Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/99VIdQqW_bJ0bsDrnQU1SxhOTSg.roa
File: 99VIdQqW_bJ0bsDrnQU1SxhOTSg.roa (raw, json)
Hash identifier: IkmGn3WhOtZBagcDpuQdyhX1s5n9mBvT+oO7CWGFwYE=
Subject key identifier: F7:D5:48:75:0A:96:FD:B2:74:6E:C0:EB:9D:05:35:4B:18:4E:4D:28
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018D8C2B77FD6D15F1780E2A3CA38B2A506A
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/99VIdQqW_bJ0bsDrnQU1SxhOTSg.roa
Signing time: Fri 09 Feb 2024 04:41:15 +0000
ROA not before: Fri 09 Feb 2024 04:41:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.201.0/24 maxlen: 24
89.249.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:2b:77:fd:6d:15:f1:78:0e:2a:3c:a3:8b:2a:50:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 9 04:41:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7d548750a96fdb2746ec0eb9d05354b184e4d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:06:0a:b0:c3:5c:a1:90:52:4c:2e:87:55:
0e:8f:83:39:c4:9e:5e:f8:6b:b3:98:21:3c:4c:9e:
d0:ca:2d:cb:6c:33:e6:ad:bd:7e:25:92:a2:0f:81:
a8:98:9b:7c:7b:15:1a:28:29:2c:58:96:cb:aa:47:
a3:46:18:9a:d3:9c:cc:1e:d3:b8:3d:fc:4b:2f:88:
0d:fe:70:63:a8:d7:44:98:40:bd:42:4f:f7:f9:ec:
90:93:43:0b:70:66:3d:71:cf:b9:1e:cf:9d:6f:34:
3c:c3:fc:2c:7b:bf:0f:da:86:a9:92:24:d7:75:b0:
6e:d7:c3:2a:e5:7a:2e:f8:e7:6c:74:fd:5b:c3:01:
91:14:ee:0b:37:68:98:1a:27:d5:e3:69:99:70:d8:
81:41:84:42:ef:b4:8e:20:9a:14:5d:ba:cd:74:6b:
f8:23:f8:e3:82:5e:a5:dd:7e:49:2a:65:5f:b5:dd:
e9:55:6e:67:d5:2c:7d:00:69:17:51:15:8e:3a:e1:
b1:dc:5a:c6:e2:e6:4b:e2:c5:4d:4a:b0:4b:92:0d:
6f:4d:0c:fb:50:8b:08:b0:6a:cb:dd:d2:d7:a6:fa:
9e:61:4c:d3:14:ff:fe:49:bc:2c:53:6f:21:ec:71:
22:d2:f4:49:c4:e6:4a:95:56:34:28:96:1e:53:82:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D5:48:75:0A:96:FD:B2:74:6E:C0:EB:9D:05:35:4B:18:4E:4D:28
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/99VIdQqW_bJ0bsDrnQU1SxhOTSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
89.249.205.0/24
Signature Algorithm: sha256WithRSAEncryption
35:df:8a:f7:df:49:c3:7c:9d:9b:05:0b:3e:dc:ee:33:6b:1c:
5b:89:c7:48:cf:2c:b3:9e:d0:65:41:49:a1:e7:70:81:81:b5:
7b:65:fe:8b:9f:b5:b2:ad:74:e8:e8:08:5d:b9:30:f3:22:1a:
1c:ad:e0:d0:df:06:c2:b5:39:bc:0d:d9:54:64:7b:d9:81:0a:
6a:49:a8:0f:49:3c:70:88:95:14:b5:09:76:e3:da:3f:b3:93:
1d:c8:c0:19:c1:f7:61:df:18:8d:0f:cc:97:8d:28:dc:0e:70:
77:d8:c5:10:69:3d:33:34:0a:55:ea:eb:be:61:5c:8e:a4:b7:
c3:1f:6d:8a:30:35:ec:9c:57:33:b6:51:c7:44:10:4c:b5:a3:
71:33:cd:09:a1:d9:f6:73:65:de:0b:2f:05:b8:83:5d:85:b3:
21:3d:cd:1b:c2:6b:63:ab:56:4b:a5:0e:59:c2:6d:90:0c:d1:
27:1c:7c:6c:94:18:58:a1:ab:29:4c:8b:db:e9:54:91:b9:64:
21:a0:b8:3d:fb:8f:93:72:a2:84:b1:d6:9b:57:71:32:0a:eb:
22:5c:ce:19:b6:47:a8:30:ae:a1:71:7a:f7:ed:b4:a4:fc:6e:
60:49:b2:de:ac:9e:bf:c1:c5:79:9b:a5:52:08:19:36:f7:d3:
dc:b3:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:12 2025 by rpki-client