Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/7uSHu6WWNEURj6b9NdLtyaC0sgE.roa
File: 7uSHu6WWNEURj6b9NdLtyaC0sgE.roa (raw, json)
Hash identifier: lc4ga2iXxXwCgI7E5iqjpACDIrVfj6q+dLd0jYYW7R8=
Subject key identifier: EE:E4:87:BB:A5:96:34:45:11:8F:A6:FD:35:D2:ED:C9:A0:B4:B2:01
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018D072E23CC01713B4B8363294079F2E418
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/7uSHu6WWNEURj6b9NdLtyaC0sgE.roa
Signing time: Sun 14 Jan 2024 08:54:40 +0000
ROA not before: Sun 14 Jan 2024 08:54:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:2e:23:cc:01:71:3b:4b:83:63:29:40:79:f2:e4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 14 08:54:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eee487bba5963445118fa6fd35d2edc9a0b4b201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:36:51:e3:c8:ad:d0:de:28:cc:42:2f:d0:
ae:d5:db:8c:62:ef:46:8d:63:34:49:e1:04:67:bb:
87:40:5a:e8:ad:3f:ad:28:0b:0e:79:0a:d9:69:a3:
38:ea:1c:ff:ef:16:f8:c6:17:10:be:e8:aa:e2:dc:
cc:1f:d2:04:6c:84:72:53:4b:7c:ed:9c:65:1c:97:
20:fd:4a:ae:fb:3a:e3:d2:2a:97:81:56:a0:e4:03:
ab:d7:80:30:5d:b2:ff:fb:c3:fa:e3:14:5e:12:f8:
f7:e1:99:5e:f9:c4:75:3d:bf:97:ef:af:75:58:94:
a9:2e:74:29:2f:28:a7:f8:e0:c8:3c:95:55:c7:d0:
5e:d4:63:e0:1c:f8:76:a9:8f:01:b5:02:03:29:4f:
0b:29:5f:38:1f:24:7d:49:93:5b:03:a3:2c:78:dc:
09:ec:81:95:8e:39:cc:49:30:28:3b:62:02:87:30:
a2:27:cf:de:62:0c:16:47:46:65:1b:4a:cf:3e:1e:
dd:39:df:4d:f6:38:8b:ff:e0:c3:b4:0b:88:ae:1f:
ac:25:4c:9c:02:63:f1:10:7f:8c:e9:45:34:72:2e:
f4:df:0c:14:70:e1:da:fb:71:e8:22:16:1a:a5:e3:
54:64:96:6f:57:29:9d:c6:79:4f:f4:18:4f:ba:1e:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:87:BB:A5:96:34:45:11:8F:A6:FD:35:D2:ED:C9:A0:B4:B2:01
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/7uSHu6WWNEURj6b9NdLtyaC0sgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0-89.249.201.255
Signature Algorithm: sha256WithRSAEncryption
23:dc:63:0c:bf:8e:80:70:53:79:d2:87:61:e3:3d:51:8e:d0:
62:41:e8:86:16:be:be:f6:74:06:20:70:0a:c2:42:36:fb:52:
3c:c0:e7:08:dd:dc:f4:d5:8f:15:b5:f4:10:00:7a:de:fa:b5:
89:f9:8a:ec:be:81:b2:f9:32:7a:25:91:ff:60:48:d2:a2:8a:
4a:93:7e:d0:61:5c:72:7b:70:c2:a1:77:82:35:60:ec:dd:ed:
44:71:8f:7c:ab:02:77:c7:04:43:f5:eb:3f:93:53:8c:68:c8:
56:cc:9c:a4:a9:51:b5:87:7c:74:11:11:7d:85:bd:7b:da:be:
4d:db:87:eb:04:03:95:d2:c8:30:aa:58:0f:29:44:97:4c:5d:
e1:75:ea:b7:ee:b8:1e:84:02:52:a6:74:fb:ec:bd:af:e9:bd:
8b:1b:a8:24:ae:5f:07:25:b4:c1:af:21:34:9c:0e:88:dc:b3:
46:31:b1:4b:2a:ee:8f:81:75:00:22:11:d6:7a:43:f1:f2:9a:
47:7b:e1:36:01:fb:d2:a6:be:45:65:de:b3:a4:f7:ee:99:75:
bf:79:0f:9d:02:0d:3f:2d:5d:71:94:6d:42:e7:90:3b:c1:bb:
1b:dc:33:d8:75:ec:4c:64:50:68:63:7d:ec:95:92:39:aa:bb:
9e:00:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:57 2025 by rpki-client