Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ibFVF6r2u-3i12IrIUOOJj3ZmbQ.roa
File: ibFVF6r2u-3i12IrIUOOJj3ZmbQ.roa (raw, json)
Hash identifier: UkIBGLy6Fg2EM4ka/N1HqcLzknkQdJFqdGa3HWdzIPk=
Subject key identifier: 89:B1:55:17:AA:F6:BB:ED:E2:D7:62:2B:21:43:8E:26:3D:D9:99:B4
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018B665FCD605F65764DA21AC79F82610A26
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ibFVF6r2u-3i12IrIUOOJj3ZmbQ.roa
Signing time: Wed 25 Oct 2023 10:27:16 +0000
ROA not before: Wed 25 Oct 2023 10:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 89.249.201.0/24 maxlen: 24
89.249.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:5f:cd:60:5f:65:76:4d:a2:1a:c7:9f:82:61:0a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 25 10:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89b15517aaf6bbede2d7622b21438e263dd999b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f5:9a:c5:b4:5a:d7:35:b5:7f:a0:bf:c6:57:
1a:b8:b1:a2:5f:79:73:80:95:8f:85:73:3a:1a:46:
d6:48:3f:e0:5a:2a:16:7c:b5:37:2c:f3:e1:d9:86:
a9:61:76:b1:95:25:28:dc:4c:7c:b5:8e:43:7c:a6:
49:df:4f:f6:d8:da:ae:23:6f:45:af:92:73:27:ac:
32:f8:c6:7c:c5:eb:19:9d:77:60:db:2b:56:f6:f1:
3e:54:7b:eb:a2:80:ff:54:3e:fa:ae:28:e2:54:75:
85:76:03:68:8d:56:ca:0e:9f:4a:7c:82:19:49:ed:
8f:dd:65:74:0c:e6:36:b4:9b:88:9e:43:dd:c5:84:
0e:45:fc:84:7f:f7:4a:da:b3:e3:f3:e7:9a:91:45:
48:09:ca:37:86:fd:ad:84:01:3c:59:65:a2:3b:0f:
8a:76:e1:9f:b7:a3:eb:35:ee:a2:0f:e6:68:d1:63:
50:6b:cb:ae:81:ac:c4:71:61:17:d4:d3:df:a3:75:
4f:7d:14:3a:fd:e4:ae:15:1a:7c:7f:bf:75:f8:7b:
c4:65:1c:0e:18:63:3d:bc:84:8d:c0:a0:40:0a:39:
7e:c2:2d:f6:dd:86:3a:0e:6f:17:b6:0a:fe:97:bd:
ab:16:14:fa:65:a2:db:4d:ff:20:ef:f9:90:c2:d1:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:55:17:AA:F6:BB:ED:E2:D7:62:2B:21:43:8E:26:3D:D9:99:B4
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ibFVF6r2u-3i12IrIUOOJj3ZmbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0-89.249.202.255
Signature Algorithm: sha256WithRSAEncryption
46:6f:98:f4:c0:a9:a7:eb:c0:0c:7f:79:25:22:39:7d:0f:c5:
e0:6c:2c:68:96:a1:39:13:ac:65:49:e9:9c:3b:2c:b5:5c:5f:
9a:ea:95:24:1b:86:84:3f:f0:ee:4f:ec:f6:cb:32:c9:24:46:
bc:19:7e:db:d6:b7:b9:b6:5f:c6:17:2e:f0:3d:3e:e1:49:ca:
42:ee:78:d1:4c:f2:e0:a0:82:63:1a:32:97:00:d5:af:a3:1f:
02:8f:e0:fd:58:49:f8:79:ef:4d:a8:0c:81:95:eb:67:1f:ac:
36:23:09:44:57:72:10:05:12:e1:5a:75:c8:43:42:4a:21:29:
c0:b6:97:f9:06:d5:72:88:7b:88:c9:ea:2a:db:67:f6:47:da:
a8:bc:a0:b0:26:75:11:83:ff:72:cd:c6:d3:6c:3c:95:8e:b3:
9b:df:4c:f4:cf:c7:a9:e2:2a:85:05:6f:39:e9:f0:5a:ae:6a:
28:84:f2:16:b0:c5:5f:6f:67:86:3b:6c:e1:e9:cd:7e:ab:18:
fa:57:ce:37:77:f6:3c:13:0b:e6:d2:81:8f:97:d0:55:21:16:
08:10:6f:12:47:37:b5:9b:ef:8c:e7:f3:1b:1b:e7:88:a5:fa:
b1:24:a5:95:0e:eb:91:49:76:74:9c:1f:e8:fb:10:02:4b:5f:
f3:ab:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:54 2025 by rpki-client