Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3cE6-ljl6wvYkqKia0mcPW3hlNo.roa
File: 3cE6-ljl6wvYkqKia0mcPW3hlNo.roa (raw, json)
Hash identifier: zwVAABp5vRelUMTSfkb5G1LGEi9Dzok8PeGUymguS18=
Subject key identifier: DD:C1:3A:FA:58:E5:EB:0B:D8:92:A2:A2:6B:49:9C:3D:6D:E1:94:DA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01961FDFA2580FDBA546A2763C83BDFC3DEC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3cE6-ljl6wvYkqKia0mcPW3hlNo.roa
Signing time: Thu 10 Apr 2025 13:24:31 +0000
ROA not before: Thu 10 Apr 2025 13:24:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:df:a2:58:0f:db:a5:46:a2:76:3c:83:bd:fc:3d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 10 13:24:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc13afa58e5eb0bd892a2a26b499c3d6de194da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:ed:ff:1a:62:9e:59:e1:74:03:6c:88:2d:
58:eb:dd:23:72:9d:e6:b9:08:47:c2:a6:0c:db:88:
95:b3:66:99:17:fb:32:58:5c:23:ae:fb:d0:5b:75:
db:28:ae:42:58:01:c9:91:94:ec:41:f0:c3:c5:5c:
50:91:b9:1c:2a:eb:2e:e9:6a:ea:59:79:02:2e:23:
b5:6a:0b:e8:15:fb:29:f3:44:06:81:8a:bb:12:3c:
0f:4d:66:31:bb:75:43:14:74:f6:df:e9:95:9c:a6:
54:48:f8:1e:f7:34:ba:e3:f2:ba:17:1b:98:3c:23:
92:d4:e5:e6:41:be:91:03:e8:42:83:bc:54:43:43:
29:8c:41:22:f1:66:e6:42:f0:95:20:a2:e4:9e:87:
48:b8:c1:1d:20:cd:7a:d2:c1:be:cc:27:b1:87:96:
2f:4a:3e:e6:b2:1d:cc:49:fa:cd:e6:a2:60:fe:8e:
e9:7a:d8:66:5f:68:a8:a9:fb:2d:3f:8d:88:87:86:
d9:d6:45:d0:b7:e0:7b:31:e9:48:7b:14:a3:c4:c1:
98:4e:1b:20:94:56:b4:1c:97:3f:83:7d:61:6a:51:
4b:92:fc:77:83:a0:7e:85:27:70:9e:21:aa:3e:bc:
36:7f:60:11:0d:c1:8e:0c:3d:28:6c:94:e7:16:18:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:3A:FA:58:E5:EB:0B:D8:92:A2:A2:6B:49:9C:3D:6D:E1:94:DA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3cE6-ljl6wvYkqKia0mcPW3hlNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
03:de:55:e8:b1:a3:fa:ff:f0:3b:69:16:49:37:33:32:72:0f:
79:bd:e8:a4:49:4a:30:5e:62:ee:3b:6f:b0:8b:4f:c1:a7:c2:
20:43:08:c0:d8:e5:81:a8:eb:7c:32:fe:ed:df:d8:a1:cc:a4:
18:9e:26:2c:33:d3:80:4d:00:18:e4:fc:b9:3b:eb:d8:10:63:
d1:44:a8:60:60:25:36:63:01:45:27:7b:01:98:98:a1:e1:85:
97:37:52:63:19:2b:4d:00:dd:1a:ec:28:2c:d7:d2:77:43:2e:
ea:82:b5:ee:1f:16:c6:cf:f6:32:6b:7e:e5:47:c0:b6:7f:78:
da:73:cc:bd:4e:2e:b0:9f:d3:ac:ac:b9:ad:4b:e8:58:7b:52:
07:69:4e:bc:9c:31:c3:54:99:97:0d:6a:b1:71:50:95:ba:da:
95:b5:b4:af:f1:9e:70:1e:20:59:df:cf:2b:d0:7b:80:a9:f0:
c7:73:21:7b:d5:c9:49:68:c4:d7:b8:b6:94:5d:43:93:72:a1:
f2:a4:76:e8:88:9a:29:dc:90:ed:fe:0b:9a:4a:96:79:c0:b3:
f3:9f:4f:9b:0a:c2:a9:b3:c5:95:b4:e0:3b:1e:72:ad:22:a9:
8f:e1:1f:e9:e8:c5:34:6f:f8:1b:29:2a:62:13:57:3b:c7:69:
96:df:bb:06
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZYf36JYD9ulRqJ2PIO9/D3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwNDEwMTMyNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGMxM2FmYTU4ZTVlYjBiZDg5MmEyYTI2YjQ5OWMzZDZkZTE5NGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsbt/xpinlnhdANsiC1Y690jcp3m
uQhHwqYM24iVs2aZF/syWFwjrvvQW3XbKK5CWAHJkZTsQfDDxVxQkbkcKusu6Wrq
WXkCLiO1agvoFfsp80QGgYq7EjwPTWYxu3VDFHT23+mVnKZUSPge9zS64/K6FxuY
PCOS1OXmQb6RA+hCg7xUQ0MpjEEi8WbmQvCVIKLknodIuMEdIM160sG+zCexh5Yv
Sj7msh3MSfrN5qJg/o7pethmX2ioqfstP42Ih4bZ1kXQt+B7MelIexSjxMGYThsg
lFa0HJc/g31halFLkvx3g6B+hSdwniGqPrw2f2ARDcGODD0obJTnFhi91wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFN3BOvpY5esL2JKiomtJnD1t4ZTaMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvM2NFNi1samw2d3ZZa3FLaWEwbWNQVzNobE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZKlED
BAJZKlAwDQYJKoZIhvcNAQELBQADggEBAAPeVeixo/r/8DtpFkk3MzJyD3m96KRJ
SjBeYu47b7CLT8GnwiBDCMDY5YGo63wy/u3f2KHMpBieJiwz04BNABjk/Lk769gQ
Y9FEqGBgJTZjAUUnewGYmKHhhZc3UmMZK00A3RrsKCzX0ndDLuqCte4fFsbP9jJr
fuVHwLZ/eNpzzL1OLrCf06ysua1L6Fh7UgdpTrycMcNUmZcNarFxUJW62pW1tK/x
nnAeIFnfzyvQe4Cp8MdzIXvVyUloxNe4tpRdQ5NyofKkduiIminckO3+C5pKlnnA
s/OfT5sKwqmzxZW04Dsecq0iqY/hH+noxTRv+BspKmITVzvHaZbfuwY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net