Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/xEogw3XOMF8942N9C953fQ9p_WQ.roa
File: xEogw3XOMF8942N9C953fQ9p_WQ.roa (raw, json)
Hash identifier: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=
Subject key identifier: C4:4A:20:C3:75:CE:30:5F:3D:E3:63:7D:0B:DE:77:7D:0F:69:FD:64
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019427B5AF688BCDB5317417A5999F5F0384
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/xEogw3XOMF8942N9C953fQ9p_WQ.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211103
IP address blocks: 185.89.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:af:68:8b:cd:b5:31:74:17:a5:99:9f:5f:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c44a20c375ce305f3de3637d0bde777d0f69fd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:28:a2:ad:06:6a:84:0e:a2:da:f5:59:99:
03:bf:19:c1:7b:36:7b:f7:ff:c2:a0:f0:13:f6:3c:
50:9a:74:f3:a3:01:4f:e6:36:db:ef:03:50:3d:f2:
6e:9a:10:4d:da:5b:32:73:4e:10:9e:fe:89:f1:f4:
55:3c:c3:c3:d4:26:92:88:24:c5:82:b6:e9:df:65:
ea:bb:40:35:ad:7a:3c:ea:4a:b1:6d:4e:55:8d:f6:
7a:b2:9a:62:fa:d2:24:f7:ff:2c:77:63:9e:c8:c2:
b7:59:1e:9f:0f:e4:1a:f1:37:48:f9:21:44:40:41:
a4:40:83:2e:fc:ac:3e:81:cc:03:56:28:b9:4a:e6:
88:35:1f:39:ed:e1:c5:b0:f6:69:6a:ea:07:96:52:
67:d1:00:d1:5c:32:a5:32:eb:95:8e:6e:3a:f9:b1:
7c:06:90:5e:2f:e7:45:cc:a2:cf:a6:61:8b:80:ec:
11:1f:86:1d:45:3e:90:7a:8e:dd:d7:4c:fb:9f:b5:
88:fc:05:50:3a:82:a6:6d:3a:a0:15:60:15:89:37:
68:dd:e9:19:77:b3:bb:03:05:6c:e4:c2:4e:1a:32:
49:4a:b3:e8:76:7e:2a:ba:9d:e9:56:4b:a0:23:cd:
35:04:89:7b:14:27:f5:75:7a:aa:ba:40:27:e7:6a:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:20:C3:75:CE:30:5F:3D:E3:63:7D:0B:DE:77:7D:0F:69:FD:64
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/xEogw3XOMF8942N9C953fQ9p_WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.21.0/24
Signature Algorithm: sha256WithRSAEncryption
44:94:c2:3a:12:85:52:1a:e3:00:9f:8e:17:98:fc:82:1a:39:
4b:4c:cc:1d:91:54:74:74:71:4f:16:93:6b:90:e4:9d:5d:e0:
d9:ff:a0:47:64:b1:0f:f1:86:94:d9:02:31:78:b9:df:6c:1a:
f7:e7:ef:2e:79:07:2f:54:6b:02:e4:51:48:c6:8d:60:d0:a8:
71:a2:52:61:e8:2b:1c:b6:a9:08:5f:64:ae:90:1d:61:b7:dd:
f7:2f:0b:53:1b:71:12:83:a6:82:9f:32:15:07:19:1c:39:1c:
ca:0f:da:ac:1a:90:ca:56:d6:f3:fb:16:40:56:4a:d0:bb:54:
7f:13:2c:b5:ea:18:e9:4c:14:67:ce:40:90:4f:75:86:85:49:
3c:bc:a0:57:0d:ef:14:fe:59:5d:4c:bd:35:0a:93:af:a8:6b:
45:04:49:c4:ee:ce:a6:26:d4:6f:91:52:8e:57:1c:24:60:2b:
9a:64:94:67:c9:d4:2d:3b:0f:02:db:99:4b:9a:8d:4d:f6:54:
48:b6:2f:81:69:65:2d:12:ff:fc:5c:77:ee:ad:c4:31:de:d2:
71:2c:97:cf:79:98:ed:4b:38:cc:e5:fb:e9:ce:11:2b:3d:d8:
e4:d1:88:f9:25:79:1f:e7:e0:2a:3c:f3:52:07:0d:54:56:33:
b8:cd:ea:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnta9oi821MXQXpZmfXwOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWFlY2JhMTAzYmIzYzBjMGU4ODRkNTIwZWIzODQ2NGQw
ZmE5MDMwHhcNMjUwMTAyMTU1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDRhMjBjMzc1Y2UzMDVmM2RlMzYzN2QwYmRlNzc3ZDBmNjlmZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb0ooq0GaoQOotr1WZkDvxnBezZ7
9//CoPAT9jxQmnTzowFP5jbb7wNQPfJumhBN2lsyc04Qnv6J8fRVPMPD1CaSiCTF
grbp32Xqu0A1rXo86kqxbU5VjfZ6sppi+tIk9/8sd2OeyMK3WR6fD+Qa8TdI+SFE
QEGkQIMu/Kw+gcwDVii5SuaINR857eHFsPZpauoHllJn0QDRXDKlMuuVjm46+bF8
BpBeL+dFzKLPpmGLgOwRH4YdRT6Qeo7d10z7n7WI/AVQOoKmbTqgFWAViTdo3ekZ
d7O7AwVs5MJOGjJJSrPodn4qup3pVkugI801BIl7FCf1dXqqukAn52pykQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRKIMN1zjBfPeNjfQved30Paf1kMB8GA1UdIwQY
MBaAFN5a7LoQO7PAwOiE1SDrOEZND6kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYt
ZTZhZWI5NDEzZjcyLzEveEVvZ3czWE9NRjg5NDJOOUM5NTNmUTlwX1dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYtZTZhZWI5NDEzZjcy
LzEvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVkVMA0G
CSqGSIb3DQEBCwUAA4IBAQBElMI6EoVSGuMAn44XmPyCGjlLTMwdkVR0dHFPFpNr
kOSdXeDZ/6BHZLEP8YaU2QIxeLnfbBr35+8ueQcvVGsC5FFIxo1g0KhxolJh6Csc
tqkIX2SukB1ht933LwtTG3ESg6aCnzIVBxkcORzKD9qsGpDKVtbz+xZAVkrQu1R/
Eyy16hjpTBRnzkCQT3WGhUk8vKBXDe8U/lldTL01CpOvqGtFBEnE7s6mJtRvkVKO
VxwkYCuaZJRnydQtOw8C25lLmo1N9lRIti+BaWUtEv/8XHfurcQx3tJxLJfPeZjt
SzjM5fvpzhErPdjk0Yj5JXkf5+AqPPNSBw1UVjO4zer6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net