Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/sEVp3bXyoZfSMr3GyYtMtwaj85c.roa
File: sEVp3bXyoZfSMr3GyYtMtwaj85c.roa (raw, json)
Hash identifier: lrC+w4rD0fBbjUtvgEUwpS9edQkLtzcTZ18zb70YcV0=
Subject key identifier: B0:45:69:DD:B5:F2:A1:97:D2:32:BD:C6:C9:8B:4C:B7:06:A3:F3:97
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018B8E5067EEFB544544CAE146E4549FA5B9
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/sEVp3bXyoZfSMr3GyYtMtwaj85c.roa
Signing time: Thu 02 Nov 2023 04:35:15 +0000
ROA not before: Thu 02 Nov 2023 04:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.249.205.0/24 maxlen: 24
89.249.202.0/24 maxlen: 24
89.249.206.0/24 maxlen: 24
89.249.200.0/24 maxlen: 24
89.249.201.0/24 maxlen: 24
89.249.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:50:67:ee:fb:54:45:44:ca:e1:46:e4:54:9f:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 2 04:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b04569ddb5f2a197d232bdc6c98b4cb706a3f397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:34:5d:9c:46:e0:f9:a8:de:60:0d:1d:0d:
b6:14:12:db:c7:7b:86:0a:6d:b0:1c:4a:c6:54:ed:
c8:f0:4a:bb:33:5f:7a:85:6c:ac:fa:c0:62:1b:e0:
fc:a9:9e:80:df:79:42:99:cd:59:06:8e:9c:3e:cd:
88:fc:58:fa:aa:5e:5c:a0:53:4c:69:44:07:41:82:
04:cf:ea:52:ef:9f:cb:3b:4b:23:8a:f7:19:c4:9d:
01:d4:2b:cf:00:76:14:26:f4:dd:33:91:94:13:7e:
29:82:20:8d:f3:3b:66:7d:a7:90:61:ea:00:34:cd:
54:61:a7:b5:9e:84:34:2f:6b:b2:a8:62:58:13:6f:
d3:57:2e:90:e1:0d:c7:46:d1:3a:bf:57:78:c0:90:
69:f8:77:13:c6:c6:a7:52:1d:eb:4c:d1:50:3f:5b:
39:5f:4d:2f:e1:7a:cd:c8:74:01:1f:88:d5:74:fe:
1d:e5:59:7c:80:37:29:86:6f:e1:f2:8f:0a:10:0d:
80:44:04:49:d5:44:48:d2:b6:b1:40:91:72:61:eb:
fa:ff:8a:f6:d2:64:ed:47:d0:45:62:98:1b:e9:5f:
2d:66:bd:29:92:2e:69:7d:4f:5f:8f:30:54:dd:b5:
86:2e:8f:e2:a6:0a:a2:12:0e:8b:9b:71:55:54:94:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:69:DD:B5:F2:A1:97:D2:32:BD:C6:C9:8B:4C:B7:06:A3:F3:97
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/sEVp3bXyoZfSMr3GyYtMtwaj85c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0-89.249.202.255
89.249.205.0-89.249.207.255
Signature Algorithm: sha256WithRSAEncryption
55:86:a9:15:a8:80:5f:26:97:6d:db:a3:7b:ef:06:f2:0c:b5:
d4:b4:05:d1:3a:c8:f3:1a:b0:31:90:45:fe:74:03:e2:0e:7a:
55:12:3f:7a:e5:f8:23:56:ed:b7:87:b4:c0:97:74:19:75:b0:
b1:c6:d8:9d:f5:64:43:08:a2:c4:64:d1:1b:76:a6:2c:6b:33:
89:4f:f8:f4:47:ac:f8:4a:28:5f:18:d6:5b:16:71:3b:73:5f:
9c:3d:49:6c:4c:73:69:a6:f4:51:04:fd:0c:9f:b9:a0:ea:fe:
3d:3e:92:b2:4b:8c:ec:3c:70:9a:cf:99:cc:78:d6:3e:82:32:
b7:d6:45:8a:ce:bc:a9:c5:b2:a4:14:10:19:14:f6:cf:05:96:
3e:3e:49:c6:b1:70:4d:5e:b5:da:fe:af:13:9e:81:07:f5:f9:
6c:15:66:84:1c:a3:06:eb:17:c9:32:18:c8:1b:a9:72:bc:e9:
a9:f9:b2:93:b5:07:ab:9f:67:58:c4:a8:cf:a8:29:1a:e7:2b:
0d:98:eb:a1:b0:02:9a:99:69:76:bc:17:0b:23:3b:a5:1f:2b:
dd:aa:4e:cd:24:fc:0e:ab:eb:32:78:0e:19:8a:af:9b:53:77:
19:c1:31:e1:35:0d:65:0a:9c:06:70:0d:b3:36:40:3d:62:7f:
e7:29:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:50 2025 by rpki-client