Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RAQgzMiCS065NlU1iBXwPiswe10.roa
File: RAQgzMiCS065NlU1iBXwPiswe10.roa (raw, json)
Hash identifier: aXxah/bsFSxVRDhTMQldv6sv0nChjGHbx3sNdnqgxzI=
Subject key identifier: 44:04:20:CC:C8:82:4B:4E:B9:36:55:35:88:15:F0:3E:2B:30:7B:5D
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D615766AFB763B79C77D4961061588
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RAQgzMiCS065NlU1iBXwPiswe10.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41028
IP address blocks: 89.44.225.0/24 maxlen: 24
89.44.226.0/24 maxlen: 24
89.44.227.0/24 maxlen: 24
2a05:b680:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:15:76:6a:fb:76:3b:79:c7:7d:49:61:06:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=440420ccc8824b4eb93655358815f03e2b307b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:24:c4:17:50:87:40:8c:15:9f:4c:21:73:
38:9c:1c:95:c3:fa:fa:23:4d:ba:1f:5c:18:30:0f:
79:91:55:2b:c9:01:ea:82:55:a1:4e:74:3c:44:60:
73:d7:b3:8f:34:ab:d1:fe:89:90:5f:3a:55:3c:3d:
40:dd:8d:a5:ef:06:6f:c7:92:15:9f:2a:08:cc:8e:
36:23:e2:68:c7:d7:5e:8b:cb:9d:ee:ae:f8:a6:93:
69:28:99:1b:e7:22:89:92:7b:a0:06:02:d6:ad:f5:
e7:bc:28:02:d0:34:ff:3e:de:f5:6d:e6:77:f3:84:
34:43:e9:a2:67:23:a9:c6:de:92:16:79:4c:a6:e5:
0d:90:f1:d1:2d:10:ff:54:46:1c:fe:59:de:9d:bd:
f8:27:99:05:ae:5d:2b:71:44:5f:4e:57:da:98:8e:
89:5c:7f:38:a2:13:47:a1:f8:9a:6a:e7:c3:e4:84:
ac:5c:81:f6:cd:df:99:ea:79:7f:04:a9:60:7e:03:
4d:5c:58:af:8f:88:02:65:3b:90:ab:c0:4c:50:a2:
48:6d:2a:79:71:e9:16:b6:cb:73:06:1e:89:71:57:
17:10:fd:5b:b6:09:90:dd:f3:98:33:a7:74:45:cf:
d1:e1:d0:b1:16:ae:bc:e3:96:ac:27:7e:1b:11:38:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:20:CC:C8:82:4B:4E:B9:36:55:35:88:15:F0:3E:2B:30:7B:5D
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RAQgzMiCS065NlU1iBXwPiswe10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.225.0-89.44.227.255
IPv6:
2a05:b680:7::/48
Signature Algorithm: sha256WithRSAEncryption
3c:09:e6:27:af:c2:de:72:e7:70:b8:ba:b5:f0:73:b3:12:a3:
ca:65:90:8f:8b:33:20:30:62:a5:7b:6b:2b:30:76:52:63:5c:
2c:7b:02:fb:55:2b:0e:03:f2:bf:fa:47:7d:d5:cc:0c:77:16:
88:0b:b5:9b:e0:55:9e:8a:38:86:6a:92:74:f6:7b:93:73:55:
fe:15:6a:c3:ba:b1:3b:8a:10:11:9e:83:00:48:13:78:07:be:
63:d3:21:3c:0c:72:3e:ce:52:35:d2:97:c7:9b:12:11:cb:8f:
c8:b9:0d:7b:e7:13:2a:73:77:b2:62:ec:00:6c:41:05:f2:49:
8c:68:ad:f0:f9:99:5b:11:b9:1e:43:cf:65:62:39:e2:7a:98:
66:c6:1c:3f:89:16:63:91:71:05:14:8a:9d:d6:35:8c:a2:cf:
ba:02:70:14:df:21:4f:0e:c1:65:4c:88:85:0d:f1:55:d1:75:
eb:dd:c6:6f:7b:2c:43:26:3d:99:50:a0:58:ba:59:eb:4c:04:
2b:0d:26:0c:75:a7:67:0b:d8:8a:05:8f:6d:ca:c9:1e:c8:2c:
82:3f:cc:01:47:02:63:3b:8c:29:92:b5:ed:a9:d7:24:d6:5e:
e1:7b:d8:f0:2a:a1:20:fd:7d:c2:2f:eb:11:57:b0:02:8f:ce:
0b:3d:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:56 2025 by rpki-client