Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8bKZng8vj_XHWT3FpOdY51ZjnRU.roa
File: 8bKZng8vj_XHWT3FpOdY51ZjnRU.roa (raw, json)
Hash identifier: MSJHLSlW3RLwID7qvKPQLhMokrB9IlJccRYbU4uPIKc=
Subject key identifier: F1:B2:99:9E:0F:2F:8F:F5:C7:59:3D:C5:A4:E7:58:E7:56:63:9D:15
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01962DCE0BA44B33B97558024C8B1D4DCE03
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8bKZng8vj_XHWT3FpOdY51ZjnRU.roa
Signing time: Sun 13 Apr 2025 06:20:00 +0000
ROA not before: Sun 13 Apr 2025 06:20:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213574
IP address blocks: 89.144.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:ce:0b:a4:4b:33:b9:75:58:02:4c:8b:1d:4d:ce:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 13 06:20:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1b2999e0f2f8ff5c7593dc5a4e758e756639d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:8b:a9:ec:1c:42:7f:f5:bc:45:dd:03:93:
bb:87:5e:c5:9d:a7:07:91:a8:33:1e:0c:f1:54:37:
45:9d:9e:72:a3:88:e4:9a:da:7a:ac:84:a7:b5:ca:
bb:d8:03:3a:78:24:87:67:97:52:10:04:f2:06:53:
aa:32:12:5e:65:c7:07:a4:15:c9:63:79:82:d1:a1:
d8:b7:f6:33:e5:c8:cc:53:1a:a3:b2:d6:5d:f6:1b:
55:08:5d:46:bb:fa:77:b6:85:0b:3b:9f:eb:eb:da:
86:7c:43:6f:ee:60:cc:d5:5a:f4:40:27:1c:a7:3e:
bf:4f:fb:e9:de:06:c7:e1:ee:e3:89:93:3d:c1:cd:
cf:0a:a7:a0:21:f9:b2:bf:d8:70:3e:71:a6:5c:9b:
f8:b1:f1:9a:77:0d:99:18:8a:11:61:13:a7:8f:40:
53:71:f9:99:b4:1b:fd:fd:93:e4:21:d0:47:2f:d9:
ab:90:bb:d6:0a:33:d0:ef:de:3b:d2:48:75:5a:29:
d6:dd:7c:37:5a:75:4e:bd:82:b7:bb:f6:63:3b:ca:
06:28:8a:0e:b4:9e:d4:96:99:78:a4:0e:60:ed:5a:
1c:64:7e:56:ac:89:32:8f:97:d7:02:80:46:bb:cc:
58:a9:88:3d:45:72:1f:13:0f:38:e4:8d:e8:6d:a9:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:99:9E:0F:2F:8F:F5:C7:59:3D:C5:A4:E7:58:E7:56:63:9D:15
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8bKZng8vj_XHWT3FpOdY51ZjnRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.10.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a5:1d:ac:6f:a5:7c:b0:1f:6c:1c:31:26:8a:8d:82:89:36:
7b:df:d9:f6:c2:61:9c:fe:67:32:6e:b5:61:e1:d7:82:6a:fc:
f7:3f:85:cd:68:96:83:3f:56:e5:66:28:60:91:a2:1e:4d:bc:
d2:76:cf:31:60:59:a9:5c:b0:d2:de:1f:ff:db:ae:f9:40:58:
c7:75:10:d2:ee:ed:aa:4c:ce:30:75:f5:bc:66:15:14:ce:6c:
eb:05:1b:bf:da:10:07:00:4c:b3:25:00:50:49:18:e7:4c:c1:
cb:10:d5:b6:e4:b9:64:3b:dd:5b:31:59:9f:bd:00:73:46:48:
47:97:86:27:1a:2b:8b:20:dd:05:fc:28:f0:f5:a7:1a:38:9e:
1a:4b:22:28:57:a5:b9:57:6d:bf:ab:44:ce:1e:4b:1e:70:b7:
e7:40:61:97:2d:00:16:ba:cf:30:ba:84:d1:91:76:41:89:8d:
57:5e:ee:48:d2:a9:4a:22:f7:df:08:bd:fa:e0:29:c0:c9:b1:
be:44:dc:eb:5f:f0:da:62:15:df:17:30:1d:71:72:87:e8:4c:
23:cb:e0:90:63:60:e1:90:eb:6b:5e:0e:b5:6f:b8:8d:31:9d:
93:5d:31:9e:bb:71:c0:5f:ff:58:c7:36:28:cd:5e:72:51:9c:
8d:d6:3c:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYtzgukSzO5dVgCTIsdTc4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDEzMDYyMDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWIyOTk5ZTBmMmY4ZmY1Yzc1OTNkYzVhNGU3NThlNzU2NjM5ZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/WLqewcQn/1vEXdA5O7h17FnacH
kagzHgzxVDdFnZ5yo4jkmtp6rISntcq72AM6eCSHZ5dSEATyBlOqMhJeZccHpBXJ
Y3mC0aHYt/Yz5cjMUxqjstZd9htVCF1Gu/p3toULO5/r69qGfENv7mDM1Vr0QCcc
pz6/T/vp3gbH4e7jiZM9wc3PCqegIfmyv9hwPnGmXJv4sfGadw2ZGIoRYROnj0BT
cfmZtBv9/ZPkIdBHL9mrkLvWCjPQ79470kh1WinW3Xw3WnVOvYK3u/ZjO8oGKIoO
tJ7Ulpl4pA5g7VocZH5WrIkyj5fXAoBGu8xYqYg9RXIfEw845I3obaknXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGymZ4PL4/1x1k9xaTnWOdWY50VMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvOGJLWm5nOHZqX1hIV1QzRnBPZFk1MVpqblJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZAKMA0G
CSqGSIb3DQEBCwUAA4IBAQBYpR2sb6V8sB9sHDEmio2CiTZ739n2wmGc/mcybrVh
4deCavz3P4XNaJaDP1blZihgkaIeTbzSds8xYFmpXLDS3h//2675QFjHdRDS7u2q
TM4wdfW8ZhUUzmzrBRu/2hAHAEyzJQBQSRjnTMHLENW25LlkO91bMVmfvQBzRkhH
l4YnGiuLIN0F/Cjw9acaOJ4aSyIoV6W5V22/q0TOHksecLfnQGGXLQAWus8wuoTR
kXZBiY1XXu5I0qlKIvffCL364CnAybG+RNzrX/DaYhXfFzAdcXKH6Ewjy+CQY2Dh
kOtrXg61b7iNMZ2TXTGeu3HAX/9YxzYozV5yUZyN1jzT
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net