Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/C22xAXnO8jmzvRiHbOnNs4eV8_w.roa
File: C22xAXnO8jmzvRiHbOnNs4eV8_w.roa (raw, json)
Hash identifier: GuR8xYcc6+bA8BzAosnTTJQ3SA2n0vvOojU/T1fcAE8=
Subject key identifier: 0B:6D:B1:01:79:CE:F2:39:B3:BD:18:87:6C:E9:CD:B3:87:95:F3:FC
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019428233CB6E063D5E9C1FF46E2B8420126
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/C22xAXnO8jmzvRiHbOnNs4eV8_w.roa
Signing time: Thu 02 Jan 2025 17:49:45 +0000
ROA not before: Thu 02 Jan 2025 17:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62055
IP address blocks: 89.38.42.0/24 maxlen: 24
89.38.45.0/24 maxlen: 24
185.48.192.0/22 maxlen: 22
2a01:98e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3c:b6:e0:63:d5:e9:c1:ff:46:e2:b8:42:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 2 17:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6db10179cef239b3bd18876ce9cdb38795f3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:d7:ed:28:c4:3f:37:01:14:7a:58:09:cc:
bd:a4:e3:a8:4b:d2:87:e7:7e:49:c2:9a:43:4d:8f:
2c:6f:3b:18:eb:78:92:8c:f7:2d:4c:13:f1:84:8b:
95:a0:a8:a6:8b:36:ac:0c:21:15:16:40:7d:aa:8e:
85:a5:90:ed:64:70:5d:64:61:bd:ca:93:70:6a:53:
49:7e:40:83:91:d6:2f:49:af:09:aa:cc:f1:8b:ee:
d4:d1:9c:9c:cb:82:7a:0e:71:8a:01:f5:f1:28:92:
ec:4e:32:ac:2e:ee:62:99:ad:49:11:b1:2b:4c:61:
f7:af:7c:8d:b5:ce:c9:46:87:2c:15:f2:ee:c9:7e:
75:02:2a:a1:45:c8:5c:2b:f1:6c:aa:05:f1:43:6b:
9d:66:c5:77:b9:01:c0:5f:38:13:df:ab:34:69:1a:
6d:16:6c:78:42:7b:84:33:29:e6:95:29:d7:5d:6f:
54:3e:b1:b0:39:19:b6:d9:98:b5:83:f6:ef:29:8d:
93:59:f8:ba:85:97:b6:c8:3e:8a:84:55:d1:70:36:
46:f9:b7:a9:0d:3b:33:55:c0:8e:9a:1b:9b:1d:71:
76:19:92:0f:2f:db:be:e8:f3:f4:5b:f2:c4:0b:d0:
02:ab:0f:e7:20:dc:5c:e0:9a:9c:b4:c7:90:92:85:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6D:B1:01:79:CE:F2:39:B3:BD:18:87:6C:E9:CD:B3:87:95:F3:FC
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/C22xAXnO8jmzvRiHbOnNs4eV8_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.42.0/24
89.38.45.0/24
185.48.192.0/22
IPv6:
2a01:98e0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:fe:24:34:e0:f5:c7:50:30:a0:49:33:cc:38:3a:fa:09:c9:
43:45:bc:74:3b:c3:7c:73:96:af:95:bb:38:0d:bb:52:9a:31:
30:c7:bb:83:97:02:76:78:53:98:19:c5:5e:d0:4e:3f:3c:55:
31:a6:e7:d4:07:4c:b0:d6:b6:5b:ee:2c:f3:dd:cb:c8:79:b8:
6e:7b:7b:9c:75:81:18:3f:85:4f:bf:e5:c5:cf:ed:10:38:ff:
9f:17:79:bd:44:d0:22:d7:94:03:bd:83:e0:fb:48:51:46:68:
6a:b8:da:9d:f4:ce:84:61:6e:16:68:76:54:2a:ef:34:56:75:
19:6a:66:ba:25:07:35:ad:d5:89:08:24:93:13:76:b3:3b:68:
77:2b:f8:ae:57:10:4e:89:ad:91:90:f4:8f:cf:7c:a9:9e:60:
e7:a1:a4:76:e7:e1:b2:49:aa:ad:ac:49:f3:eb:9b:ee:a2:3b:
50:82:b6:29:f3:52:77:b3:83:b0:1e:42:c6:28:0d:0a:25:3c:
24:92:b4:93:6d:5e:84:77:12:67:9a:53:f8:2e:3b:02:49:72:
3f:47:a7:4a:5a:bc:df:ae:6d:1d:91:41:5b:9b:e0:90:22:7b:
c2:cb:41:f5:ec:2c:4d:7d:13:06:2e:1c:e8:7e:17:1c:72:8b:
ee:23:ff:d1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQoIzy24GPV6cH/RuK4QgEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx
ZWU3ZWEwHhcNMjUwMTAyMTc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjZkYjEwMTc5Y2VmMjM5YjNiZDE4ODc2Y2U5Y2RiMzg3OTVmM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+PX7SjEPzcBFHpYCcy9pOOoS9KH
535JwppDTY8sbzsY63iSjPctTBPxhIuVoKimizasDCEVFkB9qo6FpZDtZHBdZGG9
ypNwalNJfkCDkdYvSa8Jqszxi+7U0Zycy4J6DnGKAfXxKJLsTjKsLu5ima1JEbEr
TGH3r3yNtc7JRocsFfLuyX51AiqhRchcK/FsqgXxQ2udZsV3uQHAXzgT36s0aRpt
Fmx4QnuEMynmlSnXXW9UPrGwORm22Zi1g/bvKY2TWfi6hZe2yD6KhFXRcDZG+bep
DTszVcCOmhubHXF2GZIPL9u+6PP0W/LEC9ACqw/nINxc4JqctMeQkoWUuwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAttsQF5zvI5s70Yh2zpzbOHlfP8MB8GA1UdIwQY
MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt
YTU3NjA0YTNmNmJiLzEvQzIyeEFYbk84am16dlJpSGJPbk5zNGVWOF93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi
LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWSYqAwQA
WSYtAwQCuTDAMA0EAgACMAcDBQAqAZjgMA0GCSqGSIb3DQEBCwUAA4IBAQA7/iQ0
4PXHUDCgSTPMODr6CclDRbx0O8N8c5avlbs4DbtSmjEwx7uDlwJ2eFOYGcVe0E4/
PFUxpufUB0yw1rZb7izz3cvIebhue3ucdYEYP4VPv+XFz+0QOP+fF3m9RNAi15QD
vYPg+0hRRmhquNqd9M6EYW4WaHZUKu80VnUZama6JQc1rdWJCCSTE3azO2h3K/iu
VxBOia2RkPSPz3ypnmDnoaR25+GySaqtrEnz65vuojtQgrYp81J3s4OwHkLGKA0K
JTwkkrSTbV6EdxJnmlP4LjsCSXI/R6dKWrzfrm0dkUFbm+CQInvCy0H17CxNfRMG
LhzofhcccovuI//R
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:09 2025 by rpki-client