Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/3R1qEXucRzxQh626HSW1D35Fl4s.roa
File: 3R1qEXucRzxQh626HSW1D35Fl4s.roa (raw, json)
Hash identifier: LtQHe1lS81VaVTgB7dK3iqoJ6l+gsJCEbPPIKSQ56qA=
Subject key identifier: DD:1D:6A:11:7B:9C:47:3C:50:87:AD:BA:1D:25:B5:0F:7E:45:97:8B
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 01942825B8D3B41C3E59CC6AB8C73A0DEAC3
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/3R1qEXucRzxQh626HSW1D35Fl4s.roa
Signing time: Thu 02 Jan 2025 17:52:28 +0000
ROA not before: Thu 02 Jan 2025 17:52:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199369
IP address blocks: 89.33.166.0/24 maxlen: 24
89.33.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:b8:d3:b4:1c:3e:59:cc:6a:b8:c7:3a:0d:ea:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jan 2 17:52:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1d6a117b9c473c5087adba1d25b50f7e45978b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:d9:8a:63:49:93:f6:7b:2e:57:e1:32:62:
cf:9d:a4:60:dc:4d:c5:5f:6a:9b:8e:b6:19:91:fc:
3d:aa:78:99:88:0a:a7:b7:cb:09:1f:ea:25:20:10:
cd:00:0c:8e:59:5b:76:7c:6e:9e:96:69:d2:f7:6f:
c2:7b:29:0e:59:a6:70:98:4c:31:fb:27:0d:95:6a:
38:08:07:91:15:dc:e9:f6:18:6b:9a:62:f2:8e:d7:
0d:76:71:19:d5:43:ca:9d:9b:73:90:8c:fc:e2:3a:
6d:f1:76:4c:13:8a:50:aa:e2:fd:43:16:55:ab:4b:
d9:98:03:69:60:a0:e9:f3:af:12:88:3f:29:78:e1:
f5:a9:4c:90:81:56:24:04:7b:e7:b7:c4:b9:fc:d0:
2c:0e:22:76:dd:cf:92:a1:0f:39:c6:d4:f3:93:2d:
45:7b:5b:79:1d:b8:b8:f4:87:77:95:40:45:03:f8:
9f:4e:a6:40:d7:33:07:18:f4:b4:43:b5:cd:44:8c:
c4:0f:8e:d8:b4:71:9c:83:11:8b:7a:d8:13:65:4b:
72:59:17:0e:8c:f9:c9:e7:d1:a7:86:87:66:fd:fc:
7e:cc:98:dd:a1:84:06:0d:64:bd:ce:a8:6f:38:8c:
32:28:bf:b9:44:e8:30:30:de:2b:0a:7b:e1:ae:01:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:6A:11:7B:9C:47:3C:50:87:AD:BA:1D:25:B5:0F:7E:45:97:8B
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/3R1qEXucRzxQh626HSW1D35Fl4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.166.0/23
Signature Algorithm: sha256WithRSAEncryption
99:f4:88:3b:73:46:36:ee:c3:6b:b1:3f:bb:ea:4f:79:5a:69:
37:99:b3:4e:fa:9f:63:40:47:96:f9:ab:1c:d8:e2:6a:68:86:
e7:06:06:ba:89:e9:36:a7:00:b5:c9:59:fc:82:84:31:ab:6c:
d0:e3:b6:b3:ee:b3:ab:72:5f:a7:d1:01:6d:b4:e7:ce:19:83:
d9:92:68:63:8e:52:fe:2c:ef:f4:23:b4:81:af:1e:dc:14:fe:
e7:5b:09:08:09:60:7e:76:fd:64:a3:a5:7c:86:5f:81:90:65:
04:f5:b9:bb:84:34:fd:1b:af:eb:5b:9c:29:36:0f:a1:c9:95:
d3:5e:80:fe:be:26:fe:f1:17:94:94:a4:5c:4c:91:ce:d1:6d:
07:49:09:2e:a1:d5:e9:97:ae:d9:de:2f:92:69:cd:eb:0a:7a:
86:cd:09:a5:62:56:9f:ac:09:38:86:42:78:cd:ec:b5:b2:98:
9e:10:4b:85:bc:a8:3a:50:3d:b6:0b:0d:af:0a:74:98:78:a4:
cb:36:c2:5d:2a:68:15:b3:5a:16:3c:a5:d3:a9:ce:15:a5:9f:
9c:6e:cf:46:7d:3f:14:42:82:e0:f2:7b:92:45:89:52:8d:59:
dd:4c:89:e5:48:99:c1:ec:3e:19:12:44:b7:c9:99:1c:10:72:
8f:c0:12:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJbjTtBw+WcxquMc6DerDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj
M2Y5YWYwHhcNMjUwMTAyMTc1MjI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDFkNmExMTdiOWM0NzNjNTA4N2FkYmExZDI1YjUwZjdlNDU5NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTTZimNJk/Z7LlfhMmLPnaRg3E3F
X2qbjrYZkfw9qniZiAqnt8sJH+olIBDNAAyOWVt2fG6elmnS92/CeykOWaZwmEwx
+ycNlWo4CAeRFdzp9hhrmmLyjtcNdnEZ1UPKnZtzkIz84jpt8XZME4pQquL9QxZV
q0vZmANpYKDp868SiD8peOH1qUyQgVYkBHvnt8S5/NAsDiJ23c+SoQ85xtTzky1F
e1t5Hbi49Id3lUBFA/ifTqZA1zMHGPS0Q7XNRIzED47YtHGcgxGLetgTZUtyWRcO
jPnJ59Gnhodm/fx+zJjdoYQGDWS9zqhvOIwyKL+5ROgwMN4rCnvhrgEDgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0dahF7nEc8UIetuh0ltQ9+RZeLMB8GA1UdIwQY
MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt
ZmE3MThhYzlkNzU4LzEvM1IxcUVYdWNSenhRaDYyNkhTVzFEMzVGbDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4
LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSGmMA0G
CSqGSIb3DQEBCwUAA4IBAQCZ9Ig7c0Y27sNrsT+76k95Wmk3mbNO+p9jQEeW+asc
2OJqaIbnBga6iek2pwC1yVn8goQxq2zQ47az7rOrcl+n0QFttOfOGYPZkmhjjlL+
LO/0I7SBrx7cFP7nWwkICWB+dv1ko6V8hl+BkGUE9bm7hDT9G6/rW5wpNg+hyZXT
XoD+vib+8ReUlKRcTJHO0W0HSQkuodXpl67Z3i+Sac3rCnqGzQmlYlafrAk4hkJ4
zey1spieEEuFvKg6UD22Cw2vCnSYeKTLNsJdKmgVs1oWPKXTqc4VpZ+cbs9GfT8U
QoLg8nuSRYlSjVndTInlSJnB7D4ZEkS3yZkcEHKPwBJv
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:12 2025 by rpki-client