Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/CxFzzYxiBfWYRpyyET4CusCsjUg.roa
File: CxFzzYxiBfWYRpyyET4CusCsjUg.roa (raw, json)
Hash identifier: i2DrQ/MDkH8C67hKqvWBP/OWop59J1L397sgPooikzs=
Subject key identifier: 0B:11:73:CD:8C:62:05:F5:98:46:9C:B2:11:3E:02:BA:C0:AC:8D:48
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0191DB951F15282DC0D241BD16C6BA4A4CD6
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/CxFzzYxiBfWYRpyyET4CusCsjUg.roa
Signing time: Tue 10 Sep 2024 10:57:48 +0000
ROA not before: Tue 10 Sep 2024 10:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.200.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
185.21.254.0/24 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:95:1f:15:28:2d:c0:d2:41:bd:16:c6:ba:4a:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 10 10:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b1173cd8c6205f598469cb2113e02bac0ac8d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:60:64:c7:60:e3:40:38:ca:6c:1f:9c:9a:
e5:ca:b6:28:72:49:45:bd:9a:31:05:73:95:63:db:
0c:97:d7:82:a4:86:69:6f:25:65:3b:d0:55:7a:73:
dd:1f:61:a8:5e:3b:34:9b:c3:17:a4:b9:8d:fa:4d:
90:c9:3c:cc:20:3c:79:e4:93:2a:c5:d0:95:56:1a:
1f:c3:c9:ad:1b:f9:ce:35:ce:a5:f3:04:56:1a:d9:
81:42:44:95:d9:7c:ff:5a:1f:d1:25:78:36:93:0a:
e9:26:0d:d9:b4:f2:3a:0c:7a:14:07:4c:5b:83:99:
c5:30:ec:18:67:53:c0:9d:31:43:f5:34:22:fb:f6:
7e:79:5b:0f:6c:3e:0e:f0:ab:f9:d5:72:d0:8a:1a:
e2:a7:a9:86:b5:ce:9d:a0:68:75:01:1d:99:04:ae:
64:99:32:85:8a:4a:39:12:c0:c1:d0:84:fc:4c:16:
1a:a9:39:4a:b3:b5:f7:42:24:1c:6a:c5:8a:4f:b2:
e8:1c:58:81:bb:8b:80:ae:93:96:e2:11:1c:51:f2:
94:7c:31:91:4a:07:97:36:7a:b7:65:cf:8b:55:76:
1f:77:87:13:0e:82:12:04:6f:a8:13:00:0c:43:b6:
88:f9:3a:18:1e:f0:30:81:94:59:5f:ab:4c:d8:0f:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:73:CD:8C:62:05:F5:98:46:9C:B2:11:3E:02:BA:C0:AC:8D:48
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/CxFzzYxiBfWYRpyyET4CusCsjUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0-89.249.200.255
89.249.206.0/23
185.21.254.0/24
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
96:14:10:70:dd:aa:d1:d3:c1:1c:4c:f3:a8:bc:3a:7c:a3:09:
9d:af:2b:75:a7:35:c2:6d:46:8d:ca:bf:92:00:26:07:6f:ec:
df:8e:37:a5:05:06:75:f3:0a:d1:30:46:e9:c5:13:87:5e:40:
e5:85:c5:a0:47:a1:08:58:c7:1f:fb:5d:fa:5c:03:3a:28:4e:
a4:83:0f:7b:b5:8d:ae:3e:3d:3d:f5:1a:38:17:ff:12:8b:d7:
4d:25:67:e6:d7:9a:7a:23:bd:95:9a:cc:35:c9:59:8c:b9:08:
8c:f9:79:05:86:82:8e:c5:80:37:8e:e7:74:a5:9c:2a:b0:39:
c6:d4:eb:17:d2:8a:de:21:c1:24:b8:51:1f:ec:e6:fb:d6:a8:
1b:10:6f:e4:dd:ff:65:a7:b8:5d:6c:5c:16:26:5e:60:67:63:
cd:bd:23:0d:0c:1c:e4:8f:06:98:ab:19:64:c6:9e:ad:73:4c:
d2:63:e4:3b:6a:d5:6b:0d:ff:70:f7:71:5c:fe:2f:6f:3b:3a:
71:8b:89:c9:d2:1a:2e:46:7d:07:a7:a1:b2:f0:e2:c6:e6:c4:
ee:f3:25:26:98:bd:9c:c4:a3:45:39:1a:d5:8b:ad:92:3f:ef:
92:89:b5:d5:2b:53:59:29:f8:cc:ac:a7:53:f5:6f:00:d9:52:
d3:28:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:34 2025 by rpki-client