Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/g6u1ZGM8tKO55MHWVkAPr0JZpxg.roa
File: g6u1ZGM8tKO55MHWVkAPr0JZpxg.roa (raw, json)
Hash identifier: t+F/+af7tJbYP19CkpthvtTvcyWduGde3YWCFlUF+F4=
Subject key identifier: 83:AB:B5:64:63:3C:B4:A3:B9:E4:C1:D6:56:40:0F:AF:42:59:A7:18
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0191DC6D2F7CD817589F977E332A2B118FDA
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/g6u1ZGM8tKO55MHWVkAPr0JZpxg.roa
Signing time: Tue 10 Sep 2024 14:53:48 +0000
ROA not before: Tue 10 Sep 2024 14:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.200.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:6d:2f:7c:d8:17:58:9f:97:7e:33:2a:2b:11:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 10 14:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83abb564633cb4a3b9e4c1d656400faf4259a718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:3a:a9:23:8f:82:30:6c:f9:2e:f8:26:d6:
29:f9:16:fe:e2:9c:a5:a9:d2:bd:dc:9f:11:28:7c:
17:77:e9:b6:a8:d5:d7:1a:db:1a:44:99:92:f8:2e:
02:3d:2c:19:3b:24:d4:e6:c5:59:65:a1:8a:db:da:
16:ff:50:88:3e:da:85:62:2f:e0:02:c7:e7:93:ed:
23:40:47:a6:b2:d4:a6:17:6f:02:bf:c9:43:8f:69:
b1:b7:eb:c0:bd:2b:df:3c:fa:e1:a9:a2:6c:c3:a4:
7b:18:cf:60:e0:1f:48:0c:74:0e:b5:e8:a1:57:72:
02:cf:cb:ee:5a:3d:d3:0c:89:30:a6:3f:61:6a:93:
18:1a:29:ff:22:39:f2:a1:f7:c6:08:de:6c:e6:2e:
5d:4d:70:62:e7:8f:9e:8e:9c:78:9e:61:7a:93:ab:
51:d9:0c:c7:dc:b2:9a:d3:12:ea:bc:18:51:bf:49:
cb:e6:79:ce:20:89:a1:80:26:9e:97:58:ae:73:dd:
c2:7e:11:d7:d4:f7:cc:8f:03:c1:12:2e:66:b5:9b:
c6:af:32:36:60:25:2f:2c:e6:ef:3d:92:f4:75:e2:
6d:7b:90:e3:1d:bf:12:24:f4:ad:74:69:f1:ad:b0:
a4:77:e5:bb:0d:60:78:63:cf:55:5d:9f:08:5f:97:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:B5:64:63:3C:B4:A3:B9:E4:C1:D6:56:40:0F:AF:42:59:A7:18
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/g6u1ZGM8tKO55MHWVkAPr0JZpxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0-89.249.200.255
89.249.206.0/23
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:0d:cd:36:d2:cc:ae:9c:e2:b2:68:2f:0b:19:4f:e8:50:c9:
d9:46:25:ce:d6:4d:bc:04:1f:82:76:bb:c2:c0:ac:25:73:fb:
ad:1a:21:17:10:a8:ee:d6:1b:cd:0d:62:37:b6:ea:37:37:9a:
29:fa:c0:7e:83:5c:28:a6:0b:89:6d:2c:93:b3:61:d8:94:7e:
f4:3b:c5:ae:53:a7:fb:15:70:8b:7f:53:b0:6d:19:7d:27:9e:
db:bf:bd:5f:64:08:f7:53:7d:3f:37:e4:8e:5c:e3:80:9e:57:
66:a4:0e:bc:4a:96:fd:47:d8:aa:df:36:97:cb:5f:ba:d8:6d:
fa:fe:a0:ab:99:3e:7a:80:6b:57:b1:3f:03:9f:17:45:5a:aa:
3a:65:d7:99:fd:1b:c5:65:93:9b:e8:c3:00:b1:af:93:ce:93:
5f:3b:90:4a:22:f8:02:56:da:ec:fd:80:c5:36:1d:4c:fa:e5:
28:c0:db:a7:0f:3c:57:19:65:aa:16:fb:59:54:63:a1:90:10:
66:93:41:cd:42:d8:e5:5d:31:6f:f5:76:b8:c7:05:5f:a8:c7:
4f:bf:cd:08:15:c9:bc:fe:f9:db:44:15:a9:b8:5a:ad:2c:7c:
df:d3:43:7f:96:ed:b1:42:07:35:2d:1b:3c:5c:26:8b:77:7d:
d4:b0:6e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:30 2025 by rpki-client