Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/SC2vY4VatIMTQn8VZfj7QDqMP5o.roa
File: SC2vY4VatIMTQn8VZfj7QDqMP5o.roa (raw, json)
Hash identifier: MsiqLY4qJMSrAE0p5i8Y6nepUJrTLhzdKovJXIMSMZ0=
Subject key identifier: 48:2D:AF:63:85:5A:B4:83:13:42:7F:15:65:F8:FB:40:3A:8C:3F:9A
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018B058A7C89C55F7A24F61788492F7DB6EA
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/SC2vY4VatIMTQn8VZfj7QDqMP5o.roa
Signing time: Fri 06 Oct 2023 15:10:43 +0000
ROA not before: Fri 06 Oct 2023 15:10:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212027
IP address blocks: 89.249.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:8a:7c:89:c5:5f:7a:24:f6:17:88:49:2f:7d:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 6 15:10:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482daf63855ab48313427f1565f8fb403a8c3f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:22:04:d7:7b:0b:8a:e0:75:77:fa:7a:83:
03:44:df:0c:bc:af:31:97:c1:9c:79:01:f8:14:40:
f8:16:a6:a4:10:f3:34:38:b7:23:12:85:bf:68:e5:
0c:56:9c:9c:95:d3:09:39:cb:4b:5b:32:7c:a2:b0:
8b:e6:9d:06:d4:55:0a:72:e9:66:c9:c4:6e:58:0c:
66:ed:67:42:db:f8:3a:a1:de:cc:7c:52:79:30:09:
45:a4:8c:0e:45:e1:4e:5b:f8:ed:b4:12:06:5f:0e:
e8:79:a7:42:8e:9e:0b:cf:af:34:3f:ba:77:55:7a:
6d:c3:19:0b:63:9a:16:5f:87:36:bc:df:08:ed:2c:
16:5c:52:0b:10:41:f6:ba:8a:6e:ab:c0:0c:e8:ce:
bf:15:be:27:5d:5e:6e:e2:b2:bb:ea:a8:47:a6:e8:
6e:a5:d0:bb:9a:bf:7b:de:57:b2:df:02:b6:e1:55:
c9:ff:93:39:f8:c2:9f:dc:f3:64:ff:01:21:16:4f:
4c:0e:3d:09:f7:9a:ab:c3:5e:59:4f:ef:b9:02:3a:
7f:33:1f:0e:c7:bd:3a:98:b6:2c:40:ed:17:58:63:
31:29:5b:14:6a:75:fe:21:22:67:a1:bf:7a:75:26:
78:f1:69:04:bd:dc:5f:60:6f:20:a5:c7:33:af:2a:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:AF:63:85:5A:B4:83:13:42:7F:15:65:F8:FB:40:3A:8C:3F:9A
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/SC2vY4VatIMTQn8VZfj7QDqMP5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.205.0/24
Signature Algorithm: sha256WithRSAEncryption
97:19:ca:bb:52:8f:3e:9f:4f:ad:72:ab:94:3a:cc:ac:09:cb:
d1:68:df:c0:e9:3c:ae:b6:db:98:48:42:b4:8c:b1:e2:72:cd:
3d:d2:26:13:a1:ef:66:ba:e2:e9:2b:22:ce:f6:a5:0b:3a:37:
2e:23:fc:7d:da:45:44:dc:61:e2:da:b8:67:f4:21:fa:b2:ed:
41:75:3a:19:59:6f:30:09:22:de:dd:cd:2b:ae:36:45:a3:96:
30:7c:20:a7:c2:c4:5a:5b:15:c3:3f:7a:ca:c4:d1:77:f0:58:
ef:5d:f9:65:48:6a:6f:6c:48:25:a9:14:32:b2:fb:05:c8:62:
4f:49:94:0e:63:53:d3:7b:1b:2a:d9:92:a1:d3:74:57:4d:eb:
fa:18:2f:30:4d:a1:ed:ea:0d:3b:3d:5f:c8:18:be:4b:2a:ee:
2f:b9:83:d4:47:63:9d:14:29:ff:cd:a4:fc:3d:ad:cf:82:c5:
6e:0d:de:d9:c3:c3:a7:67:5a:08:7c:e6:9f:26:9e:5b:32:c3:
00:5d:dd:e8:01:dc:a2:bc:34:1d:b5:6c:ef:26:e0:56:c5:21:
3c:c1:40:40:3f:b9:49:e6:df:dc:5a:20:0c:5d:bd:53:4e:83:
4a:a9:99:2b:9b:c8:4e:52:0f:15:f6:b2:7a:ea:d7:fb:ae:38:
f0:54:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:32 2025 by rpki-client