Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ib4JdAuO2tf2Li3ATdfXp0dB76k.roa
File: ib4JdAuO2tf2Li3ATdfXp0dB76k.roa (raw, json)
Hash identifier: WkKjkG/Rm6eUK5fLC8jPiRdti2uCf1R7/1UVGrm3P5w=
Subject key identifier: 89:BE:09:74:0B:8E:DA:D7:F6:2E:2D:C0:4D:D7:D7:A7:47:41:EF:A9
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 0193B0A45EF6D03F7786681201FBF66F64CB
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ib4JdAuO2tf2Li3ATdfXp0dB76k.roa
Signing time: Tue 10 Dec 2024 12:56:22 +0000
ROA not before: Tue 10 Dec 2024 12:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50198
IP address blocks: 89.150.58.0/24 maxlen: 24
185.223.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:a4:5e:f6:d0:3f:77:86:68:12:01:fb:f6:6f:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Dec 10 12:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89be09740b8edad7f62e2dc04dd7d7a74741efa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:b3:81:04:d7:6a:54:a8:52:58:03:81:a1:
e0:bc:de:da:be:f3:cb:9e:b7:96:e6:35:24:d6:81:
ae:7b:71:a0:b8:39:64:5a:3a:33:e8:26:74:ff:26:
8b:4f:a7:6b:84:7c:47:f8:99:fe:4a:8c:db:4b:0e:
86:b4:15:47:20:31:b8:39:31:6f:1d:11:1e:51:0d:
8d:fb:b1:49:78:82:6a:2d:f3:12:fe:0e:e8:03:44:
a1:fb:44:85:c7:59:98:a8:ad:a2:b9:0c:87:d5:ec:
6c:63:39:ba:a8:ed:62:67:c1:47:c6:03:70:10:e1:
ed:38:4c:1a:3e:24:bd:7b:84:f1:df:07:25:55:49:
df:9e:40:14:b3:da:0b:5b:6e:21:b1:c3:5c:c1:1a:
2e:a6:d7:e9:5e:ca:29:18:d5:bb:c7:8a:1b:c9:80:
cf:b1:07:24:0c:82:97:41:33:13:6d:19:85:4d:30:
dd:9d:45:f5:4f:26:5a:30:84:1b:2b:c2:03:28:f1:
6d:6a:3c:68:88:1c:9f:21:7f:1a:60:e1:da:3d:9c:
e1:94:7a:96:0e:bb:41:58:e9:83:f8:a8:2a:39:ef:
40:87:4a:42:59:27:51:be:ba:33:e8:32:97:0f:df:
a3:f6:bf:aa:b6:2b:fe:3c:f3:e7:fb:9a:8b:e4:2c:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:09:74:0B:8E:DA:D7:F6:2E:2D:C0:4D:D7:D7:A7:47:41:EF:A9
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ib4JdAuO2tf2Li3ATdfXp0dB76k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.58.0/24
185.223.64.0/22
Signature Algorithm: sha256WithRSAEncryption
80:e4:8f:bd:cc:12:2d:aa:f4:b8:a1:3e:61:36:51:03:c9:e3:
21:35:b7:de:32:06:68:75:3f:99:7d:5d:04:89:d0:85:2c:d9:
6b:8c:c6:7c:13:71:c3:dd:94:1a:51:af:6d:c6:4b:05:dc:34:
d9:8e:76:42:0d:2b:2d:26:ae:01:99:af:40:74:8a:5d:14:ac:
b5:41:bc:cb:3a:50:3b:bb:52:ee:05:8f:6d:cc:fb:71:5f:b4:
31:14:67:33:61:22:2c:67:1c:8c:92:a6:5a:a0:9e:25:34:a1:
fd:6d:7b:4e:4d:f5:9e:89:d7:e0:cd:0f:1c:e8:fc:9f:dd:cb:
d5:1c:d6:ad:60:fb:00:81:a0:52:41:53:b9:33:89:3f:fa:79:
4e:3a:0b:48:4a:3c:2c:71:50:a0:8b:c6:08:dd:88:28:5a:9f:
ac:d7:06:f7:05:7a:70:bc:65:04:7a:b1:8d:85:4b:22:80:63:
1a:28:d6:8b:3d:21:13:16:cb:c9:25:c0:0d:88:6e:44:2e:2b:
b1:25:3f:3f:de:81:2a:8d:8b:ab:e6:83:ce:b2:9c:78:35:bc:
82:16:4b:cf:40:e8:cd:7e:70:46:c0:36:66:16:bd:e8:e5:56:
bb:fd:e2:9f:74:e6:5d:bd:f0:07:e8:b7:ab:f3:00:0e:72:3e:
18:43:81:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOwpF720D93hmgSAfv2b2TLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4
MmNkYzMwHhcNMjQxMjEwMTI1NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWJlMDk3NDBiOGVkYWQ3ZjYyZTJkYzA0ZGQ3ZDdhNzQ3NDFlZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BGzgQTXalSoUlgDgaHgvN7avvPL
nreW5jUk1oGue3GguDlkWjoz6CZ0/yaLT6drhHxH+Jn+SozbSw6GtBVHIDG4OTFv
HREeUQ2N+7FJeIJqLfMS/g7oA0Sh+0SFx1mYqK2iuQyH1exsYzm6qO1iZ8FHxgNw
EOHtOEwaPiS9e4Tx3wclVUnfnkAUs9oLW24hscNcwRouptfpXsopGNW7x4obyYDP
sQckDIKXQTMTbRmFTTDdnUX1TyZaMIQbK8IDKPFtajxoiByfIX8aYOHaPZzhlHqW
DrtBWOmD+KgqOe9Ah0pCWSdRvroz6DKXD9+j9r+qtiv+PPPn+5qL5CyW+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIm+CXQLjtrX9i4twE3X16dHQe+pMB8GA1UdIwQY
MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt
ZjZkZDNiNTE2MWY1LzEvaWI0SmRBdU8ydGYyTGkzQVRkZlhwMGRCNzZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1
LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZY6AwQC
ud9AMA0GCSqGSIb3DQEBCwUAA4IBAQCA5I+9zBItqvS4oT5hNlEDyeMhNbfeMgZo
dT+ZfV0EidCFLNlrjMZ8E3HD3ZQaUa9txksF3DTZjnZCDSstJq4Bma9AdIpdFKy1
QbzLOlA7u1LuBY9tzPtxX7QxFGczYSIsZxyMkqZaoJ4lNKH9bXtOTfWeidfgzQ8c
6Pyf3cvVHNatYPsAgaBSQVO5M4k/+nlOOgtISjwscVCgi8YI3YgoWp+s1wb3BXpw
vGUEerGNhUsigGMaKNaLPSETFsvJJcANiG5ELiuxJT8/3oEqjYur5oPOspx4NbyC
FkvPQOjNfnBGwDZmFr3o5Va7/eKfdOZdvfAH6Ler8wAOcj4YQ4Eu
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:16 2024 by rpki-client on console.sobornost.net