Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/EdM0ZYGgfLSW5EedV1tE3k57ArY.roa
File: EdM0ZYGgfLSW5EedV1tE3k57ArY.roa (raw, json)
Hash identifier: E9GLDen7gfKZxbWLLdF6TGIXzH1VB/WZNWplEkV3Aks=
Subject key identifier: 11:D3:34:65:81:A0:7C:B4:96:E4:47:9D:57:5B:44:DE:4E:7B:02:B6
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019249730A37218B8E51459CEA4F9EE2D367
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/EdM0ZYGgfLSW5EedV1tE3k57ArY.roa
Signing time: Tue 01 Oct 2024 18:58:48 +0000
ROA not before: Tue 01 Oct 2024 18:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:49:73:0a:37:21:8b:8e:51:45:9c:ea:4f:9e:e2:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 1 18:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d3346581a07cb496e4479d575b44de4e7b02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:57:5e:d0:1e:81:83:8a:29:e3:34:11:56:
34:94:7b:de:6d:9e:d8:c2:20:d7:73:c3:54:d6:1f:
f8:ab:7f:0e:de:f3:f8:6b:81:17:e9:0e:5d:59:c7:
58:1e:56:a1:4d:49:ba:fa:00:fd:cb:4c:08:d9:f5:
6b:e0:34:1d:f5:66:1d:31:40:6b:94:23:ef:16:72:
dd:68:01:0d:52:ff:cc:b3:e5:b3:e6:70:d0:94:6e:
25:c9:c4:7a:44:b3:cd:54:bb:96:23:9d:55:7c:b7:
e5:15:c6:f2:16:50:b8:ce:72:62:e6:d5:ae:d1:73:
2a:d2:ca:75:dd:99:87:34:c6:42:b3:d9:32:71:41:
fd:5d:ef:2f:47:d8:49:2f:fc:1d:2f:89:f2:ce:ef:
0c:af:32:df:32:a1:f4:77:28:2a:e6:88:8b:d3:80:
bb:60:8a:b2:ce:41:cc:8a:67:49:22:53:c8:85:e7:
f0:dc:e3:bc:a2:f5:16:12:38:7a:a5:fc:0c:bc:2c:
8d:09:d9:6c:ab:2d:ed:35:d9:7e:5e:a0:d1:e6:e5:
ff:66:29:b4:0f:09:59:4e:42:34:7d:1f:ad:5b:e2:
91:04:23:16:44:76:84:61:95:89:ef:0b:57:e6:67:
56:fd:02:ae:17:c5:e1:2e:f1:cd:e3:65:d7:f1:36:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:34:65:81:A0:7C:B4:96:E4:47:9D:57:5B:44:DE:4E:7B:02:B6
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/EdM0ZYGgfLSW5EedV1tE3k57ArY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.206.0/23
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:4e:c8:8b:6b:a0:64:04:3d:53:be:54:4b:4a:1e:81:34:31:
c3:eb:8d:d1:6a:04:a8:77:bc:af:4c:9d:9a:62:ef:c2:ff:07:
2f:c1:b2:27:10:d9:0e:a6:f1:c4:a6:af:04:65:c8:3e:32:dc:
1c:ba:0c:ef:e5:05:f2:d3:c2:64:ca:c7:12:e0:9b:25:f4:3e:
98:17:fd:a5:f4:4c:c0:fe:68:69:5e:e9:57:a8:85:92:b9:d8:
0c:cf:64:68:ff:26:29:10:dc:56:eb:88:39:3e:da:45:3a:e1:
ef:4e:29:48:19:68:21:91:88:35:58:38:ce:5f:9f:20:6f:17:
2a:ec:a9:7d:de:17:c0:30:45:23:59:a2:c6:95:b6:6f:4d:d7:
f6:06:6b:2b:d0:26:50:92:74:9b:07:27:81:da:7a:2c:8b:a2:
00:a4:ab:c6:5e:3e:fc:d7:9f:b6:ae:7f:eb:71:f8:43:c5:74:
4a:7b:7a:e8:05:95:e7:2b:6b:a7:4c:12:04:ed:2b:a4:7d:88:
10:63:ed:d0:7e:fb:a5:90:63:c1:44:a3:e8:82:34:a1:1f:5e:
5c:34:8c:71:db:95:20:1d:fc:3b:37:d8:6b:0e:49:67:dc:da:
59:8f:41:fa:68:a8:c3:8f:2e:30:85:fc:57:20:6f:e6:5b:8d:
a8:f7:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:56 2025 by rpki-client