Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/lPduZgt6PVqn9EEar8KKBjlkJZM.roa
File: lPduZgt6PVqn9EEar8KKBjlkJZM.roa (raw, json)
Hash identifier: 8YEhiANCxyQcjUAg0JKUrEnkfN3wryAbYN7Di1znzjk=
Subject key identifier: 94:F7:6E:66:0B:7A:3D:5A:A7:F4:41:1A:AF:C2:8A:06:39:64:25:93
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018C8ED51528A4D8A0B4054B6EF5629AB666
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/lPduZgt6PVqn9EEar8KKBjlkJZM.roa
Signing time: Fri 22 Dec 2023 00:02:58 +0000
ROA not before: Fri 22 Dec 2023 00:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:d5:15:28:a4:d8:a0:b4:05:4b:6e:f5:62:9a:b6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 22 00:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f76e660b7a3d5aa7f4411aafc28a0639642593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:95:cd:ab:6c:df:09:f2:1d:63:83:12:a7:
c5:80:63:d7:1a:53:9a:13:bd:ba:ed:05:17:0d:b2:
24:b5:9c:82:1e:e8:32:d1:25:02:da:71:c4:e1:9c:
73:d0:c3:d6:0a:3e:cd:69:6a:c7:90:d9:ba:52:dd:
7d:4f:31:84:0f:79:aa:56:b7:9e:49:b4:0d:b0:65:
c2:48:87:0a:ac:e3:0e:f2:30:7d:6e:ed:29:63:a8:
21:7d:48:46:f3:62:06:84:0e:db:48:ee:d3:dd:07:
79:8e:0d:19:47:95:71:05:b4:cc:f0:ec:30:f5:89:
cf:61:8e:96:c0:e4:5a:91:47:2a:39:12:6f:d0:6c:
f7:16:03:82:a1:8a:16:79:37:18:a6:d2:4a:be:d0:
9e:70:83:7d:86:83:7e:9f:46:5d:3c:04:75:e2:a7:
a4:a9:fb:b9:b3:c4:9c:8b:82:68:ee:c3:4e:26:76:
74:c1:05:4c:0e:55:86:93:f6:19:7a:6a:fb:cb:30:
ca:df:cd:4a:59:7e:a4:fd:16:e8:f8:21:bc:4b:77:
8e:a8:1f:dd:bf:14:98:b1:a7:db:00:c6:c4:3a:5f:
cb:dd:ff:64:62:b0:28:fa:90:ba:16:7f:25:f9:54:
2e:3d:a6:89:0b:40:a0:b0:d4:f0:5b:2c:e1:a2:7d:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:6E:66:0B:7A:3D:5A:A7:F4:41:1A:AF:C2:8A:06:39:64:25:93
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/lPduZgt6PVqn9EEar8KKBjlkJZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
78:96:06:e0:e0:a4:61:5f:d0:4f:82:a7:59:9c:01:fe:29:41:
42:53:ad:4a:27:45:66:fa:95:4f:71:e8:0c:75:c2:ce:fe:56:
ac:bb:6a:77:0a:76:bb:01:90:14:93:22:76:cd:ae:0d:b2:7f:
bc:18:ac:e1:11:ee:0d:2c:57:a7:fd:06:49:7a:11:49:4f:9a:
70:d6:a2:fa:88:21:84:f7:92:14:66:ae:fc:65:aa:9f:8a:85:
0a:72:12:f3:30:59:04:ee:26:c9:16:96:87:70:b6:bb:2d:fe:
2a:28:16:0e:f3:5d:2c:49:5e:94:3f:81:70:d6:47:80:19:9a:
64:16:ee:4e:af:8f:e7:81:2a:0e:a4:4b:e8:d7:55:af:0f:61:
05:31:19:91:32:4d:db:17:9e:01:28:1c:b9:4b:c3:e9:08:e1:
05:22:e8:49:e6:7f:85:24:5c:f6:04:9d:a6:10:e2:6e:46:23:
45:a0:4e:0f:8b:6a:32:c5:eb:58:53:43:3f:47:59:63:e2:ae:
d7:fe:35:b2:e4:57:07:99:04:3c:ba:c9:8a:a0:fc:b6:a2:42:
f6:32:34:be:36:0a:3a:4d:66:ad:4a:c8:19:3f:0c:6f:f3:e0:
25:9a:48:de:63:63:a6:91:dd:bd:8e:27:cd:01:be:73:cb:56:
05:e4:b4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:30 2025 by rpki-client