Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/owZB8ZzNInvz4qCAZczHr5i6TGQ.roa
File: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (raw, json)
Hash identifier: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=
Subject key identifier: A3:06:41:F1:9C:CD:22:7B:F3:E2:A0:80:65:CC:C7:AF:98:BA:4C:64
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D65450FCF4D437422F7F5682692A31
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/owZB8ZzNInvz4qCAZczHr5i6TGQ.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49737
IP address blocks: 89.25.32.0/24 maxlen: 24
89.25.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:54:50:fc:f4:d4:37:42:2f:7f:56:82:69:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30641f19ccd227bf3e2a08065ccc7af98ba4c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:d0:57:6a:bd:23:37:d1:da:25:7e:ec:32:
84:1f:9e:13:71:6f:db:34:c2:5c:53:af:93:69:f8:
ac:28:be:24:38:cf:ac:4b:68:4c:d5:cd:c5:40:38:
03:b8:8f:1d:c8:c2:d4:10:a7:64:ef:7e:97:24:83:
aa:33:14:09:27:3f:20:bd:b9:84:4f:cd:b7:f6:0b:
3c:87:80:92:76:3a:aa:05:cd:68:ea:68:aa:73:79:
19:e4:d4:25:96:00:d8:c5:72:98:bb:80:9a:56:09:
2d:5e:e2:c4:38:a2:d9:bc:20:1f:19:cb:d5:4a:cc:
bc:e8:61:9e:01:12:c0:eb:d5:dd:92:6b:28:e1:06:
6e:db:c8:67:53:5c:a5:43:48:a9:ee:28:80:51:e6:
33:46:86:0f:c5:27:25:cd:76:62:be:e6:34:69:5f:
a6:1e:8c:22:79:08:e9:d8:a2:16:0d:5c:92:f8:76:
fc:16:b7:90:17:52:ba:3e:18:57:c0:0c:7f:97:a2:
5c:8c:f8:58:7d:88:23:be:96:ad:96:cb:e9:ca:15:
58:38:ed:1d:d4:86:17:4c:7f:65:ea:9c:b1:35:8c:
61:38:10:54:86:ef:69:c5:14:6f:d2:c8:4b:02:de:
62:11:a6:da:21:61:5a:a1:fb:d3:65:83:05:29:a7:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:06:41:F1:9C:CD:22:7B:F3:E2:A0:80:65:CC:C7:AF:98:BA:4C:64
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/owZB8ZzNInvz4qCAZczHr5i6TGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.32.0/24
89.25.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9a:f0:0e:b7:c0:58:b4:ee:55:e1:23:2e:19:03:81:45:7b:
da:e2:c5:3c:72:b4:97:d2:76:c5:82:db:42:b4:23:3b:5b:93:
f1:03:4f:c9:15:0b:78:0c:ed:68:04:6d:10:1f:b5:e9:c4:3d:
fc:f8:2e:49:70:88:a3:72:75:ce:f1:4d:31:0c:b2:6c:45:89:
0b:ee:88:15:c4:4b:51:a4:36:08:42:4d:7c:ce:84:b0:b4:86:
f9:a1:9d:63:47:27:ce:d5:f0:b5:87:ae:24:d3:ba:0d:c6:99:
2c:6f:b6:3c:cd:ff:0a:db:5f:5f:22:c2:66:6a:19:fb:d6:a2:
ff:51:ca:da:28:64:e8:78:95:64:40:14:dd:48:c5:08:ae:f1:
d3:24:2e:bc:0d:65:93:8b:92:d2:6b:ab:3c:33:8e:fa:2b:2d:
19:54:32:60:6b:79:84:81:ef:f6:7b:57:bc:91:44:ed:5f:03:
68:e1:b2:04:e3:c2:25:77:b2:c6:4d:86:b0:38:f7:63:0d:ec:
38:9d:7f:94:f3:14:fe:24:33:5f:a9:b2:1d:21:77:5c:63:bf:
31:ed:11:df:d6:89:2a:ec:8c:af:38:21:0e:4f:11:c9:68:54:
85:9a:62:2e:02:79:fa:26:f0:aa:68:92:51:e0:99:49:66:85:
3b:fa:ec:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1lRQ/PTUN0Ivf1aCaSoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjUwMTAxMDc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzA2NDFmMTljY2QyMjdiZjNlMmEwODA2NWNjYzdhZjk4YmE0YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji3QV2q9IzfR2iV+7DKEH54TcW/b
NMJcU6+TafisKL4kOM+sS2hM1c3FQDgDuI8dyMLUEKdk736XJIOqMxQJJz8gvbmE
T8239gs8h4CSdjqqBc1o6miqc3kZ5NQllgDYxXKYu4CaVgktXuLEOKLZvCAfGcvV
Ssy86GGeARLA69Xdkmso4QZu28hnU1ylQ0ip7iiAUeYzRoYPxSclzXZivuY0aV+m
HowieQjp2KIWDVyS+Hb8FreQF1K6PhhXwAx/l6JcjPhYfYgjvpatlsvpyhVYOO0d
1IYXTH9l6pyxNYxhOBBUhu9pxRRv0shLAt5iEabaIWFaofvTZYMFKafjAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKMGQfGczSJ78+KggGXMx6+YukxkMB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvb3daQjhaek5JbnZ6NHFDQVpjekhyNWk2VEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRkgAwQA
WRkwMA0GCSqGSIb3DQEBCwUAA4IBAQCimvAOt8BYtO5V4SMuGQOBRXva4sU8crSX
0nbFgttCtCM7W5PxA0/JFQt4DO1oBG0QH7XpxD38+C5JcIijcnXO8U0xDLJsRYkL
7ogVxEtRpDYIQk18zoSwtIb5oZ1jRyfO1fC1h64k07oNxpksb7Y8zf8K219fIsJm
ahn71qL/UcraKGToeJVkQBTdSMUIrvHTJC68DWWTi5LSa6s8M476Ky0ZVDJga3mE
ge/2e1e8kUTtXwNo4bIE48Ild7LGTYawOPdjDew4nX+U8xT+JDNfqbIdIXdcY78x
7RHf1okq7IyvOCEOTxHJaFSFmmIuAnn6JvCqaJJR4JlJZoU7+uzA
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net