Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/BkeRdvUSG0Kurq-6u5iEKZq5BVQ.roa
File: BkeRdvUSG0Kurq-6u5iEKZq5BVQ.roa (raw, json)
Hash identifier: umG+IqttQITOf4vUsaw4/darBw3aMeBBVtG3Y1SzT5w=
Subject key identifier: 06:47:91:76:F5:12:1B:42:AE:AE:AF:BA:BB:98:84:29:9A:B9:05:54
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018E81B6680082953D1CC8F4622FE8CCE005
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/BkeRdvUSG0Kurq-6u5iEKZq5BVQ.roa
Signing time: Wed 27 Mar 2024 20:59:58 +0000
ROA not before: Wed 27 Mar 2024 20:59:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:81:b6:68:00:82:95:3d:1c:c8:f4:62:2f:e8:cc:e0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Mar 27 20:59:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06479176f5121b42aeaeafbabb9884299ab90554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:e4:51:de:0d:c6:d0:59:33:fa:34:58:ed:
8a:99:48:96:ed:c6:b0:20:b3:49:ef:d1:c7:20:2a:
d3:45:1f:af:fa:33:da:06:cc:b3:af:46:85:23:1c:
4c:26:4f:17:62:31:1a:86:9d:96:40:80:e0:f8:f8:
9b:15:f4:29:d2:0b:68:91:ef:31:74:e1:df:91:eb:
a7:94:3c:94:7e:a8:4d:0d:98:e4:f8:fd:32:2f:69:
a5:78:07:ad:17:e6:c4:56:0d:c5:1e:06:b9:cc:65:
a1:fc:5f:f8:85:e6:94:36:eb:f8:9a:21:b1:64:8f:
ea:6f:93:bb:64:70:5f:60:0e:ee:82:bb:64:be:dc:
85:df:52:50:2f:33:61:99:fb:5f:c7:02:be:74:f0:
f4:a6:58:e5:a3:df:b6:99:38:62:a4:f2:b9:29:07:
ba:cc:db:f3:5e:7f:b7:7e:85:0a:39:45:ef:11:7a:
60:26:17:ce:f4:b1:af:6e:19:17:60:b2:1b:b1:4b:
d7:f6:f4:fa:10:ed:fc:9f:70:4d:a3:25:e4:34:01:
00:ad:bc:86:49:f2:9e:7a:ab:f5:2c:b6:3a:90:1b:
c1:82:6b:b9:ec:4c:e7:1f:63:11:42:93:c8:65:f4:
49:be:83:d0:19:f0:22:30:69:cf:f5:79:10:1a:3f:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:91:76:F5:12:1B:42:AE:AE:AF:BA:BB:98:84:29:9A:B9:05:54
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/BkeRdvUSG0Kurq-6u5iEKZq5BVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
54:98:83:86:99:a2:dd:1d:78:e1:05:77:6f:ec:78:6a:55:34:
11:aa:7d:ba:b2:f4:f8:e3:e1:56:6f:c9:9a:aa:59:33:22:79:
ce:07:1c:09:bb:d2:a7:70:3f:9c:5a:39:38:32:de:34:dc:cb:
16:40:8a:ea:52:0a:81:bf:1e:98:31:66:01:c6:9f:9b:88:a3:
7f:a8:8b:43:47:54:04:a6:7b:e6:49:f2:51:12:fb:a4:6d:89:
59:1e:df:de:1b:40:44:b8:8f:7b:3d:ed:41:9a:b8:14:a2:c5:
0c:5c:fa:cc:82:8a:30:e2:47:21:0d:ee:48:4e:63:8f:96:35:
24:a7:e5:0e:a0:ff:12:2f:45:76:f5:4f:f0:08:ce:de:91:b4:
cc:7d:d9:ab:a1:d2:9e:fe:d0:b7:40:61:f9:88:f8:b7:31:1d:
e3:6c:7e:33:84:05:d5:89:69:1b:ea:b7:09:1b:8b:9c:84:e4:
57:23:b3:2f:b9:d6:8b:1e:5a:b4:bc:53:3e:df:dd:b5:4c:a8:
c7:68:79:6f:d0:ae:5a:1e:c6:ee:2c:da:12:ff:52:44:4f:b7:
23:93:4e:f7:ae:4d:19:be:4c:6f:53:66:ca:13:00:19:b6:82:
61:91:fc:a7:ac:95:d8:d6:a4:cb:44:44:87:05:7f:a1:b2:36:
c2:d2:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:03 2025 by rpki-client