Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jFXlADarBBDkLx1PP1rhxFLFUFo.roa
File: jFXlADarBBDkLx1PP1rhxFLFUFo.roa (raw, json)
Hash identifier: 0lvEqhpGidjqxgQj55QxMxfoeaaUTKenD4wyfIizBrQ=
Subject key identifier: 8C:55:E5:00:36:AB:04:10:E4:2F:1D:4F:3F:5A:E1:C4:52:C5:50:5A
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018C34B040F80B96C8E77048F920994B1668
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jFXlADarBBDkLx1PP1rhxFLFUFo.roa
Signing time: Mon 04 Dec 2023 11:56:55 +0000
ROA not before: Mon 04 Dec 2023 11:56:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.202.0/24 maxlen: 24
89.249.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:b0:40:f8:0b:96:c8:e7:70:48:f9:20:99:4b:16:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 4 11:56:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c55e50036ab0410e42f1d4f3f5ae1c452c5505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:39:c4:78:f4:cf:b6:57:9b:f3:41:9f:ee:
22:0c:d8:73:d8:6c:92:97:22:76:97:89:57:57:da:
d2:b6:1e:f2:6d:4a:73:a3:47:d2:35:39:91:5e:68:
b3:a3:bc:71:7c:99:47:80:33:b8:36:9c:eb:fd:94:
2b:d9:8e:4f:52:7a:13:07:3e:71:8d:28:29:15:29:
43:d2:74:41:1a:2a:a3:78:51:8c:55:41:d6:c8:c4:
f5:94:5f:38:53:53:5a:51:ae:d4:f2:f2:a6:e2:62:
53:da:aa:3f:cf:86:f9:01:c2:3d:46:ef:68:c2:15:
3d:d3:5f:90:7d:47:26:e9:10:58:de:ed:be:e1:06:
21:d2:dd:be:81:17:e5:18:30:b0:f5:99:8e:84:f6:
8d:cc:d3:b7:34:44:8d:bd:b2:20:8c:e1:2a:bf:c7:
3e:dc:ea:e1:6d:f1:37:fc:88:3e:cc:f2:1c:f0:20:
aa:25:f8:94:18:3f:77:8a:78:b1:38:93:ed:0a:b1:
c3:78:4e:0f:86:46:46:bc:39:5d:9f:1e:6b:89:23:
75:1a:bd:64:b7:b5:1a:b1:f9:1c:50:11:e0:df:fe:
3b:cc:94:89:84:17:b2:62:c9:e2:36:f1:25:9b:fd:
f0:99:79:b8:b9:60:88:24:c9:36:3a:64:84:1e:f1:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:E5:00:36:AB:04:10:E4:2F:1D:4F:3F:5A:E1:C4:52:C5:50:5A
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jFXlADarBBDkLx1PP1rhxFLFUFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.202.0/24
89.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:3f:49:d5:2c:da:f4:c0:db:7e:97:84:0b:08:da:93:2e:c1:
32:b5:fc:2b:6e:fd:56:53:49:b7:b6:45:11:15:72:28:c6:98:
e1:04:1b:98:d1:7a:c3:66:1b:06:fa:8d:bb:d5:74:c5:bc:43:
33:f4:19:d4:18:b4:95:5c:96:8a:9d:b4:8a:d9:22:f6:2f:1c:
0e:84:ae:f7:35:c9:3b:a1:67:15:12:b2:22:3d:5e:aa:b3:9a:
1e:9c:70:f5:9e:f4:ff:95:61:38:0f:98:34:8e:7d:ef:8e:0b:
63:0d:c9:55:d2:dd:39:a7:a3:3f:da:2e:74:17:ec:13:1f:01:
89:4d:d4:e3:71:36:0f:c0:84:26:c8:f6:ad:97:68:fe:10:16:
09:fa:fb:fc:78:7f:d4:0b:10:b8:ee:2f:b9:82:79:00:1f:f8:
d9:21:7b:3a:34:80:d1:93:aa:a9:80:cd:3e:b6:46:bd:4b:0d:
7b:7d:68:54:64:3e:da:36:3f:56:26:29:17:f2:77:62:5c:79:
12:6e:79:5a:8b:c7:57:1e:b6:3e:db:ba:bd:b4:35:b9:6f:36:
89:51:76:0b:91:dd:94:2a:90:9b:13:06:be:06:9f:a5:61:0d:
8a:7f:da:c8:e9:ba:5c:bf:6d:1d:04:64:88:18:1f:18:e4:af:
90:2b:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:28 2025 by rpki-client