Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/l9yER5OzV2Zs9rEny9MaVLJSJWE.roa
File: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (raw, json)
Hash identifier: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=
Subject key identifier: 97:DC:84:47:93:B3:57:66:6C:F6:B1:27:CB:D3:1A:54:B2:52:25:61
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9E1158705813611B98D06BD07112
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/l9yER5OzV2Zs9rEny9MaVLJSJWE.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206430
IP address blocks: 89.45.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9e:11:58:70:58:13:61:1b:98:d0:6b:d0:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97dc844793b357666cf6b127cbd31a54b2522561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d8:81:ba:a9:b0:47:7e:49:7b:44:24:ea:c6:
5b:75:1e:34:92:5b:62:ae:de:ec:6d:a1:2d:6e:9a:
c0:b5:47:a2:7f:d4:89:c8:6f:98:3d:37:d6:1e:8c:
be:89:68:f2:50:bb:8f:b7:bd:22:f7:9e:a5:8f:6b:
0d:35:33:4b:16:b3:10:f5:57:43:ff:79:ea:9c:85:
a6:fd:08:33:fe:f8:4e:46:be:bf:b1:f6:9f:c4:4c:
ba:5e:ed:80:98:06:47:8f:ed:43:39:24:01:66:59:
26:0e:08:01:41:fe:00:2c:da:0d:17:d7:c9:a3:5f:
46:c8:f0:75:5a:b2:55:38:2c:24:46:aa:58:ed:38:
cc:53:22:16:bf:63:80:48:0b:9b:d2:86:60:6e:e1:
f1:84:fb:e3:2c:70:51:1c:84:65:d5:fb:52:c8:96:
7b:c7:90:a4:6a:47:82:85:86:db:64:70:b3:c3:d3:
e5:8f:51:89:59:30:4a:78:f2:d0:24:3d:91:ca:0a:
19:21:0a:81:2d:b8:61:ed:12:50:14:14:c9:94:36:
ae:b8:42:c1:07:f9:00:c3:02:21:2c:2a:65:b6:59:
ef:17:21:14:d2:f3:40:bf:02:50:eb:d7:66:70:af:
71:88:55:11:2c:0c:9e:cc:e5:6c:a7:bc:89:dc:5d:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:84:47:93:B3:57:66:6C:F6:B1:27:CB:D3:1A:54:B2:52:25:61
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/l9yER5OzV2Zs9rEny9MaVLJSJWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.244.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cd:75:dc:2d:c1:b8:4f:a9:0e:01:12:9c:fe:42:e2:93:7b:
d5:67:85:05:16:ff:78:32:da:80:56:de:19:2b:f2:98:b4:a6:
e5:ce:e4:f0:5d:0a:86:c1:54:ca:39:8a:69:7f:37:32:51:1e:
90:d1:1b:dc:71:90:84:5e:ce:d4:41:e6:88:3c:94:21:df:e0:
c5:1f:53:b4:9b:08:b4:a5:e2:f9:b7:90:41:f7:7e:a6:b8:4c:
29:72:ee:33:55:7b:5c:28:55:b3:36:db:08:30:78:88:c8:8e:
04:19:1f:c0:7e:48:ad:2f:f4:6c:ae:19:50:bb:82:74:45:1f:
53:b1:23:ed:9e:02:93:7d:df:22:a8:c7:59:03:70:0a:ef:61:
37:a6:67:76:00:51:51:5f:bc:21:c4:8b:f3:94:e1:7b:09:2e:
c5:7a:88:ef:1c:5c:e4:22:6d:84:c4:fe:da:49:92:48:e5:34:
18:f2:0c:6f:4b:d0:89:88:7a:97:ab:29:d4:9d:2b:32:b8:6a:
5a:2c:fa:9e:6d:92:00:ed:d6:58:99:c8:1b:76:b3:c1:4d:96:
35:d2:64:92:03:82:40:0b:be:2b:cb:82:34:e9:f4:16:33:71:
3d:d3:f4:34:9f:f5:9b:43:1e:ea:23:c8:85:2a:00:e7:86:2b:
a1:16:2d:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma54RWHBYE2EbmNBr0HESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2RjODQ0NzkzYjM1NzY2NmNmNmIxMjdjYmQzMWE1NGIyNTIyNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89iBuqmwR35Je0Qk6sZbdR40klti
rt7sbaEtbprAtUeif9SJyG+YPTfWHoy+iWjyULuPt70i956lj2sNNTNLFrMQ9VdD
/3nqnIWm/Qgz/vhORr6/sfafxEy6Xu2AmAZHj+1DOSQBZlkmDggBQf4ALNoNF9fJ
o19GyPB1WrJVOCwkRqpY7TjMUyIWv2OASAub0oZgbuHxhPvjLHBRHIRl1ftSyJZ7
x5CkakeChYbbZHCzw9Plj1GJWTBKePLQJD2RygoZIQqBLbhh7RJQFBTJlDauuELB
B/kAwwIhLCpltlnvFyEU0vNAvwJQ69dmcK9xiFURLAyezOVsp7yJ3F1uYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJfchEeTs1dmbPaxJ8vTGlSyUiVhMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvbDl5RVI1T3pWMlpzOXJFbnk5TWFWTEpTSldFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS30MA0G
CSqGSIb3DQEBCwUAA4IBAQABzXXcLcG4T6kOARKc/kLik3vVZ4UFFv94MtqAVt4Z
K/KYtKblzuTwXQqGwVTKOYppfzcyUR6Q0RvccZCEXs7UQeaIPJQh3+DFH1O0mwi0
peL5t5BB936muEwpcu4zVXtcKFWzNtsIMHiIyI4EGR/AfkitL/RsrhlQu4J0RR9T
sSPtngKTfd8iqMdZA3AK72E3pmd2AFFRX7whxIvzlOF7CS7FeojvHFzkIm2ExP7a
SZJI5TQY8gxvS9CJiHqXqynUnSsyuGpaLPqebZIA7dZYmcgbdrPBTZY10mSSA4JA
C74ry4I06fQWM3E90/Q0n/WbQx7qI8iFKgDnhiuhFi0E
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net