Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/b385WjZoTULtAz8Rg7bAg82nYGs.roa
File: b385WjZoTULtAz8Rg7bAg82nYGs.roa (raw, json)
Hash identifier: QmevJQgPNY0+sjvwPI2Rw4XtNl36I72ntVitDKd03ls=
Subject key identifier: 6F:7F:39:5A:36:68:4D:42:ED:03:3F:11:83:B6:C0:83:CD:A7:60:6B
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018CC8DE36A46423B467F44E3902BC971D5D
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/b385WjZoTULtAz8Rg7bAg82nYGs.roa
Signing time: Tue 02 Jan 2024 06:30:55 +0000
ROA not before: Tue 02 Jan 2024 06:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 89.249.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:36:a4:64:23:b4:67:f4:4e:39:02:bc:97:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f7f395a36684d42ed033f1183b6c083cda7606b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:49:8a:88:d7:72:14:b1:84:2b:7e:bb:65:
85:fd:97:7f:e2:4e:70:af:e4:b9:2a:19:9b:6a:f7:
57:56:d9:29:22:21:dc:28:10:0b:1e:ef:a7:2b:0b:
96:8e:01:a2:4e:e1:29:46:10:11:34:1c:cc:dc:7d:
a4:e9:e1:1c:48:45:25:a5:d0:ad:f9:b3:8b:cd:a2:
50:f4:d4:70:a7:6a:d6:b3:8e:ea:3d:c4:f6:3b:b4:
e7:cc:14:b3:c6:f1:92:f1:c1:ac:0d:5b:df:b8:2e:
b7:ca:aa:bc:ea:0e:db:ee:2c:95:76:84:03:d3:6b:
a5:ad:47:0d:c2:51:aa:c3:c1:40:78:e3:16:96:60:
da:07:e0:3c:71:dd:65:c5:28:c7:ef:c7:7e:50:1c:
44:91:76:e3:9a:5e:2d:19:57:e3:51:96:93:08:8a:
ba:d1:bd:d3:52:4b:a1:7d:38:6c:90:c9:67:87:2d:
d3:4b:20:45:9e:61:00:dd:7c:7e:9b:c4:52:d9:60:
75:34:3a:b8:5f:a2:b2:11:f3:07:ab:ef:37:1a:ca:
6c:de:4c:e4:20:70:af:32:d2:17:08:ea:0c:ae:4f:
a3:09:99:84:8e:86:a0:5f:e9:ff:28:17:40:e7:57:
4f:65:41:37:02:ac:99:a3:9c:70:4c:89:b9:95:29:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7F:39:5A:36:68:4D:42:ED:03:3F:11:83:B6:C0:83:CD:A7:60:6B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/b385WjZoTULtAz8Rg7bAg82nYGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/23
Signature Algorithm: sha256WithRSAEncryption
da:3c:4a:73:83:2b:93:3c:eb:1a:bf:bb:14:9e:eb:ca:1b:cc:
b3:26:8b:df:9d:6a:9f:9f:f6:14:fe:d9:24:6a:90:a7:29:0c:
98:89:d3:c1:d6:b6:b2:8f:bd:7f:7b:a6:55:4c:8f:22:01:bc:
11:25:d5:c7:99:f5:4d:57:47:2e:c9:8f:3f:4d:28:4e:42:2e:
ad:a5:d8:ae:80:e1:60:9e:d1:f9:f7:4f:4d:4b:ea:c5:f3:96:
cd:14:0c:f9:ae:82:aa:f6:14:6e:2e:97:34:9b:64:5d:f0:47:
5a:6a:a4:d6:57:93:a7:48:a3:fb:f0:32:af:de:4e:70:f9:df:
7c:19:bf:86:c1:22:aa:ac:3b:f4:92:25:f5:de:99:6b:54:b3:
cc:63:27:3f:c6:8d:31:d5:0c:fc:ea:c1:1a:07:fb:27:dc:19:
74:3d:c6:96:de:e9:a2:76:1b:45:16:7d:fc:d5:bb:ee:7b:cf:
5f:3a:cd:16:9f:9a:18:5e:8c:ba:9f:f7:c0:34:4f:f1:16:e1:
fe:f2:1a:a1:70:ea:43:a6:f0:4a:b6:76:22:41:e6:9e:45:fd:
e6:c4:08:f6:c6:a6:13:01:43:27:13:90:f0:a7:10:d1:8f:be:
07:9b:b9:eb:d8:c4:b5:04:a7:16:1d:a0:10:76:90:a5:54:79:
a8:86:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:53 2025 by rpki-client