Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_1aZAXuzYUPJSU4fXRUI3hSsSws.roa
File: _1aZAXuzYUPJSU4fXRUI3hSsSws.roa (raw, json)
Hash identifier: 1+bGJaeHeRW62eBO5j6pZD56ZxrPTGBTHA5SXzg3Tjw=
Subject key identifier: FF:56:99:01:7B:B3:61:43:C9:49:4E:1F:5D:15:08:DE:14:AC:4B:0B
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018B665FCCF4B0E7A348D23DA60755E449E9
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_1aZAXuzYUPJSU4fXRUI3hSsSws.roa
Signing time: Wed 25 Oct 2023 10:27:16 +0000
ROA not before: Wed 25 Oct 2023 10:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.206.0/24 maxlen: 24
89.249.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:5f:cc:f4:b0:e7:a3:48:d2:3d:a6:07:55:e4:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 25 10:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff5699017bb36143c9494e1f5d1508de14ac4b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:ec:c6:50:76:8e:11:ce:58:00:eb:dd:7c:
0e:cb:3f:99:e8:c1:29:a6:1d:b8:60:d9:8d:3b:52:
8a:e9:68:a9:8d:61:e9:e1:35:82:19:20:ae:28:2a:
7c:ba:69:7b:02:0c:d0:6a:98:71:3e:77:28:c1:82:
e9:0e:28:b4:ef:65:59:e2:e6:2e:07:92:08:89:cf:
61:6d:3c:7b:01:24:90:05:f7:f1:02:51:59:b0:40:
5c:5c:e8:5f:43:e5:66:a5:07:ec:17:92:4a:ac:3d:
df:1f:c3:82:3d:a7:a1:1a:2e:41:98:04:11:05:bf:
4c:67:7c:53:b0:33:a9:7a:05:63:6c:16:24:b6:6a:
91:94:52:36:d6:d7:73:85:2f:5b:4a:98:35:a1:1e:
10:99:7a:78:12:9c:60:b3:cd:1f:ca:0c:4d:5f:5f:
68:ce:b7:1c:6d:f1:4f:35:6a:f3:04:d9:27:cc:42:
ba:20:ec:e9:51:c9:60:0c:f3:7e:49:20:c5:0c:79:
cc:f5:5f:04:11:1b:be:d8:96:62:da:88:7b:60:69:
a1:5e:92:9c:8b:b3:39:5f:cd:af:6c:95:65:48:fe:
05:fa:c3:0c:05:4e:39:13:54:a7:18:b5:ec:bd:4e:
4f:b2:a2:56:cf:49:90:ce:51:e1:92:12:1e:d5:09:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:99:01:7B:B3:61:43:C9:49:4E:1F:5D:15:08:DE:14:AC:4B:0B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/_1aZAXuzYUPJSU4fXRUI3hSsSws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
89.249.206.0/24
Signature Algorithm: sha256WithRSAEncryption
da:65:6c:1f:05:35:6b:fb:bc:e5:c7:f4:64:fb:bc:2d:05:c9:
ef:bb:98:47:e6:51:b1:8d:d4:cb:d6:60:e1:bb:fb:b0:41:e7:
8d:01:7d:4b:c0:70:c0:38:fb:46:92:98:84:e8:11:7d:a6:c0:
6a:77:68:66:ed:f1:36:a3:0e:f6:04:e1:73:4f:82:65:d1:84:
39:a0:3d:f5:16:fa:38:27:af:25:06:1f:92:94:b2:a7:07:15:
4f:98:07:43:7f:aa:63:a6:ab:9b:23:2d:33:2f:3f:db:c1:66:
52:2d:8c:01:ef:a7:91:38:ac:61:78:bb:b4:3b:11:83:5b:27:
d1:ef:0f:56:bb:22:1c:51:00:08:6c:5a:21:6d:1a:5e:f0:bf:
ab:af:4a:20:a0:a9:94:a8:01:bd:1a:0d:a7:17:3b:43:04:04:
6f:b7:ac:5e:25:1c:6c:66:66:c0:de:6e:b8:08:1b:4e:44:b6:
a8:e1:7e:3b:88:e2:cd:72:57:ff:1f:04:0f:14:73:25:ab:78:
46:58:91:f8:38:17:1f:83:d5:6b:d5:62:fa:86:c8:f0:0a:d7:
f8:80:8b:d1:50:f7:38:27:fb:e7:02:2e:5e:0e:f0:ee:9f:8f:
b8:67:38:ae:42:a7:4d:2b:67:e2:b2:ac:64:87:d4:c7:89:d8:
56:ff:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:26 2025 by rpki-client