Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/FVGn39uLFCNSzJfye24LOxxCq3w.roa
File: FVGn39uLFCNSzJfye24LOxxCq3w.roa (raw, json)
Hash identifier: PJyWN8zd8AAH7qRFSjRtPzN1roowCMibaPxW5kg6nEE=
Subject key identifier: 15:51:A7:DF:DB:8B:14:23:52:CC:97:F2:7B:6E:0B:3B:1C:42:AB:7C
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018C4A209FB11F5AA27F705542FCA813FAA4
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/FVGn39uLFCNSzJfye24LOxxCq3w.roa
Signing time: Fri 08 Dec 2023 15:51:40 +0000
ROA not before: Fri 08 Dec 2023 15:51:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:20:9f:b1:1f:5a:a2:7f:70:55:42:fc:a8:13:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 8 15:51:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1551a7dfdb8b142352cc97f27b6e0b3b1c42ab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:00:03:1f:64:f2:af:77:00:6f:65:f0:3e:
b3:dc:c5:54:4f:1b:d4:dc:f3:e2:e8:a7:a2:34:14:
38:5a:2f:dd:34:25:da:76:78:e2:14:a0:cd:a3:2f:
ea:0b:dc:6e:94:16:cc:ca:5e:d7:37:70:e2:7a:49:
e8:da:e4:7f:dd:45:eb:c1:3d:68:40:a6:22:ed:ad:
90:61:7f:d4:4c:95:ba:ad:5e:08:a0:09:d0:0c:10:
1b:30:11:37:7a:30:36:bd:8b:af:f0:b1:8c:de:41:
74:3e:a9:11:19:7e:e3:a5:49:1a:99:e5:3c:96:61:
99:13:96:a6:99:48:cd:1b:38:ba:0c:d8:e1:68:a1:
91:94:c4:d8:d8:6d:be:2f:57:5b:dd:20:42:da:7d:
b9:16:3b:65:70:91:8f:f3:e8:fa:8d:95:ab:2d:8e:
d8:eb:bd:cd:a6:ed:e6:6a:01:17:01:42:ed:4c:c5:
93:47:fb:64:ef:6f:ef:c8:3b:b0:1b:62:28:30:78:
84:76:a2:e9:3d:40:c7:81:e6:d2:cb:32:a9:f9:31:
43:e5:90:d3:55:30:2a:da:fd:7e:9c:53:92:21:fb:
a0:2c:6c:1c:f8:5b:26:d4:c7:a4:87:ee:82:e5:c8:
dc:0d:4e:0e:cc:bb:55:67:2b:22:05:dd:f0:ec:53:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:A7:DF:DB:8B:14:23:52:CC:97:F2:7B:6E:0B:3B:1C:42:AB:7C
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/FVGn39uLFCNSzJfye24LOxxCq3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
44:87:af:2e:fa:79:f2:5c:98:51:c7:72:70:9f:44:90:a6:5d:
b9:39:61:6e:74:08:ac:d6:ad:9a:54:6f:a9:d9:d5:7e:9f:c0:
b1:cf:24:07:91:fa:00:d1:a8:0f:b8:38:e9:3f:ff:02:da:ae:
ec:80:96:c8:98:6a:15:01:a6:9c:91:51:9d:ef:8c:24:db:5a:
d9:29:db:ec:39:0c:7f:87:32:1a:38:f0:81:7a:68:81:e6:58:
79:6c:10:89:a8:0b:ba:81:2d:82:00:6c:19:f1:3a:33:3c:af:
09:f2:46:31:1d:fe:d3:48:40:51:17:f1:58:e6:22:b8:9b:b5:
22:82:56:75:88:b5:96:cb:af:41:40:fb:80:e4:33:7d:f7:c6:
b6:1d:58:0d:a2:ec:6e:76:e7:1b:de:58:2d:58:b4:e4:6c:56:
3c:8e:e1:5f:83:4f:79:4f:88:7b:11:48:2a:93:f3:8c:8c:bc:
1d:9f:a2:08:25:a0:e1:fa:73:2d:a3:33:ae:29:e8:b4:54:85:
2e:66:29:6d:00:53:5c:be:ee:b2:02:5b:cd:82:32:52:90:4a:
be:d6:b3:18:23:34:e6:11:b1:1a:ab:e2:dd:7d:fb:b6:8a:b7:
84:9e:11:4d:f1:e2:2f:0c:34:f1:85:f5:66:c0:12:a6:6f:fe:
8f:95:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:01 2025 by rpki-client