Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa
File: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (raw, json)
Hash identifier: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=
Subject key identifier: 79:AD:2F:10:8F:DF:18:CC:A0:D6:33:D9:57:E8:4A:1F:C2:02:FB:64
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C731F6633317C306A994E512F000B
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50889
IP address blocks: 89.248.237.0/24 maxlen: 24
217.199.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:1f:66:33:31:7c:30:6a:99:4e:51:2f:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79ad2f108fdf18cca0d633d957e84a1fc202fb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:7b:41:1c:d9:0c:e6:43:f1:02:ca:8e:ed:
9a:d9:75:5c:f8:aa:d3:99:08:57:60:05:e3:31:9d:
0b:08:49:ac:5f:f7:91:c8:4e:be:b0:c3:81:1b:9d:
c7:f2:55:ce:cd:2c:ab:ed:04:d5:41:95:9b:ad:96:
ce:4e:c2:34:ae:ab:5d:0a:9a:09:f2:70:e5:fd:4b:
3a:05:05:18:12:76:b3:45:28:10:9b:cb:39:6b:40:
4f:a1:f8:ca:33:50:3f:63:58:33:c4:05:74:cc:9b:
e4:d5:1b:fb:0c:2a:fb:bb:f3:f3:d1:76:b1:85:a0:
7d:47:ff:15:97:e0:e4:e9:34:a6:e8:fa:de:f6:3e:
0d:f9:4c:ef:45:94:60:37:04:24:63:c8:18:76:1c:
a5:f5:cd:a2:20:67:29:4f:cc:a6:cb:fb:cd:5f:58:
cc:4a:a0:89:f5:4a:ba:70:90:d6:03:fa:ea:d2:00:
62:38:bf:d8:ba:08:d3:58:b2:1e:50:48:be:46:3d:
c3:8e:7c:61:85:1d:9a:db:be:74:16:69:5a:fe:50:
27:9a:b8:a6:94:15:00:61:b9:a2:02:dd:e2:b9:0e:
d6:f3:a4:4a:a9:89:21:c0:f7:28:32:c2:f8:05:b2:
36:f7:8c:a2:9e:3b:fd:3c:1b:d5:ea:c0:85:ae:4b:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AD:2F:10:8F:DF:18:CC:A0:D6:33:D9:57:E8:4A:1F:C2:02:FB:64
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.237.0/24
217.199.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ec:29:36:d4:14:81:d0:e0:c4:6f:a2:7a:91:26:9c:b2:92:
48:d0:db:b3:c1:80:9e:5c:96:05:ef:79:ff:9e:dc:38:95:7d:
cc:9d:1f:7b:f8:fe:e3:d4:44:da:0e:47:60:54:8e:ee:fb:12:
cf:ee:d6:ce:cf:cd:be:2a:4c:12:c1:63:c5:77:d0:4b:ef:90:
7b:f7:b3:b6:b0:ef:e8:c8:38:94:a8:3b:b9:9b:23:10:88:c3:
6b:62:aa:f8:f2:6a:95:2c:7b:55:a9:45:39:95:33:2c:2e:01:
32:c2:a0:03:b9:f1:e8:4a:90:7f:51:7b:db:8d:fc:f7:a4:03:
6c:27:64:5f:cc:1a:1e:c6:15:3d:15:e4:24:58:50:82:7c:75:
dc:b4:9a:c6:86:5b:3b:42:44:d0:92:c9:46:cc:73:a7:33:4f:
e6:68:15:37:93:25:68:e5:b6:d9:a7:76:17:54:1d:e3:9c:98:
af:c3:19:95:63:c8:4d:c9:79:db:fd:c9:ee:79:7f:23:38:e9:
c8:a6:4e:39:f3:56:f3:f9:60:04:81:b2:a9:14:4e:55:b8:f4:
a6:81:91:eb:a4:72:f4:3e:c6:1d:47:8e:16:e6:a7:09:c0:75:
fc:c6:ce:d1:59:6d:9a:61:4a:0f:97:12:10:2e:69:1a:6e:ed:
40:31:d3:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjHMfZjMxfDBqmU5RLwALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0
OTdhZjAwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWFkMmYxMDhmZGYxOGNjYTBkNjMzZDk1N2U4NGExZmMyMDJmYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8x7QRzZDOZD8QLKju2a2XVc+KrT
mQhXYAXjMZ0LCEmsX/eRyE6+sMOBG53H8lXOzSyr7QTVQZWbrZbOTsI0rqtdCpoJ
8nDl/Us6BQUYEnazRSgQm8s5a0BPofjKM1A/Y1gzxAV0zJvk1Rv7DCr7u/Pz0Xax
haB9R/8Vl+Dk6TSm6Pre9j4N+UzvRZRgNwQkY8gYdhyl9c2iIGcpT8ymy/vNX1jM
SqCJ9Uq6cJDWA/rq0gBiOL/YugjTWLIeUEi+Rj3DjnxhhR2a2750Fmla/lAnmrim
lBUAYbmiAt3iuQ7W86RKqYkhwPcoMsL4BbI294yinjv9PBvV6sCFrksXnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHmtLxCP3xjMoNYz2VfoSh/CAvtkMB8GA1UdIwQY
MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut
MWJhNTQzZWVhZWQ3LzEvZWEwdkVJX2ZHTXlnMWpQWlYtaEtIOElDLTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3
LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfjtAwQA
2cfeMA0GCSqGSIb3DQEBCwUAA4IBAQA77Ck21BSB0ODEb6J6kSacspJI0NuzwYCe
XJYF73n/ntw4lX3MnR97+P7j1ETaDkdgVI7u+xLP7tbOz82+KkwSwWPFd9BL75B7
97O2sO/oyDiUqDu5myMQiMNrYqr48mqVLHtVqUU5lTMsLgEywqADufHoSpB/UXvb
jfz3pANsJ2RfzBoexhU9FeQkWFCCfHXctJrGhls7QkTQkslGzHOnM0/maBU3kyVo
5bbZp3YXVB3jnJivwxmVY8hNyXnb/cnueX8jOOnIpk4581bz+WAEgbKpFE5VuPSm
gZHrpHL0PsYdR44W5qcJwHX8xs7RWW2aYUoPlxIQLmkabu1AMdNl
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net