Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/xnDjTOynVqq5o6jBKg1ejDJjUzE.roa
File: xnDjTOynVqq5o6jBKg1ejDJjUzE.roa (raw, json)
Hash identifier: o9k3rZlgXd+5sFQPKqA5JnrBEtq5rLped7wAhWQs/6U=
Subject key identifier: C6:70:E3:4C:EC:A7:56:AA:B9:A3:A8:C1:2A:0D:5E:8C:32:63:53:31
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018DCF21630E2D1DB8FFB139EAC819F8492B
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/xnDjTOynVqq5o6jBKg1ejDJjUzE.roa
Signing time: Thu 22 Feb 2024 04:44:48 +0000
ROA not before: Thu 22 Feb 2024 04:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 89.249.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:21:63:0e:2d:1d:b8:ff:b1:39:ea:c8:19:f8:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 22 04:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c670e34ceca756aab9a3a8c12a0d5e8c32635331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:1f:e2:16:97:94:df:75:fd:cc:ea:72:77:
23:81:a8:a6:fe:db:ba:e2:b6:eb:2f:25:7a:00:75:
4d:79:22:d0:87:d7:b1:2d:85:c7:3b:6e:da:6b:99:
b5:e8:c2:cb:7c:ae:1a:3e:29:c1:f2:1f:4b:c9:a5:
d8:b8:17:01:9c:61:24:a0:0d:50:d8:ea:cd:c2:10:
56:53:cc:3b:4c:c3:65:52:8c:8c:1f:c4:28:74:f3:
4b:c7:e0:74:50:9a:9d:b0:27:3f:24:81:90:09:04:
5b:82:62:90:dc:01:f1:a0:0f:7b:32:76:96:78:d2:
ab:48:1c:e6:b9:9a:bc:bd:55:43:66:fd:c7:25:96:
5e:78:c6:7f:d8:b0:a9:8b:1a:95:5d:a1:ec:0f:1d:
af:af:6e:eb:c0:38:6c:21:51:8e:f1:1f:f6:ea:70:
8e:a5:52:06:9e:1a:98:86:64:f8:c3:13:7f:4d:48:
f7:3a:88:54:0b:2f:ce:32:55:da:74:f2:10:7f:8b:
31:22:47:a2:67:49:09:20:3d:3d:22:21:33:25:d3:
a3:b7:43:f8:41:01:4b:5b:d6:fb:23:67:3f:9e:6f:
1e:c5:94:5d:69:c6:a1:60:78:88:f7:de:f4:00:60:
5c:88:cc:81:71:0b:05:59:05:92:6f:7f:6f:32:b5:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:E3:4C:EC:A7:56:AA:B9:A3:A8:C1:2A:0D:5E:8C:32:63:53:31
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/xnDjTOynVqq5o6jBKg1ejDJjUzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:78:b6:79:0e:ab:6b:b4:82:37:c7:b2:31:68:82:48:4d:5d:
3a:29:d1:34:33:d1:80:d7:21:4a:5e:1a:2e:15:14:57:3a:7b:
7e:d8:8e:8b:ab:e0:9f:d6:9d:58:f2:ef:61:31:f2:d2:1e:84:
da:af:99:32:bc:d7:65:45:84:4d:cb:40:01:e3:39:d8:37:d9:
d4:56:1c:4b:e3:00:3b:10:44:7f:0c:8f:ee:8a:9a:24:a4:4c:
18:04:02:32:9a:eb:be:51:2d:15:f9:07:3d:8c:02:03:d5:c1:
30:db:5b:86:a3:25:a6:b2:8e:84:50:85:a9:ef:dd:f0:29:14:
8a:45:2a:1c:f5:eb:3b:29:22:4d:10:95:1f:e8:76:c6:a8:e7:
59:c4:14:07:8e:75:43:c1:83:c3:a7:c0:33:28:da:2f:77:86:
b9:5b:4b:d9:da:c4:08:0f:82:ac:75:c7:b6:b9:b2:52:8b:00:
bb:a9:dc:ec:8c:23:dd:7d:db:c5:ea:05:a5:42:02:a3:ae:58:
22:d4:80:5f:0f:3c:4f:cc:c2:f5:d5:e3:88:22:29:98:f6:6b:
1e:4e:d8:a4:8f:d2:83:78:db:e7:d8:a9:aa:1c:bf:b2:52:49:
cb:e5:97:73:c6:1b:c8:5e:0b:a4:ec:af:dc:9d:62:2e:84:fe:
d0:0e:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:50 2025 by rpki-client