Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/E6umy5_OlHHb3NOgNKiaqTj372A.roa
File: E6umy5_OlHHb3NOgNKiaqTj372A.roa (raw, json)
Hash identifier: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=
Subject key identifier: 13:AB:A6:CB:9F:CE:94:71:DB:DC:D3:A0:34:A8:9A:A9:38:F7:EF:60
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD6002CD8F8C98B3EEFCDC6E3503CF
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/E6umy5_OlHHb3NOgNKiaqTj372A.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212014
IP address blocks: 89.35.226.0/24 maxlen: 24
2a0a:d6c0:226::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:60:02:cd:8f:8c:98:b3:ee:fc:dc:6e:35:03:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13aba6cb9fce9471dbdcd3a034a89aa938f7ef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f9:8a:ce:7c:12:54:4f:cb:dd:0f:49:5e:39:
bc:e6:70:f8:d1:6d:6c:94:8e:ff:9f:22:4b:3e:03:
a8:63:9d:82:47:47:65:90:09:0f:2e:c7:b3:7b:5d:
14:89:0e:42:d3:7e:76:3d:f3:c8:40:99:f2:a0:33:
2f:32:26:09:43:0d:02:63:9c:3c:95:21:75:16:a9:
a4:17:69:83:31:d3:88:29:3b:a7:0b:06:01:0e:30:
7e:83:8d:a6:d0:bc:70:79:db:f2:c7:8b:c8:dc:91:
73:11:04:d9:a7:64:ec:e2:94:39:a1:1a:6f:6f:e7:
24:51:00:30:12:fd:63:af:1c:b6:14:c6:b7:e2:09:
50:c9:69:91:e3:a6:26:df:59:66:a8:1b:39:1b:6d:
04:28:06:99:cb:c2:d5:22:e8:90:ce:50:61:4f:36:
6f:4a:0b:30:d6:86:cc:a8:81:59:99:55:8e:71:09:
ca:ba:cd:e0:bf:3f:de:65:cb:f5:bf:f7:93:60:02:
76:3c:63:71:44:4e:42:25:58:9f:cd:0a:d6:6d:68:
41:77:4b:51:7a:e5:6b:75:f3:1c:a7:0f:38:4e:5f:
6a:71:c8:99:57:21:26:ca:db:ee:2e:56:a1:6e:de:
c8:a1:fa:1b:2e:dd:8a:3f:42:97:6a:b7:51:be:9e:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:A6:CB:9F:CE:94:71:DB:DC:D3:A0:34:A8:9A:A9:38:F7:EF:60
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/E6umy5_OlHHb3NOgNKiaqTj372A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.226.0/24
IPv6:
2a0a:d6c0:226::/48
Signature Algorithm: sha256WithRSAEncryption
94:12:5b:2c:ac:f6:f0:b2:85:fb:ed:45:5c:1a:ee:d1:c4:95:
dc:e7:f0:93:ad:57:c0:f5:ac:23:02:09:ca:81:88:a6:76:6e:
41:a6:4a:52:e9:83:2b:ed:fc:03:bb:86:27:0d:ea:be:78:3b:
48:18:3c:25:bd:66:33:83:6f:36:e3:67:27:87:68:00:78:84:
f5:ab:12:ba:df:0d:f2:21:c8:cf:f4:ca:9d:1e:18:79:65:b1:
c6:e0:84:08:2b:6b:b9:fb:71:74:8e:ad:0b:a5:c6:0d:c6:41:
4f:5e:d1:80:be:6e:c8:4a:3f:1c:da:81:49:72:8f:c7:64:d8:
95:da:cc:d6:9f:ea:42:2d:a0:fa:17:1f:6f:b9:63:d1:ca:36:
08:e4:0a:1f:6d:fb:8b:b9:5d:dd:a2:57:ee:99:4d:d3:7c:2d:
60:7f:8c:d3:ac:1d:ea:05:47:f1:37:92:ee:05:9c:aa:f0:9e:
77:e3:09:0c:2b:52:22:e7:78:c1:aa:a2:6e:13:ca:67:b5:74:
c2:65:ed:fa:16:08:70:d8:52:b1:57:12:44:3a:8f:ce:68:7c:
24:bf:df:72:e1:b9:fb:e0:e4:ee:fa:ab:07:5d:0e:a2:8e:9a:
98:80:9d:16:ee:44:7c:e5:2d:f5:f1:77:33:fc:07:18:4c:a2:
d7:9b:98:af
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQl/WACzY+MmLPu/NxuNQPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm
OGNiZDgwHhcNMjUwMTAyMDc0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FiYTZjYjlmY2U5NDcxZGJkY2QzYTAzNGE4OWFhOTM4ZjdlZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vmKznwSVE/L3Q9JXjm85nD40W1s
lI7/nyJLPgOoY52CR0dlkAkPLseze10UiQ5C0352PfPIQJnyoDMvMiYJQw0CY5w8
lSF1FqmkF2mDMdOIKTunCwYBDjB+g42m0Lxwedvyx4vI3JFzEQTZp2Ts4pQ5oRpv
b+ckUQAwEv1jrxy2FMa34glQyWmR46Ym31lmqBs5G20EKAaZy8LVIuiQzlBhTzZv
Sgsw1obMqIFZmVWOcQnKus3gvz/eZcv1v/eTYAJ2PGNxRE5CJVifzQrWbWhBd0tR
euVrdfMcpw84Tl9qcciZVyEmytvuLlahbt7IofobLt2KP0KXardRvp667QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBOrpsufzpRx29zToDSomqk49+9gMB8GA1UdIwQY
MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt
NjA5YTQ4YjJiMTRkLzEvRTZ1bXk1X09sSEhiM05PZ05LaWFxVGozNzJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk
LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWSPiMA8E
AgACMAkDBwAqCtbAAiYwDQYJKoZIhvcNAQELBQADggEBAJQSWyys9vCyhfvtRVwa
7tHEldzn8JOtV8D1rCMCCcqBiKZ2bkGmSlLpgyvt/AO7hicN6r54O0gYPCW9ZjOD
bzbjZyeHaAB4hPWrErrfDfIhyM/0yp0eGHllscbghAgra7n7cXSOrQulxg3GQU9e
0YC+bshKPxzagUlyj8dk2JXazNaf6kItoPoXH2+5Y9HKNgjkCh9t+4u5Xd2iV+6Z
TdN8LWB/jNOsHeoFR/E3ku4FnKrwnnfjCQwrUiLneMGqom4Tyme1dMJl7foWCHDY
UrFXEkQ6j85ofCS/33Lhufvg5O76qwddDqKOmpiAnRbuRHzlLfXxdzP8BxhMoteb
mK8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:51:14 2025 by rpki-client