Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/cp23u9vhlMaqrHKUYwtPPiioz4s.roa
File: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (raw, json)
Hash identifier: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=
Subject key identifier: 72:9D:B7:BB:DB:E1:94:C6:AA:AC:72:94:63:0B:4F:3E:28:A8:CF:8B
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019427B5D781C4E8AB6DDEF15539F09FA43D
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/cp23u9vhlMaqrHKUYwtPPiioz4s.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 89.37.140.0/24 maxlen: 24
193.107.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d7:81:c4:e8:ab:6d:de:f1:55:39:f0:9f:a4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=729db7bbdbe194c6aaac7294630b4f3e28a8cf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:fd:24:23:a1:fd:08:65:78:3b:bd:61:2d:
52:3d:db:d6:33:98:fc:36:6c:39:44:74:58:e9:e5:
e5:07:b1:0a:be:73:f2:db:61:c9:95:06:33:df:03:
68:5e:23:e3:b5:27:e1:07:12:7b:a4:54:59:89:26:
57:f8:83:b4:0c:26:dd:85:65:de:6d:ea:78:c7:a8:
41:01:1b:1d:c4:e6:b0:4e:9f:bb:46:2c:d2:45:6f:
a6:0a:f9:de:03:85:6c:bf:24:aa:86:8e:ec:af:08:
d2:f0:27:82:fa:a2:d4:a1:b4:97:e4:db:99:16:9b:
04:85:1a:a6:9b:ed:7c:67:a6:9e:26:c0:5e:27:e4:
34:7e:63:79:37:b5:f9:ef:d2:98:ee:8a:ca:04:87:
9e:5f:15:9f:44:cb:ab:ac:ca:f8:c7:b2:2b:ad:72:
46:30:ff:6c:2c:7c:17:ff:ac:f9:48:47:19:8c:9a:
45:70:4d:70:5c:2b:96:60:1e:f2:cb:d0:27:57:e8:
9d:06:6d:4e:de:8c:74:92:d1:ef:cb:09:9d:e4:e6:
73:a5:a3:03:df:b5:ff:a8:ed:fa:4c:32:42:4d:d3:
9a:1a:94:f6:df:d5:03:90:47:2f:ed:33:5b:8b:ce:
ba:6a:57:ae:07:a4:b5:1d:09:54:4f:d7:36:a0:1a:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:B7:BB:DB:E1:94:C6:AA:AC:72:94:63:0B:4F:3E:28:A8:CF:8B
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/cp23u9vhlMaqrHKUYwtPPiioz4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.140.0/24
193.107.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:78:4e:97:32:02:32:90:5a:d4:25:d4:5f:ca:c5:0e:4f:80:
12:27:fb:28:fe:48:fb:c6:20:52:87:a1:44:bc:23:28:7f:7a:
ab:bd:d5:e3:64:af:1e:2c:b9:e8:58:c3:f4:7c:a5:3d:ff:cc:
62:64:a4:93:8d:22:4c:45:ea:a7:2b:4c:d3:ab:7a:ce:08:22:
fc:1c:c0:9f:ea:4e:65:3c:09:f3:60:b1:18:b9:76:f1:e6:7f:
f3:cd:bb:91:99:08:15:19:8c:60:a3:18:c1:68:e5:a6:fa:03:
c2:74:61:60:70:ef:ea:d3:be:dd:70:ef:6c:fb:6b:11:15:fe:
0d:6f:33:55:ee:2a:4d:c2:1c:92:73:22:4c:b0:6c:62:73:c4:
e8:de:98:f2:39:a6:ba:57:1b:e6:84:c3:74:36:07:22:e9:17:
a4:53:51:4f:64:f9:83:29:19:47:9f:6d:91:8d:d1:10:3b:05:
1a:7f:58:17:87:4e:6b:a4:c9:be:f1:6f:b0:11:7c:71:7a:f0:
72:47:5e:c2:4d:c7:ae:8c:c8:ab:ab:a5:96:0f:93:cf:ea:f7:
12:7c:02:b9:14:3f:ae:b7:ea:30:1d:12:94:ac:94:5e:b1:5e:
7f:45:b1:a3:30:a2:6f:0d:b9:6f:b6:41:8a:8c:f2:2f:b9:4e:
f5:59:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:00 2025 by rpki-client