Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/52xHcZKMiLkJfC48D6ah-VZ8yTA.roa
File: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (raw, json)
Hash identifier: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=
Subject key identifier: E7:6C:47:71:92:8C:88:B9:09:7C:2E:3C:0F:A6:A1:F9:56:7C:C9:30
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 019424B36879EE76ED6375D4F2F4B835FCB7
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/52xHcZKMiLkJfC48D6ah-VZ8yTA.roa
Signing time: Thu 02 Jan 2025 01:48:44 +0000
ROA not before: Thu 02 Jan 2025 01:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6908
IP address blocks: 185.8.89.0/24 maxlen: 24
185.8.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:68:79:ee:76:ed:63:75:d4:f2:f4:b8:35:fc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e76c4771928c88b9097c2e3c0fa6a1f9567cc930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:0e:5c:c9:2f:15:45:2c:d2:3e:20:b8:b9:
55:de:59:70:6d:26:3e:fa:9d:f2:13:68:e3:ef:4e:
4a:4e:8a:53:11:1f:7a:88:fd:79:20:37:91:e1:ed:
9b:e9:21:62:01:7e:2a:9a:ec:99:a3:44:fc:b0:95:
ed:89:15:81:de:5b:89:e7:ef:d1:13:8c:0b:11:b8:
a4:41:d2:36:93:12:93:e8:15:ca:39:7d:be:77:5b:
2f:95:a4:4d:a7:61:62:98:e5:b2:99:66:39:90:63:
e3:36:7c:f3:c6:a3:55:a8:41:49:5d:0c:0e:de:d7:
79:44:9d:8e:6a:d1:1a:ca:f0:b2:6c:1c:20:a7:b8:
b1:c2:6c:ff:83:c5:1a:dd:66:c1:ac:a8:9a:69:21:
7a:8c:65:00:89:b9:1c:50:ae:f6:0a:1a:a2:a0:6b:
88:98:00:be:b0:d7:a4:ff:9a:fa:c7:f5:05:e8:c8:
71:91:ac:86:57:cb:57:59:d9:90:4b:1a:51:d4:ab:
50:91:27:11:f9:93:60:a4:c7:4b:2f:f8:05:9c:43:
58:3f:29:0e:c7:31:dc:13:4f:5e:22:19:b5:b3:96:
04:55:dd:24:4d:ce:bb:81:66:5a:11:50:5d:a7:02:
fa:40:0a:0c:e1:15:81:31:69:9f:c6:e2:ea:6e:ee:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:47:71:92:8C:88:B9:09:7C:2E:3C:0F:A6:A1:F9:56:7C:C9:30
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/52xHcZKMiLkJfC48D6ah-VZ8yTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.89.0/24
185.8.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d7:dd:50:98:1e:30:15:38:70:74:0e:b7:d9:db:91:78:7f:
ef:c8:f9:f7:71:4c:b7:52:ff:dd:f0:45:75:46:b8:75:bc:66:
10:48:b7:7b:1f:8a:17:85:4c:7c:f1:0c:88:7c:bd:e5:99:54:
5f:d7:4e:d9:02:21:a4:da:e8:40:31:33:a7:21:10:4e:09:3d:
ca:5f:e5:c1:c1:4a:20:73:e7:37:88:42:03:5f:ae:8b:e6:4d:
03:86:71:3d:ce:7f:ec:c1:e1:ef:b2:6b:b3:73:c8:05:14:ff:
95:69:f2:04:c8:d8:1f:72:90:38:5f:a2:ca:b0:21:13:cf:d0:
65:1d:2f:92:11:ff:94:9e:21:fd:cd:bf:6d:0d:5e:8b:a8:7e:
b7:ad:89:f6:6f:bf:9d:b8:f9:2d:54:e6:89:d8:5f:3f:62:8b:
a9:9c:96:91:71:43:ee:ea:07:9a:51:9a:5c:c5:fb:35:e4:e2:
04:0a:41:b1:72:98:67:ed:90:c2:4f:c0:e6:8e:7e:ea:ff:c2:
b3:83:de:d7:9f:65:10:c9:27:18:5e:46:72:79:55:9f:33:59:
31:6e:46:3b:00:c9:3e:74:7a:85:e7:14:d4:a1:82:7a:dd:16:
ca:64:98:63:5d:3f:f7:dc:d3:f7:23:1a:39:7a:3e:f9:33:3e:
17:47:fe:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQks2h57nbtY3XU8vS4Nfy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz
NzgwYjgwHhcNMjUwMTAyMDE0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzZjNDc3MTkyOGM4OGI5MDk3YzJlM2MwZmE2YTFmOTU2N2NjOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEsOXMkvFUUs0j4guLlV3llwbSY+
+p3yE2jj705KTopTER96iP15IDeR4e2b6SFiAX4qmuyZo0T8sJXtiRWB3luJ5+/R
E4wLEbikQdI2kxKT6BXKOX2+d1svlaRNp2FimOWymWY5kGPjNnzzxqNVqEFJXQwO
3td5RJ2OatEayvCybBwgp7ixwmz/g8Ua3WbBrKiaaSF6jGUAibkcUK72ChqioGuI
mAC+sNek/5r6x/UF6MhxkayGV8tXWdmQSxpR1KtQkScR+ZNgpMdLL/gFnENYPykO
xzHcE09eIhm1s5YEVd0kTc67gWZaEVBdpwL6QAoM4RWBMWmfxuLqbu426QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOdsR3GSjIi5CXwuPA+moflWfMkwMB8GA1UdIwQY
MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt
MWYxM2Y1NWQwMDU5LzEvNTJ4SGNaS01pTGtKZkM0OEQ2YWgtVlo4eVRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5
LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQhZAwQA
uQhbMA0GCSqGSIb3DQEBCwUAA4IBAQBc191QmB4wFThwdA632duReH/vyPn3cUy3
Uv/d8EV1Rrh1vGYQSLd7H4oXhUx88QyIfL3lmVRf107ZAiGk2uhAMTOnIRBOCT3K
X+XBwUogc+c3iEIDX66L5k0DhnE9zn/sweHvsmuzc8gFFP+VafIEyNgfcpA4X6LK
sCETz9BlHS+SEf+UniH9zb9tDV6LqH63rYn2b7+duPktVOaJ2F8/YoupnJaRcUPu
6geaUZpcxfs15OIECkGxcphn7ZDCT8Dmjn7q/8Kzg97Xn2UQyScYXkZyeVWfM1kx
bkY7AMk+dHqF5xTUoYJ63RbKZJhjXT/33NP3Ixo5ej75Mz4XR/5u
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net