Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/vEwnUG1RajWkcLEBWJPnIiLLgBM.roa
File: vEwnUG1RajWkcLEBWJPnIiLLgBM.roa (raw, json)
Hash identifier: sSHl9JnRfzO2J5TGzVLlmHvYGgd6KK351LDclJH6UZQ=
Subject key identifier: BC:4C:27:50:6D:51:6A:35:A4:70:B1:01:58:93:E7:22:22:CB:80:13
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01942143F918EE36EB22960AC76C47856FA2
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/vEwnUG1RajWkcLEBWJPnIiLLgBM.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43938
IP address blocks: 89.36.89.0/24 maxlen: 24
89.36.193.0/24 maxlen: 24
188.208.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:18:ee:36:eb:22:96:0a:c7:6c:47:85:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc4c27506d516a35a470b1015893e72222cb8013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:dd:71:35:23:0f:17:97:1a:1b:40:42:dc:
02:69:c5:4e:4d:9c:46:f7:7c:38:17:fb:b8:ff:d4:
0d:41:22:3a:40:71:25:ea:49:4e:2b:aa:ea:ce:44:
e8:d4:7d:c8:b0:62:cf:db:05:58:3e:50:68:1b:05:
52:f6:fe:1b:c4:3d:99:4a:75:68:d4:44:e1:2f:24:
4c:9c:37:bd:55:cf:a3:d8:55:1f:56:60:fe:88:a8:
04:a8:ca:32:16:60:e8:ed:51:d2:75:12:1c:2f:e0:
6b:3c:94:d0:3d:e6:3f:a3:22:65:80:9b:85:a9:25:
e4:32:af:13:d4:1a:26:65:17:52:dd:e4:be:b1:bc:
5a:87:b6:11:01:e0:e0:35:58:53:c1:05:d4:b3:4a:
36:20:a5:c0:11:11:08:ec:61:bb:8f:f6:81:39:a9:
9e:9c:ea:24:e0:a6:10:19:e4:fc:d4:6a:c8:4e:69:
ed:7e:78:07:4d:5e:b3:d3:a6:a8:9e:0e:af:4b:28:
2c:c6:6c:50:87:66:62:d2:5b:1d:99:9d:38:25:60:
e3:dd:bf:3e:fc:ff:ef:fe:e7:10:d4:5e:a9:37:1e:
2f:b6:cc:32:bf:10:eb:d2:6b:25:57:e7:04:9f:16:
53:a2:37:27:2e:3e:27:a7:b3:26:67:17:4c:94:fe:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4C:27:50:6D:51:6A:35:A4:70:B1:01:58:93:E7:22:22:CB:80:13
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/vEwnUG1RajWkcLEBWJPnIiLLgBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.89.0/24
89.36.193.0/24
188.208.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:63:4f:e4:8f:c8:bc:ca:24:99:79:46:c0:3d:76:8e:47:cc:
f3:29:35:2e:fa:0f:d5:13:58:3e:7b:6e:07:62:48:5f:47:b3:
12:65:ee:bb:82:76:d6:b9:fd:56:8a:ee:bf:1f:d1:30:07:5d:
5b:d8:85:1e:20:c7:18:d1:9f:ef:dd:b1:9d:50:84:0b:8b:09:
eb:6c:82:53:1e:51:7f:10:6a:28:07:2a:89:60:b6:b5:2c:10:
eb:eb:be:b9:be:06:96:0c:1e:dd:39:52:27:46:43:13:30:1d:
42:fd:30:b9:31:af:80:04:ff:55:25:32:82:cb:01:fa:14:9c:
99:90:27:0d:84:a2:ce:b5:c4:07:82:de:8f:08:a7:b9:67:12:
2b:d6:91:49:3b:e8:25:87:46:0b:95:fc:1c:bb:50:a6:93:f7:
6d:89:3d:4a:8f:f4:4e:7f:fe:b2:73:7d:b7:03:2b:5f:74:72:
b0:81:2c:45:78:a6:1b:4e:0c:3e:2c:cc:53:2a:b4:a5:d4:df:
77:43:8b:48:7c:f6:58:d2:a1:e4:4a:17:15:a9:75:a0:f1:9b:
15:e4:58:c0:f8:97:a0:64:2a:38:cc:a4:57:7a:d0:9f:42:20:
bd:a4:e5:a2:ec:a1:51:52:78:ad:07:64:03:f1:ba:35:86:6e:
34:f5:6f:46
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhQ/kY7jbrIpYKx2xHhW+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz
Y2UxYmMwHhcNMjUwMTAxMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzRjMjc1MDZkNTE2YTM1YTQ3MGIxMDE1ODkzZTcyMjIyY2I4MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUfdcTUjDxeXGhtAQtwCacVOTZxG
93w4F/u4/9QNQSI6QHEl6klOK6rqzkTo1H3IsGLP2wVYPlBoGwVS9v4bxD2ZSnVo
1EThLyRMnDe9Vc+j2FUfVmD+iKgEqMoyFmDo7VHSdRIcL+BrPJTQPeY/oyJlgJuF
qSXkMq8T1BomZRdS3eS+sbxah7YRAeDgNVhTwQXUs0o2IKXAEREI7GG7j/aBOame
nOok4KYQGeT81GrITmntfngHTV6z06aong6vSygsxmxQh2Zi0lsdmZ04JWDj3b8+
/P/v/ucQ1F6pNx4vtswyvxDr0mslV+cEnxZTojcnLj4np7MmZxdMlP6kKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLxMJ1BtUWo1pHCxAViT5yIiy4ATMB8GA1UdIwQY
MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct
MmFkMTk1MjY0YzcyLzEvdkV3blVHMVJhaldrY0xFQldKUG5JaUxMZ0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy
LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSRZAwQA
WSTBAwQAvNAeMA0GCSqGSIb3DQEBCwUAA4IBAQCyY0/kj8i8yiSZeUbAPXaOR8zz
KTUu+g/VE1g+e24HYkhfR7MSZe67gnbWuf1Wiu6/H9EwB11b2IUeIMcY0Z/v3bGd
UIQLiwnrbIJTHlF/EGooByqJYLa1LBDr6765vgaWDB7dOVInRkMTMB1C/TC5Ma+A
BP9VJTKCywH6FJyZkCcNhKLOtcQHgt6PCKe5ZxIr1pFJO+glh0YLlfwcu1Cmk/dt
iT1Kj/ROf/6yc323AytfdHKwgSxFeKYbTgw+LMxTKrSl1N93Q4tIfPZY0qHkShcV
qXWg8ZsV5FjA+JegZCo4zKRXetCfQiC9pOWi7KFRUnitB2QD8bo1hm409W9G
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net