Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/unY0Pu97DEbw_gaGseuduchpyf8.roa
File: unY0Pu97DEbw_gaGseuduchpyf8.roa (raw, json)
Hash identifier: e/KptEgbgebcoV3ZlHJMNabC0RiZYgba0JXcQXlmWNc=
Subject key identifier: BA:76:34:3E:EF:7B:0C:46:F0:FE:06:86:B1:EB:9D:B9:C8:69:C9:FF
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D6104FE3770B9BD10A051ED438BC71
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/unY0Pu97DEbw_gaGseuduchpyf8.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34723
IP address blocks: 86.106.200.0/21 maxlen: 24
89.45.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:10:4f:e3:77:0b:9b:d1:0a:05:1e:d4:38:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba76343eef7b0c46f0fe0686b1eb9db9c869c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:06:6a:be:9f:e9:be:ea:97:fd:36:67:a9:
69:ca:23:d4:61:95:be:a4:1d:fd:42:f9:73:19:da:
cc:9f:b5:1f:9a:79:3e:ce:97:2d:6e:3a:fb:ad:3b:
91:5c:dc:06:4d:45:dc:33:58:66:d6:3d:7e:d6:93:
e5:44:7b:a5:04:c8:a5:3a:cd:6c:e0:e4:39:a1:34:
67:44:fb:a5:59:75:98:58:32:77:f3:5f:d2:08:49:
84:ce:a1:f7:03:b2:9d:b0:54:43:ff:04:4f:44:77:
8b:cf:e4:88:64:d4:75:93:5c:12:40:09:3d:ab:cb:
7e:b3:65:d6:ed:1a:ef:b8:70:2b:ee:ed:8f:63:28:
17:17:a9:31:55:a7:08:7d:ea:1d:0e:2c:bf:30:43:
5c:3f:99:a6:5d:d3:18:1d:68:3a:f1:0e:1f:61:31:
f0:33:76:6a:31:29:1f:f3:8c:6a:d1:49:03:e3:9b:
d9:2c:27:bc:90:7b:36:7a:1b:10:cb:4b:c7:92:4f:
2c:33:ad:0f:f0:be:cd:80:bf:f7:83:f3:ea:68:28:
ea:f2:4b:fe:cf:ab:04:8a:9f:94:b3:8b:23:4f:e7:
b6:81:7e:a5:c0:c5:87:f7:24:b6:21:58:d0:fa:95:
58:d3:f1:dc:5e:d7:f6:3b:07:cf:bf:e1:e9:cd:aa:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:34:3E:EF:7B:0C:46:F0:FE:06:86:B1:EB:9D:B9:C8:69:C9:FF
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/unY0Pu97DEbw_gaGseuduchpyf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.200.0/21
89.45.16.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:a3:36:e3:f7:e1:46:3a:09:37:a0:65:f2:65:45:6f:34:7c:
a3:28:4b:38:ee:15:e1:5b:20:f9:f6:3e:32:1d:e7:0e:dc:fd:
e2:45:42:ad:d1:31:21:33:f0:de:11:b9:a7:04:86:22:58:59:
5b:a4:0b:12:f7:dd:36:27:ed:ba:30:be:c1:7a:ec:40:5c:46:
8b:38:9b:75:7e:36:54:b7:32:09:15:dc:b2:3a:ae:ea:ac:18:
15:66:7b:a4:d4:4f:b0:f1:83:64:b1:2a:f9:28:b1:3f:22:bc:
8d:7d:bd:82:9a:60:fd:ed:39:c4:0d:27:ce:10:3f:29:f3:20:
2c:dd:4a:50:1c:1b:74:e8:3d:94:a6:3d:0e:9b:56:ba:bc:dc:
22:69:f4:98:5b:74:9d:f9:21:e0:4d:f5:b7:bb:4e:f3:ef:29:
6a:24:45:d3:bf:a6:35:c1:f3:0c:c9:50:40:f0:2d:a5:e1:74:
44:dc:a7:a8:52:e4:0a:dd:fb:b9:10:ac:51:c8:1a:23:e7:82:
c0:2f:3c:71:1f:7d:33:54:5b:cb:bb:eb:17:63:4a:bb:f3:04:
b2:c2:7c:21:40:82:1f:de:95:e9:99:55:88:39:e2:5c:f2:06:
a6:a8:bd:da:21:ba:bb:dc:a3:84:75:0a:5e:21:a7:59:26:4a:
03:e0:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:20:07 2025 by rpki-client