwMTAxMjM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzQ1YTNkMjM4NzBkMTFjNWFiNTkxZmY5ZjFmMjM0ZWIyYzUxMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw0rcy8aXShqC/vsJE6JoOHVCUUj
gI1BmOyMiqPiX2sWQOAng9/WMti7bbsMvIrhjSOvWyJaH2O5vjvL7Cqx7KKUrTYo
JJpbBKRWLECHgXtiG4UnMe3H/YKs1L4R6CRWam34p658dvfgdC95TzVplDc/B+JO
bNBC3DLwIHenjKExa/Md2pkYD97cjKn8iKBHlwrkVmQrdMWnqMlEFuned9Gu7Qku
FGIhRrauED+28NQw/hKAHUlNDL+NcxDSIeaUNcHgkFECCm6OU8ZlhxHFJwZZJMG+
WGEpKtT/3R7u3sBFC1U01ozH1C6ymN0D/b1qkEtz/zSEt02Atz1LbCw9dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdFo9I4cNEcWrWR/58fI06yxRHHMB8GA1UdIwQY
MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt
NmMwNDAzYzlhNDQwLzEvVjBXajBqaHcwUnhhdFpIX254OGpUckxGRWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw
LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfhCMA0G
CSqGSIb3DQEBCwUAA4IBAQC9NohXk4S1T2pxJaTdagjNs+WByFukQgw/dBq6+TJC
VnM7/Fxqu0zbKchXjX8WUYnkinOb+gvORd1KV5TWah2rs/ebCPCKq3ypj7kGfomF
gOXHyg92tfuW+qsRWb0RuUnJ8ns+Ec/+E305Em0DyyjhbGiysZttV/tvn4T7166V
o9nPCxE4zCyJ+RydJzLDOePzMtNoKFPn9dvoSzr+Dg6kyPKeSfY9uOrJdKEzTx9G
NYXK0JQiq16eYEswq12YPiIzm9MeEUFGbtGasmv4lPInSZb6fDA7EBE0rOzIIZEN
UMdIvMOraG1oAfRu2Rujylupuy2cZAifmMoMI/9/J+au
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:22:04 2025 by rpki-client