Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/jldP_NkgEKrLmFaYQtB6TuhGzRs.roa
File: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (raw, json)
Hash identifier: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=
Subject key identifier: 8E:57:4F:FC:D9:20:10:AA:CB:98:56:98:42:D0:7A:4E:E8:46:CD:1B
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F3B3BF129DB02D572A207CDEE02FD
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/jldP_NkgEKrLmFaYQtB6TuhGzRs.roa
Signing time: Wed 01 Jan 2025 13:47:39 +0000
ROA not before: Wed 01 Jan 2025 13:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41452
IP address blocks: 89.164.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3b:3b:f1:29:db:02:d5:72:a2:07:cd:ee:02:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e574ffcd92010aacb98569842d07a4ee846cd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:ac:f3:91:fb:c7:ca:c0:b6:d6:f8:b2:19:
3a:36:89:95:b6:25:5e:c7:5f:72:bd:24:5d:ef:f0:
0f:70:f9:e3:d3:61:fb:f4:7b:c0:92:01:57:69:50:
29:55:3d:be:45:50:3c:30:a8:23:62:4e:2b:d8:24:
01:f4:8d:95:7f:76:9f:89:e7:91:5b:31:83:49:1c:
10:59:e7:ce:12:61:62:1f:b2:7f:10:d7:95:f2:5c:
9a:a0:cd:59:50:82:4b:07:a9:e0:2d:67:24:ae:69:
26:d6:4d:95:14:2f:26:6c:91:e8:b0:e8:2d:3b:95:
d8:7a:73:45:26:09:ce:e3:96:46:cd:c2:2c:eb:54:
0b:c7:7d:f5:75:b6:7e:f5:16:0a:a7:82:56:14:4c:
f4:17:18:7c:02:fa:79:8b:e5:68:bf:9a:d6:18:40:
00:a2:99:82:73:b5:ca:ea:06:28:05:0b:7c:74:f9:
88:c0:6c:20:83:0e:91:df:2b:ce:21:c7:f4:a9:8e:
94:d5:1d:fa:14:c2:b1:10:c7:20:60:79:21:f6:ba:
7f:0b:02:5a:ba:6c:d2:ea:fc:46:85:f7:0f:78:6c:
2b:02:2c:36:a0:54:d5:44:75:82:c5:b7:a2:e5:66:
21:5d:ef:e1:4f:b1:89:d2:bc:c8:68:4f:79:f3:2d:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:4F:FC:D9:20:10:AA:CB:98:56:98:42:D0:7A:4E:E8:46:CD:1B
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/jldP_NkgEKrLmFaYQtB6TuhGzRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.164.90.0/24
Signature Algorithm: sha256WithRSAEncryption
61:41:76:df:94:09:b7:fe:bc:9f:3c:4e:74:e1:c6:04:38:fd:
b8:29:9f:7d:7f:3a:cf:52:8f:b3:8a:74:fb:c7:67:05:a0:94:
d9:55:db:18:ce:65:62:72:a2:63:aa:31:c0:df:86:d7:94:10:
2a:64:14:d3:62:c0:b2:e4:58:ea:01:42:b4:9b:4a:4a:20:87:
19:83:7f:7a:08:85:6c:3b:08:92:8f:f5:01:32:db:42:80:47:
6e:78:24:5e:42:50:af:6f:d5:6a:d0:82:24:ed:7e:8e:c1:3e:
02:70:77:a0:53:64:42:93:f5:03:4a:cb:89:d1:6d:e5:a1:70:
51:b1:a8:eb:21:a4:13:f9:cf:b4:cb:1a:c6:26:34:15:9c:01:
11:5b:9d:84:ae:55:0f:40:01:94:a6:dc:53:80:77:c0:88:1d:
65:04:91:8f:a4:51:26:68:f8:d6:8d:3e:79:0b:7c:bd:21:44:
6f:5e:cd:f2:76:ff:f9:2e:10:71:bb:89:1b:3d:71:9e:50:3e:
40:4a:fa:e3:08:98:f8:6a:f4:dd:b4:51:ab:c8:7f:75:a3:57:
d1:1d:c9:3f:89:fc:de:12:68:ba:10:dc:31:0c:65:2b:fe:eb:
71:90:0a:9c:9d:48:82:e6:10:30:a0:7a:c0:c1:e8:5e:78:33:
6c:ce:2e:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiHzs78SnbAtVyogfN7gL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm
MDIwMjAwHhcNMjUwMTAxMTM0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTU3NGZmY2Q5MjAxMGFhY2I5ODU2OTg0MmQwN2E0ZWU4NDZjZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ms85H7x8rAttb4shk6NomVtiVe
x19yvSRd7/APcPnj02H79HvAkgFXaVApVT2+RVA8MKgjYk4r2CQB9I2Vf3afieeR
WzGDSRwQWefOEmFiH7J/ENeV8lyaoM1ZUIJLB6ngLWckrmkm1k2VFC8mbJHosOgt
O5XYenNFJgnO45ZGzcIs61QLx331dbZ+9RYKp4JWFEz0Fxh8Avp5i+Vov5rWGEAA
opmCc7XK6gYoBQt8dPmIwGwggw6R3yvOIcf0qY6U1R36FMKxEMcgYHkh9rp/CwJa
umzS6vxGhfcPeGwrAiw2oFTVRHWCxbei5WYhXe/hT7GJ0rzIaE958y0nwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI5XT/zZIBCqy5hWmELQek7oRs0bMB8GA1UdIwQY
MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt
NGI2YzFjZjlmZTRmLzEvamxkUF9Oa2dFS3JMbUZhWVF0QjZUdWhHelJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm
LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaRaMA0G
CSqGSIb3DQEBCwUAA4IBAQBhQXbflAm3/ryfPE504cYEOP24KZ99fzrPUo+zinT7
x2cFoJTZVdsYzmVicqJjqjHA34bXlBAqZBTTYsCy5FjqAUK0m0pKIIcZg396CIVs
OwiSj/UBMttCgEdueCReQlCvb9Vq0IIk7X6OwT4CcHegU2RCk/UDSsuJ0W3loXBR
sajrIaQT+c+0yxrGJjQVnAERW52ErlUPQAGUptxTgHfAiB1lBJGPpFEmaPjWjT55
C3y9IURvXs3ydv/5LhBxu4kbPXGeUD5ASvrjCJj4avTdtFGryH91o1fRHck/ifze
Emi6ENwxDGUr/utxkAqcnUiC5hAwoHrAweheeDNszi4H
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:22 2025 by rpki-client