Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/Ti07Uyiwydtx70Fo4ZSOknQDq74.roa
File: Ti07Uyiwydtx70Fo4ZSOknQDq74.roa (raw, json)
Hash identifier: neZXH2Iv0AXdAdXicGtr3TbVbV4P5M8haxVZ5CVBdJE=
Subject key identifier: 4E:2D:3B:53:28:B0:C9:DB:71:EF:41:68:E1:94:8E:92:74:03:AB:BE
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019421B1B0E0259641C3197E979BAD2A8E4E
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/Ti07Uyiwydtx70Fo4ZSOknQDq74.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31244
IP address blocks: 89.38.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b0:e0:25:96:41:c3:19:7e:97:9b:ad:2a:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e2d3b5328b0c9db71ef4168e1948e927403abbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:0b:20:cc:32:62:c1:ba:55:ac:1b:cc:06:
03:e2:0d:9d:79:89:82:81:d7:22:9d:b1:7b:cb:5a:
1f:8d:32:92:fd:af:03:3a:df:57:c2:78:45:78:1d:
4e:d7:b6:9f:1d:ca:af:ac:1e:57:d6:c8:d7:8c:54:
e2:80:9b:a2:36:8c:df:51:15:d8:be:a6:2e:94:13:
49:fc:40:ca:92:74:d1:90:e5:6a:c9:99:77:42:49:
1b:ff:55:12:4c:85:e6:c0:b4:5d:b6:01:aa:99:f4:
58:f3:0a:bd:57:8b:95:67:ee:ce:00:5b:03:dd:79:
1b:64:5b:73:3b:56:66:4a:41:af:67:7b:35:d6:1c:
08:ce:5d:53:f7:f5:83:57:6b:d0:06:ea:b2:db:fa:
67:7c:06:90:5e:05:51:ed:41:bd:72:97:ed:4b:91:
6c:70:68:fd:ee:c9:5a:40:f9:3d:0c:24:37:3c:6a:
33:f8:06:25:d1:60:b4:4f:3b:33:1b:8f:85:fc:a6:
c6:71:f6:e1:b1:63:3a:3a:24:fe:27:ae:23:8c:ee:
df:6c:a7:97:1f:0d:29:4f:f4:17:31:d5:8e:3d:2c:
10:e0:9f:98:6f:c4:58:08:68:17:32:59:6d:58:5c:
70:83:ba:a1:20:87:8f:48:7b:5a:fc:dd:81:64:27:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:3B:53:28:B0:C9:DB:71:EF:41:68:E1:94:8E:92:74:03:AB:BE
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/Ti07Uyiwydtx70Fo4ZSOknQDq74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.233.0/24
Signature Algorithm: sha256WithRSAEncryption
39:36:44:66:46:77:52:17:10:66:12:d9:77:53:d1:28:f9:77:
0e:5c:fb:40:70:a0:d3:c6:77:52:21:f2:d8:49:89:4e:ca:01:
72:60:08:ae:32:65:ad:1e:9d:24:e8:d6:85:10:fd:37:2e:5f:
38:1c:b0:db:d8:94:08:5b:47:66:21:10:5e:92:34:d4:09:c0:
12:b2:86:30:bf:1d:28:bf:8d:91:31:2e:30:48:fe:18:e3:85:
74:4c:04:82:8c:75:f3:ac:d4:8c:a1:13:5e:8f:a0:d2:7b:2c:
6e:7d:c3:9d:df:bf:3b:87:f7:c1:05:f6:89:b0:b1:37:05:cc:
ba:0b:7e:9d:8d:39:d0:4a:49:6e:e0:da:47:13:12:43:b9:de:
4a:e7:1a:1d:81:b5:5f:06:02:6f:1c:dd:b6:5a:24:51:2f:95:
3d:df:b4:f6:67:fe:9d:8e:07:36:98:e2:ea:7d:27:11:af:18:
49:44:57:b4:fe:fe:a3:fd:e9:24:32:f3:6e:3a:ca:d3:54:ba:
74:7e:d7:8f:41:8b:25:d7:73:af:ba:2a:58:70:53:cb:d0:c7:
11:a9:78:a0:17:a4:31:32:db:ac:23:22:41:4f:29:c5:c7:77:
3c:f1:7d:0f:eb:a0:ed:92:4f:17:53:13:d0:29:da:2e:5d:c3:
67:d1:ba:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbDgJZZBwxl+l5utKo5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5
ZDJmYjQwHhcNMjUwMTAxMTE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTJkM2I1MzI4YjBjOWRiNzFlZjQxNjhlMTk0OGU5Mjc0MDNhYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hsLIMwyYsG6VawbzAYD4g2deYmC
gdcinbF7y1ofjTKS/a8DOt9XwnhFeB1O17afHcqvrB5X1sjXjFTigJuiNozfURXY
vqYulBNJ/EDKknTRkOVqyZl3Qkkb/1USTIXmwLRdtgGqmfRY8wq9V4uVZ+7OAFsD
3XkbZFtzO1ZmSkGvZ3s11hwIzl1T9/WDV2vQBuqy2/pnfAaQXgVR7UG9cpftS5Fs
cGj97slaQPk9DCQ3PGoz+AYl0WC0TzszG4+F/KbGcfbhsWM6OiT+J64jjO7fbKeX
Hw0pT/QXMdWOPSwQ4J+Yb8RYCGgXMlltWFxwg7qhIIePSHta/N2BZCfO8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4tO1MosMnbce9BaOGUjpJ0A6u+MB8GA1UdIwQY
MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt
MTkwM2VkYWZhOGJmLzEvVGkwN1V5aXd5ZHR4NzBGbzRaU09rblFEcTc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm
LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSbpMA0G
CSqGSIb3DQEBCwUAA4IBAQA5NkRmRndSFxBmEtl3U9Eo+XcOXPtAcKDTxndSIfLY
SYlOygFyYAiuMmWtHp0k6NaFEP03Ll84HLDb2JQIW0dmIRBekjTUCcASsoYwvx0o
v42RMS4wSP4Y44V0TASCjHXzrNSMoRNej6DSeyxufcOd3787h/fBBfaJsLE3Bcy6
C36djTnQSklu4NpHExJDud5K5xodgbVfBgJvHN22WiRRL5U937T2Z/6djgc2mOLq
fScRrxhJRFe0/v6j/ekkMvNuOsrTVLp0ftePQYsl13OvuipYcFPL0McRqXigF6Qx
MtusIyJBTynFx3c88X0P66Dtkk8XUxPQKdouXcNn0bpQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net