Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/VABCHWs6nItEYTBgSweOZa2ym3U.roa
File: VABCHWs6nItEYTBgSweOZa2ym3U.roa (raw, json)
Hash identifier: 1gmyYy/N0nSJVXqxACY55rEvUw3MOJYxDRigAOU+8Jo=
Subject key identifier: 54:00:42:1D:6B:3A:9C:8B:44:61:30:60:4B:07:8E:65:AD:B2:9B:75
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018DE53FEDB6D52DF028E140CBC55CB471FF
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/VABCHWs6nItEYTBgSweOZa2ym3U.roa
Signing time: Mon 26 Feb 2024 11:49:48 +0000
ROA not before: Mon 26 Feb 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 89.249.201.0/24 maxlen: 24
89.249.204.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:3f:ed:b6:d5:2d:f0:28:e1:40:cb:c5:5c:b4:71:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 26 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5400421d6b3a9c8b446130604b078e65adb29b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:96:34:ce:ba:f3:93:85:11:88:fb:ff:69:
02:a3:b0:11:36:e7:0a:c2:43:07:9f:d5:69:ad:bf:
fc:9f:54:d5:78:b6:e4:02:da:d0:81:d0:2d:09:d8:
ed:3c:ac:31:0d:57:f2:b0:98:ec:0d:d9:88:45:ac:
13:a6:5f:d6:f0:59:ac:49:df:32:1c:f7:7e:fe:4a:
77:70:c5:f2:0a:47:40:d4:4c:1e:ea:95:90:9c:e6:
cf:12:c4:79:0b:51:9d:fa:82:92:7b:78:af:e2:96:
9f:21:ab:51:53:cc:66:87:10:b0:6b:1d:25:fd:dc:
5d:26:c8:b6:fd:78:3d:9b:b9:f7:a9:05:a2:cc:95:
38:09:6f:a9:6b:c2:58:fa:05:18:15:35:d3:55:d1:
ed:5c:01:a8:26:bb:2a:79:b0:86:1c:35:e3:dd:17:
0d:82:01:a8:32:bf:97:a0:5b:30:fe:6a:88:fd:be:
1c:e8:b6:aa:a6:2e:d3:8b:59:16:2c:d6:2b:9d:20:
2e:44:f1:83:01:18:51:85:61:78:59:76:e7:c0:29:
e3:ce:0b:19:08:2e:e5:fd:ac:79:37:c2:a9:9c:66:
36:d6:f4:55:77:6c:e9:86:ae:b6:d7:ab:0d:c2:06:
6f:6f:c2:f1:2c:ba:bc:62:e0:ae:c7:38:32:d1:4c:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:42:1D:6B:3A:9C:8B:44:61:30:60:4B:07:8E:65:AD:B2:9B:75
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/VABCHWs6nItEYTBgSweOZa2ym3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
89.249.204.0/24
89.249.206.0/23
Signature Algorithm: sha256WithRSAEncryption
01:3c:3e:df:3a:52:44:59:3b:0f:3e:a3:c9:f0:af:1b:d8:e8:
cd:74:72:2d:cc:4c:69:f8:2d:a6:2e:ec:22:69:2a:30:93:c1:
4b:ff:12:5e:d3:32:30:4b:3a:2b:2b:f2:4b:be:43:56:f3:8b:
64:f0:d9:ef:33:4f:4a:45:f9:45:37:c7:0f:84:e5:8d:fa:90:
14:97:e9:b1:9d:5b:b9:03:fc:a0:9e:44:a4:aa:aa:4d:7c:ad:
6a:b4:08:61:53:d5:9e:97:eb:8b:13:43:f0:0f:ca:39:62:6c:
0a:cf:6d:da:3e:17:48:a7:c4:0f:6a:08:fe:5d:3d:c7:35:a2:
2a:57:7b:bf:77:2c:b4:5a:98:6f:ce:bd:85:61:f8:50:93:4f:
f4:f6:1a:0c:bc:28:97:eb:8d:d1:f3:ce:e9:2e:8f:3e:10:70:
ed:19:49:e3:b4:53:55:f3:75:4b:29:a5:bb:af:76:2b:a8:99:
60:a7:ac:1d:bb:88:ad:87:57:89:46:75:3d:f7:de:8f:a6:9d:
e1:10:fd:c5:6d:c9:93:73:96:d3:1b:e5:2f:50:fa:53:46:20:
10:d6:48:d8:2b:80:0c:29:78:57:81:9c:2f:f4:e7:9b:01:fe:
ac:10:ab:40:4e:4d:a7:49:ff:39:31:a6:54:d2:67:21:2d:82:
de:2c:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:00 2025 by rpki-client