Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Au61mZI-htttLesl4yy0MLLWdgg.roa
File: Au61mZI-htttLesl4yy0MLLWdgg.roa (raw, json)
Hash identifier: +tDBV4VgluoM9FI1HSD304mwdSWIN3f6hp8YtvJ9X6w=
Subject key identifier: 02:EE:B5:99:92:3E:86:DB:6D:2D:EB:25:E3:2C:B4:30:B2:D6:76:08
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B566EFD44AE90D4EAA604EB24D9AC7
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Au61mZI-htttLesl4yy0MLLWdgg.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61971
IP address blocks: 89.23.120.0/24 maxlen: 24
2a09:6280:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:66:ef:d4:4a:e9:0d:4e:aa:60:4e:b2:4d:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02eeb599923e86db6d2deb25e32cb430b2d67608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:74:5c:33:e4:fa:bc:05:14:b8:16:b9:df:
e7:a5:ee:ce:07:6c:3d:52:b5:9b:d9:de:2c:dc:51:
c6:ad:47:00:c4:0b:df:99:39:38:e3:06:46:4d:d1:
32:1f:78:80:e0:09:3c:ff:9f:21:6e:a1:73:4a:69:
fc:cc:a9:43:56:0e:72:a7:c9:60:7a:a6:67:76:94:
c3:f7:b6:10:e2:ac:8e:c7:9b:dc:98:e3:61:42:3c:
fb:34:db:79:a8:5f:4d:83:8c:ca:d2:db:5b:27:df:
47:be:92:1e:3d:de:71:a7:2a:72:7c:24:4a:db:c6:
a5:9b:0a:d9:4e:3d:c1:28:55:98:ee:3e:cf:b4:2b:
1e:ca:12:0e:a1:c4:18:27:0c:2f:6f:a2:59:83:85:
2b:53:01:36:4c:a5:55:cb:50:5d:32:a3:73:fd:60:
8c:25:dd:d3:fd:56:75:b6:9f:40:8e:a9:a2:a9:82:
ad:8c:a9:38:32:71:06:a8:9e:c2:23:20:50:9e:2c:
b2:48:10:16:8d:18:4f:ac:aa:71:84:93:8e:4f:2a:
cd:b2:4a:78:5b:1c:30:e3:b4:2f:ff:e0:59:d2:e8:
44:be:f6:7e:26:4d:43:af:56:81:92:fb:43:ce:ad:
a3:54:14:05:c4:46:18:63:54:e4:3f:9c:c9:93:95:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:B5:99:92:3E:86:DB:6D:2D:EB:25:E3:2C:B4:30:B2:D6:76:08
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Au61mZI-htttLesl4yy0MLLWdgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.120.0/24
IPv6:
2a09:6280:a::/48
Signature Algorithm: sha256WithRSAEncryption
73:2f:7c:8d:d2:f7:09:34:41:06:2c:7e:05:31:47:bc:5b:6f:
b4:93:86:98:6f:6d:a7:b8:a5:51:fe:e2:b6:b8:98:02:30:8b:
04:55:b9:f4:89:78:3f:11:3d:ce:3a:8c:1f:3c:59:73:2e:f3:
73:86:8c:05:67:b2:4c:dc:3a:03:47:2b:3b:66:fc:1d:7f:8d:
65:05:59:0b:1e:47:79:34:2d:9a:fe:e3:29:6d:fa:60:04:cb:
a5:74:b6:de:de:83:90:55:f1:be:44:4a:9b:41:f5:72:95:92:
ec:c5:9e:31:e2:e0:2d:a6:90:f8:01:09:dc:15:34:78:b7:0f:
34:ec:ca:1a:07:23:08:6e:5d:6e:fa:62:57:de:b3:b7:5f:6a:
74:65:bc:42:51:b3:9b:8d:8f:eb:3f:54:fc:a3:d1:4d:2f:90:
29:f6:68:54:21:03:c9:90:e2:a2:89:57:25:bb:4f:17:d6:2d:
3e:5e:9a:1c:ec:da:01:9b:37:eb:81:75:9e:af:89:7e:53:bc:
58:97:09:3c:77:c5:ba:fa:1e:85:b2:d3:87:54:5c:64:ae:56:
ac:c0:8d:06:8f:6c:ac:8d:7c:08:9d:42:3d:75:b3:10:72:ab:
56:97:be:e3:b8:1f:24:f5:bb:f7:4e:6a:6a:e0:5d:6a:d6:f5:
9e:26:5e:a7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQntWbv1ErpDU6qYE6yTZrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwMTAyMTU0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVlYjU5OTkyM2U4NmRiNmQyZGViMjVlMzJjYjQzMGIyZDY3NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfR0XDPk+rwFFLgWud/npe7OB2w9
UrWb2d4s3FHGrUcAxAvfmTk44wZGTdEyH3iA4Ak8/58hbqFzSmn8zKlDVg5yp8lg
eqZndpTD97YQ4qyOx5vcmONhQjz7NNt5qF9Ng4zK0ttbJ99HvpIePd5xpypyfCRK
28almwrZTj3BKFWY7j7PtCseyhIOocQYJwwvb6JZg4UrUwE2TKVVy1BdMqNz/WCM
Jd3T/VZ1tp9AjqmiqYKtjKk4MnEGqJ7CIyBQniyySBAWjRhPrKpxhJOOTyrNskp4
Wxww47Qv/+BZ0uhEvvZ+Jk1Dr1aBkvtDzq2jVBQFxEYYY1TkP5zJk5X0KwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFALutZmSPobbbS3rJeMstDCy1nYIMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvQXU2MW1aSS1odHR0TGVzbDR5eTBNTExXZGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWRd4MA8E
AgACMAkDBwAqCWKAAAowDQYJKoZIhvcNAQELBQADggEBAHMvfI3S9wk0QQYsfgUx
R7xbb7SThphvbae4pVH+4ra4mAIwiwRVufSJeD8RPc46jB88WXMu83OGjAVnskzc
OgNHKztm/B1/jWUFWQseR3k0LZr+4ylt+mAEy6V0tt7eg5BV8b5ESptB9XKVkuzF
njHi4C2mkPgBCdwVNHi3DzTsyhoHIwhuXW76Ylfes7dfanRlvEJRs5uNj+s/VPyj
0U0vkCn2aFQhA8mQ4qKJVyW7TxfWLT5emhzs2gGbN+uBdZ6viX5TvFiXCTx3xbr6
HoWy04dUXGSuVqzAjQaPbKyNfAidQj11sxByq1aXvuO4HyT1u/dOamrgXWrW9Z4m
Xqc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:05 2025 by rpki-client