Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/wX9-fmmtd2YYNFDQlxKRbLnMgpc.roa
File: wX9-fmmtd2YYNFDQlxKRbLnMgpc.roa (raw, json)
Hash identifier: KUR4w79AlRcsNrJ7doBgnDGw9yglLgLthCB1efngELk=
Subject key identifier: C1:7F:7E:7E:69:AD:77:66:18:34:50:D0:97:12:91:6C:B9:CC:82:97
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 01941FFA172A167F44D8ED0278AABC7050FA
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/wX9-fmmtd2YYNFDQlxKRbLnMgpc.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212325
IP address blocks: 89.22.64.0/19 maxlen: 19
89.22.65.0/24 maxlen: 24
89.22.80.0/23 maxlen: 23
89.22.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:17:2a:16:7f:44:d8:ed:02:78:aa:bc:70:50:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c17f7e7e69ad7766183450d09712916cb9cc8297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:92:91:58:1d:d7:dd:d9:c7:d2:ab:60:c8:
bf:26:e6:e1:aa:49:51:13:32:1c:90:55:c5:4d:9d:
3d:f7:6a:21:78:2c:35:d4:fc:6a:c5:6e:a3:87:45:
31:3f:ba:74:19:03:6b:72:67:6a:fd:ee:e6:fa:45:
4e:b1:77:c6:ce:89:e1:a9:e2:ae:31:f8:69:e9:ce:
7f:bc:63:7a:0d:2a:c9:93:09:ec:4b:fb:28:9c:94:
7b:bb:82:c8:df:da:16:bf:a4:03:a9:ed:c0:ad:1e:
5f:04:b0:23:8e:d8:19:56:75:b1:d1:0d:02:31:9d:
cd:85:81:84:44:4a:e0:a5:f0:4b:29:45:28:f3:07:
9b:54:cf:c9:08:f3:05:0f:bd:34:72:9d:0c:8e:3a:
54:76:b2:71:d5:f1:47:c0:f9:6f:9b:4a:59:20:d0:
2e:d9:f9:41:db:88:f0:24:10:5f:d8:db:ee:5e:f4:
11:d0:cf:ad:16:01:b2:fe:3e:c3:73:ef:e0:03:7b:
e2:fe:1e:65:03:a4:20:23:9c:a7:be:e2:66:9f:ae:
13:e7:25:43:84:27:b4:d7:74:96:75:ac:0b:31:1d:
1f:47:16:2f:ba:e0:c8:07:4d:c2:21:e3:4d:a6:5a:
a9:d1:ee:3b:4d:5b:a1:cf:39:36:81:3a:5c:98:bb:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:7E:7E:69:AD:77:66:18:34:50:D0:97:12:91:6C:B9:CC:82:97
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/wX9-fmmtd2YYNFDQlxKRbLnMgpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b5:16:b3:1b:d7:3a:1f:ba:67:a6:0f:f6:ca:7a:cd:02:32:d6:
b2:71:55:71:f9:1c:98:ac:a8:8b:18:e6:3b:5a:dd:ff:bd:fb:
e4:f3:c4:5e:d7:c1:e1:1d:af:32:f1:26:1e:ec:1a:5c:99:f6:
3c:d9:2b:75:bc:ff:77:14:3b:1e:36:a4:f5:da:78:10:ed:78:
b9:21:9a:0a:37:0c:22:5b:21:d0:3f:21:8b:4d:65:a9:07:1e:
67:a5:cd:76:51:cd:46:b0:d2:67:ca:f1:1e:29:78:31:e8:98:
a8:05:2d:a9:61:38:22:b6:bd:57:2a:d8:42:a0:b4:63:b4:db:
68:41:b0:47:b0:d5:7e:a3:f4:ab:42:8f:f1:95:0f:6c:c0:ab:
0d:90:b0:5d:6d:a7:61:5a:97:8b:f9:65:ce:c8:88:79:a8:a5:
de:82:2f:89:08:f7:6e:45:01:e1:47:89:1c:dc:f6:df:8b:f2:
30:90:8f:81:97:6b:2b:4e:a8:43:bb:04:ab:35:04:8f:a8:fb:
41:6c:5c:a1:c6:1b:ac:18:9f:0e:f5:b2:89:df:d9:08:0f:08:
74:6f:c3:7e:f5:b1:7a:c6:ce:de:6e:5c:c9:d6:e2:1a:f4:45:
93:47:75:42:ec:a1:22:fb:92:d9:a9:59:71:76:dd:82:af:2a:
f3:0b:97:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+hcqFn9E2O0CeKq8cFD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy
YTg1ZjQwHhcNMjUwMTAxMDM0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTdmN2U3ZTY5YWQ3NzY2MTgzNDUwZDA5NzEyOTE2Y2I5Y2M4Mjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6+SkVgd193Zx9KrYMi/JubhqklR
EzIckFXFTZ0992oheCw11PxqxW6jh0UxP7p0GQNrcmdq/e7m+kVOsXfGzonhqeKu
Mfhp6c5/vGN6DSrJkwnsS/sonJR7u4LI39oWv6QDqe3ArR5fBLAjjtgZVnWx0Q0C
MZ3NhYGERErgpfBLKUUo8webVM/JCPMFD700cp0MjjpUdrJx1fFHwPlvm0pZINAu
2flB24jwJBBf2NvuXvQR0M+tFgGy/j7Dc+/gA3vi/h5lA6QgI5ynvuJmn64T5yVD
hCe013SWdawLMR0fRxYvuuDIB03CIeNNplqp0e47TVuhzzk2gTpcmLtKMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMF/fn5prXdmGDRQ0JcSkWy5zIKXMB8GA1UdIwQY
MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt
MjE5ZTc5ZDg0ZTQzLzEvd1g5LWZtbXRkMllZTkZEUWx4S1JiTG5NZ3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz
LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWRZAMA0G
CSqGSIb3DQEBCwUAA4IBAQC1FrMb1zofumemD/bKes0CMtaycVVx+RyYrKiLGOY7
Wt3/vfvk88Re18HhHa8y8SYe7BpcmfY82St1vP93FDseNqT12ngQ7Xi5IZoKNwwi
WyHQPyGLTWWpBx5npc12Uc1GsNJnyvEeKXgx6JioBS2pYTgitr1XKthCoLRjtNto
QbBHsNV+o/SrQo/xlQ9swKsNkLBdbadhWpeL+WXOyIh5qKXegi+JCPduRQHhR4kc
3Pbfi/IwkI+Bl2srTqhDuwSrNQSPqPtBbFyhxhusGJ8O9bKJ39kIDwh0b8N+9bF6
xs7eblzJ1uIa9EWTR3VC7KEi+5LZqVlxdt2CryrzC5ez
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net