Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/83sJuzNcyjAJmIRil7l88NYWBMA.roa
File: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (raw, json)
Hash identifier: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=
Subject key identifier: F3:7B:09:BB:33:5C:CA:30:09:98:84:62:97:B9:7C:F0:D6:16:04:C0
Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial: 0194244550DD40821C3243584A54E6A14C02
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/83sJuzNcyjAJmIRil7l88NYWBMA.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20845
IP address blocks: 89.107.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:50:dd:40:82:1c:32:43:58:4a:54:e6:a1:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f37b09bb335cca300998846297b97cf0d61604c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:19:5f:49:e8:52:6d:06:61:1d:8a:78:8e:41:
98:14:89:42:f1:35:c2:ef:83:bf:0f:e6:52:c6:6d:
ff:78:ce:ff:44:e0:68:55:03:cd:09:9d:cd:9d:38:
b9:a2:66:04:6c:44:5e:4b:ce:92:b1:cd:2e:16:98:
64:e1:f2:eb:bb:dd:45:7a:7d:f0:1b:3a:90:4e:52:
45:c1:d0:cf:40:21:da:0d:07:d5:1c:e8:f3:ab:9b:
37:f1:6f:8b:c4:9d:9b:65:3a:a7:7d:d7:7e:90:12:
34:5f:b2:32:a5:aa:87:f0:35:d1:e9:1a:26:cb:18:
0b:29:f8:ee:76:29:f7:80:31:1f:00:f8:89:69:4d:
5d:f2:19:c2:df:ee:c2:11:dc:2b:05:ff:8a:f2:d5:
ae:5f:56:97:dc:38:db:3f:a3:ab:2f:1c:bf:35:d4:
70:d4:1c:a8:c3:ef:61:a8:34:f4:2a:ed:30:83:f2:
d8:84:20:59:33:99:0a:b6:6c:9a:27:33:9e:a7:25:
98:a5:31:48:a7:91:aa:46:29:2b:23:9d:df:3f:b1:
e8:a4:d6:1a:cf:ee:41:8b:0c:66:60:27:9c:da:17:
f7:2c:33:79:1b:37:46:f2:93:0d:aa:de:ef:08:a0:
80:41:f5:f9:91:41:55:2b:0e:3a:96:6b:fa:ee:63:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:09:BB:33:5C:CA:30:09:98:84:62:97:B9:7C:F0:D6:16:04:C0
X509v3 Authority Key Identifier:
keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/83sJuzNcyjAJmIRil7l88NYWBMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.248.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e6:99:57:c8:af:a4:b6:ef:9e:9d:36:40:92:77:a7:74:01:
b4:cd:da:c4:98:8a:bf:cb:74:93:46:aa:52:ce:a1:e5:9e:84:
fc:d1:4e:4d:6c:eb:62:c6:2c:29:75:e0:10:bd:03:1b:ee:92:
3e:ac:aa:e1:0e:aa:95:22:ea:2a:b6:36:05:aa:a4:e4:7a:c9:
28:c0:03:ff:62:1c:55:09:cb:88:10:70:e1:00:ea:61:8a:f1:
f5:44:7f:e9:98:5a:8d:bb:2d:6d:17:d2:18:ba:2f:06:19:14:
a3:24:f8:3d:23:6f:b0:e5:26:80:a7:5c:88:84:33:33:cc:2c:
0a:84:56:09:0e:4d:3e:12:8e:a2:42:d7:1e:ae:c4:d4:bd:6d:
d7:4b:c8:cf:32:1d:4d:c4:11:f6:96:de:20:24:1f:f9:de:6c:
ed:e5:a7:af:f4:22:ff:9b:64:39:e8:0e:a8:71:71:b4:f8:dd:
b1:51:f9:da:06:76:a0:d9:0d:1d:43:cb:ae:56:b3:d4:c7:0f:
48:26:a8:54:f6:1f:f7:11:83:51:40:ea:76:6b:a7:83:2e:07:
90:68:f8:26:b6:27:5a:ab:69:45:c5:ed:fe:ce:7e:cc:36:8c:
8e:65:99:a8:b7:ae:84:9a:bf:53:f7:57:b1:71:f8:68:5b:6c:
85:ee:ec:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRVDdQIIcMkNYSlTmoUwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2
MTVmODIwHhcNMjUwMTAxMjM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzdiMDliYjMzNWNjYTMwMDk5ODg0NjI5N2I5N2NmMGQ2MTYwNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hlfSehSbQZhHYp4jkGYFIlC8TXC
74O/D+ZSxm3/eM7/ROBoVQPNCZ3NnTi5omYEbEReS86Ssc0uFphk4fLru91Fen3w
GzqQTlJFwdDPQCHaDQfVHOjzq5s38W+LxJ2bZTqnfdd+kBI0X7IypaqH8DXR6Rom
yxgLKfjudin3gDEfAPiJaU1d8hnC3+7CEdwrBf+K8tWuX1aX3DjbP6OrLxy/NdRw
1Byow+9hqDT0Ku0wg/LYhCBZM5kKtmyaJzOepyWYpTFIp5GqRikrI53fP7HopNYa
z+5BiwxmYCec2hf3LDN5GzdG8pMNqt7vCKCAQfX5kUFVKw46lmv67mOk0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPN7CbszXMowCZiEYpe5fPDWFgTAMB8GA1UdIwQY
MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et
ZWY3M2I3YjRjYTNjLzEvODNzSnV6TmN5akFKbUlSaWw3bDg4TllXQk1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj
LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWv4MA0G
CSqGSIb3DQEBCwUAA4IBAQCs5plXyK+ktu+enTZAknendAG0zdrEmIq/y3STRqpS
zqHlnoT80U5NbOtixiwpdeAQvQMb7pI+rKrhDqqVIuoqtjYFqqTkeskowAP/YhxV
CcuIEHDhAOphivH1RH/pmFqNuy1tF9IYui8GGRSjJPg9I2+w5SaAp1yIhDMzzCwK
hFYJDk0+Eo6iQtcersTUvW3XS8jPMh1NxBH2lt4gJB/53mzt5aev9CL/m2Q56A6o
cXG0+N2xUfnaBnag2Q0dQ8uuVrPUxw9IJqhU9h/3EYNRQOp2a6eDLgeQaPgmtida
q2lFxe3+zn7MNoyOZZmot66Emr9T91excfhoW2yF7uxr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net