Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/R8qSHkgIxwZthjFIJ5n9Z6u7Q_A.roa
File: R8qSHkgIxwZthjFIJ5n9Z6u7Q_A.roa (raw, json)
Hash identifier: DpSNtBeFR/js3yRO34Ms/YFtOwRYMxkS0swPTxUAyYw=
Subject key identifier: 47:CA:92:1E:48:08:C7:06:6D:86:31:48:27:99:FD:67:AB:BB:43:F0
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018B6E7139C5C599CEB21F23EB317A052A63
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/R8qSHkgIxwZthjFIJ5n9Z6u7Q_A.roa
Signing time: Fri 27 Oct 2023 00:03:15 +0000
ROA not before: Fri 27 Oct 2023 00:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.202.0/24 maxlen: 24
89.249.206.0/24 maxlen: 24
89.249.200.0/24 maxlen: 24
89.249.201.0/24 maxlen: 24
89.249.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6e:71:39:c5:c5:99:ce:b2:1f:23:eb:31:7a:05:2a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 27 00:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47ca921e4808c7066d8631482799fd67abbb43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:b6:3a:64:21:e4:ee:03:69:7d:ac:22:06:
fa:5f:cb:2e:7a:6a:f3:a6:8e:e2:40:e3:53:e0:e8:
00:21:ec:fd:e8:fe:e4:99:58:b3:aa:f8:19:22:ca:
99:9a:81:9b:e4:08:b9:76:f2:a8:3b:12:57:ae:b2:
39:dc:3b:79:fb:c5:28:37:e8:55:c1:1a:bb:47:55:
a5:ba:61:4b:c4:b0:42:af:b0:58:6d:e1:5e:03:6a:
d6:0d:e5:33:f5:b4:73:8c:fd:bd:e2:c1:29:8c:43:
37:ea:ad:53:fe:1f:a7:1b:56:15:b3:81:44:82:39:
e5:59:b4:e3:03:89:0d:12:eb:50:f9:8e:0a:b9:03:
b0:97:fd:a9:6c:7f:4c:ad:c5:6d:a7:e3:3b:d5:5c:
32:47:6e:37:9d:f7:2b:e6:15:4a:66:86:ec:d9:94:
8e:3a:a6:a9:c5:ba:fc:6a:6a:b5:30:8f:73:48:73:
4b:ff:5c:53:f9:79:4b:0d:f3:a6:89:45:35:92:35:
2f:c9:52:30:33:ea:6b:4c:aa:04:8b:4f:d4:c1:a1:
68:bf:11:1c:be:1f:61:d1:8a:c6:de:92:e4:20:a4:
20:17:3c:71:25:39:1d:9d:91:9a:b2:2d:14:e5:fe:
fd:0a:c6:57:ae:0e:7d:6d:ae:bf:85:f1:16:59:32:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CA:92:1E:48:08:C7:06:6D:86:31:48:27:99:FD:67:AB:BB:43:F0
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/R8qSHkgIxwZthjFIJ5n9Z6u7Q_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0-89.249.202.255
89.249.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:e2:46:5c:d6:c3:4f:94:18:2b:10:8e:70:aa:19:0e:37:d8:
16:52:fb:1c:56:d0:70:7c:34:0f:69:92:b9:fd:77:eb:33:6c:
36:2e:ac:26:d5:60:6b:d0:85:a6:41:ae:77:d9:29:53:1d:60:
ab:c6:00:43:0d:9d:df:99:ee:73:19:0e:7e:f2:2f:1c:0a:49:
d4:dc:82:2f:52:b1:12:c6:e4:ab:18:3a:11:ed:bb:61:a2:bb:
e7:c6:84:b2:e0:55:1c:28:0e:9e:0f:92:92:f7:0c:36:5b:d0:
92:1e:d6:ed:b2:8f:bb:0f:d2:45:4a:c8:04:0f:00:e7:3b:c2:
e4:d3:8f:04:0c:c0:62:a5:75:1e:a7:8a:aa:6c:d0:29:a6:f7:
66:bd:5b:fb:46:5c:21:cf:1e:81:7d:3f:c6:92:b7:cb:d2:46:
80:b4:ca:f0:c0:c6:d2:f8:f1:89:34:00:05:cd:61:75:ef:3b:
b8:d6:e2:62:8d:95:5d:d4:ca:31:97:77:90:1d:0d:f0:d6:f0:
3f:4a:67:d8:d6:58:54:54:d0:8d:4e:d9:39:38:15:8b:5c:77:
ca:6f:7e:94:ad:e2:6b:12:ab:8e:3b:16:66:b0:2f:bf:5e:c6:
4f:27:7e:57:80:13:fd:f5:f9:e6:4e:2e:c1:b2:39:1d:78:61:
cc:a0:c4:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:01 2025 by rpki-client