Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Wv8UQjIRJ4q0eymnOvBY7Ux7aFw.roa
File: Wv8UQjIRJ4q0eymnOvBY7Ux7aFw.roa (raw, json)
Hash identifier: jpWTMxaSCEdilViCPVm1vvhGimDAsUVC9ph8e2GJtak=
Subject key identifier: 5A:FF:14:42:32:11:27:8A:B4:7B:29:A7:3A:F0:58:ED:4C:7B:68:5C
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018BA3D5220DECB040967DE837E515153124
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Wv8UQjIRJ4q0eymnOvBY7Ux7aFw.roa
Signing time: Mon 06 Nov 2023 08:52:15 +0000
ROA not before: Mon 06 Nov 2023 08:52:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.205.0/24 maxlen: 24
89.249.202.0/24 maxlen: 24
89.249.206.0/24 maxlen: 24
89.249.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:d5:22:0d:ec:b0:40:96:7d:e8:37:e5:15:15:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 6 08:52:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aff14423211278ab47b29a73af058ed4c7b685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:9e:a8:38:82:fc:aa:0a:04:22:e6:12:2b:
5b:ba:37:db:50:5f:39:dc:9f:fc:9c:33:47:1d:72:
bf:f4:d3:6e:cb:10:7e:b5:d6:b5:76:ae:f5:52:52:
28:01:e7:7c:11:5e:7f:76:93:c9:d5:91:8d:e6:13:
e3:95:86:10:f0:71:d0:e3:8e:54:e2:60:ba:67:13:
39:f7:89:e1:11:fc:87:78:ff:4a:7f:1b:7f:30:1d:
1f:a2:4e:94:89:19:86:55:1e:bc:5e:8e:65:22:e4:
50:15:5b:4d:59:66:9c:ef:5a:36:1b:fb:be:6e:70:
7a:2b:eb:4d:95:73:87:75:7d:d3:8c:15:6b:9c:d7:
b2:60:78:9c:f9:20:97:66:c7:eb:fc:56:6d:52:ef:
50:be:5c:da:72:b2:3d:92:19:6e:02:ca:da:b3:52:
b8:b9:33:42:a1:f6:91:4a:ba:71:71:be:90:4d:f8:
16:7a:72:73:a3:a9:0f:31:b7:b8:eb:c6:36:e0:e6:
06:7f:a6:da:b7:6f:2d:24:f4:94:46:83:58:49:50:
35:5c:50:84:24:c2:79:97:50:bb:d9:de:96:9b:48:
28:74:1f:8a:68:b0:7d:d9:a5:b7:ad:ae:4f:80:9b:
6f:ec:1e:e0:cd:9e:1d:fb:b8:fa:66:49:e1:a6:dc:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:14:42:32:11:27:8A:B4:7B:29:A7:3A:F0:58:ED:4C:7B:68:5C
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Wv8UQjIRJ4q0eymnOvBY7Ux7aFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.202.0/24
89.249.205.0-89.249.207.255
Signature Algorithm: sha256WithRSAEncryption
93:96:f2:98:b4:39:d4:83:94:0b:62:3c:24:16:c1:8d:95:04:
b3:c7:fb:89:50:b5:07:34:89:bd:24:c5:40:f6:b6:b9:a5:d6:
f8:1b:30:1d:42:59:9f:ce:30:65:d1:1b:5c:85:c0:3b:bf:7f:
94:aa:06:2e:d7:e9:2a:1a:4a:41:ee:1d:80:48:40:b6:cb:2c:
c8:ae:14:36:e7:61:aa:3e:d6:9b:b0:23:d4:04:16:1f:07:0f:
c4:2a:de:04:ff:36:69:39:ca:ba:da:71:57:a9:b0:ef:6b:b2:
ae:8c:7f:b8:dd:75:19:31:c5:f6:95:91:80:b3:38:31:2d:06:
eb:93:3d:41:8b:43:2f:18:56:8a:87:a7:bf:c3:3a:3e:ba:fd:
6a:85:5f:47:b9:3e:7b:60:d3:af:d8:ee:34:5e:10:e6:6a:e4:
f5:7e:14:db:a8:7b:f6:fa:b5:7f:89:14:cd:a8:9c:9d:b5:4b:
2d:cc:2c:3a:a2:1d:a6:51:a7:aa:36:55:8d:95:83:82:2a:5c:
62:1d:fa:b0:04:37:8d:af:36:e8:8e:47:26:5f:8a:be:23:0d:
57:9f:39:e4:12:b4:4e:c9:3f:d8:69:e6:28:83:d7:30:72:6f:
40:26:6f:b8:11:36:58:4a:02:b9:bc:08:5d:e7:42:da:9f:53:
72:55:6e:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:29 2025 by rpki-client