Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/comxaQErSdyWFtj6-HDcVuD5Mhs.roa
File: comxaQErSdyWFtj6-HDcVuD5Mhs.roa (raw, json)
Hash identifier: qwSjzO8nKmka4HA0cSY1i2L9JuSvvfHJW9VKL5v5hsg=
Subject key identifier: 72:89:B1:69:01:2B:49:DC:96:16:D8:FA:F8:70:DC:56:E0:F9:32:1B
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018FE039AEC4CD79142350E431F33A830504
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/comxaQErSdyWFtj6-HDcVuD5Mhs.roa
Signing time: Mon 03 Jun 2024 22:30:27 +0000
ROA not before: Mon 03 Jun 2024 22:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 89.249.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e0:39:ae:c4:cd:79:14:23:50:e4:31:f3:3a:83:05:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 3 22:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7289b169012b49dc9616d8faf870dc56e0f9321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:36:ea:bf:b5:2e:80:5a:d1:6c:aa:62:9a:
e1:bf:f3:44:5b:39:6c:c8:46:29:69:62:ac:37:b6:
fb:25:d4:0a:b4:60:27:c6:83:09:2e:e7:2d:9e:91:
23:d9:f6:19:f4:58:ed:44:aa:ab:42:7b:cd:34:07:
c3:39:42:06:c5:30:42:0d:d6:1d:a0:c2:28:59:19:
7f:3a:24:07:5d:b4:ea:a6:f4:4a:a2:31:34:28:3c:
a4:e9:ce:2a:0c:cb:2a:52:68:c9:19:f7:08:6d:2d:
e8:a8:69:79:23:d0:e2:53:56:d6:cc:a4:95:da:ab:
b4:2e:b9:ab:4a:5e:f3:a5:98:0a:48:4e:41:39:9d:
e7:12:39:96:22:60:5b:93:32:af:87:ee:61:e9:a9:
cf:ec:9c:17:7f:df:e4:c8:8a:2e:ed:98:d2:7b:12:
cc:17:52:f2:45:f3:51:ff:64:e9:08:4f:4a:83:0a:
57:68:4e:2e:80:aa:68:1d:15:e2:d3:69:dd:20:30:
46:9b:bd:cb:4d:74:05:85:0b:14:2e:e5:e5:74:a9:
d1:c2:be:94:bc:c7:fa:7d:13:5c:0b:c0:08:3f:af:
f1:a0:0a:d2:c9:78:a5:ab:fc:92:ba:27:b6:54:99:
0a:6d:81:17:1c:04:f2:d0:36:11:ea:be:ea:96:df:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:89:B1:69:01:2B:49:DC:96:16:D8:FA:F8:70:DC:56:E0:F9:32:1B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/comxaQErSdyWFtj6-HDcVuD5Mhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ef:ba:01:79:9a:77:b7:b8:e5:41:c9:bd:bc:a9:98:5d:63:
b8:3b:20:d8:18:5d:74:c2:a5:df:d3:af:77:52:44:ed:65:24:
63:1a:ef:26:be:d2:ac:e4:6b:e8:3c:2b:a8:e7:5e:9a:8f:1b:
aa:32:7a:95:b7:a8:fb:a6:b3:f5:2e:f7:8f:d7:0f:45:27:f8:
01:5c:b0:a2:cb:27:e2:e5:31:e7:b1:7b:f7:f1:3f:f2:64:65:
27:b0:d3:2f:b1:4c:1d:08:40:69:b7:33:d1:db:bb:8c:a9:40:
49:75:f3:da:fe:bf:f8:1a:82:cb:ff:c3:84:31:42:a5:64:75:
09:38:9f:3f:c4:01:96:52:75:f9:0b:15:31:ba:04:02:ba:42:
b8:4e:5f:32:9f:da:aa:97:82:76:3c:ac:a0:67:2a:fd:18:f3:
29:6b:88:30:66:71:dc:9b:60:92:e3:2a:aa:8c:b2:e4:a8:2a:
0c:45:54:18:43:a3:89:4d:d4:c3:ba:7d:ec:cd:fa:75:05:da:
e9:69:0b:8c:d6:45:15:71:c1:21:48:21:e7:b0:6a:c2:a1:61:
a7:4e:a5:d0:d3:98:24:d0:91:34:10:e5:48:39:09:63:e7:43:
2d:f3:b8:fa:59:60:4a:99:5b:d0:f8:79:4b:6d:47:33:f0:04:
40:9a:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:30 2025 by rpki-client