Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/z7fFjQPScQBdHh0kQWuo9kB3L6M.roa
File: z7fFjQPScQBdHh0kQWuo9kB3L6M.roa (raw, json)
Hash identifier: bKpi9lpF0oHGwj7UTvfyBC0r8SjoNpLx7dawVej6+pk=
Subject key identifier: CF:B7:C5:8D:03:D2:71:00:5D:1E:1D:24:41:6B:A8:F6:40:77:2F:A3
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018CE0DA8C439D5F2BB79B72FEB04FE6DE4A
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/z7fFjQPScQBdHh0kQWuo9kB3L6M.roa
Signing time: Sat 06 Jan 2024 22:17:48 +0000
ROA not before: Sat 06 Jan 2024 22:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e0:da:8c:43:9d:5f:2b:b7:9b:72:fe:b0:4f:e6:de:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 6 22:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfb7c58d03d271005d1e1d24416ba8f640772fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:7f:d3:8f:bb:36:c0:df:a9:bd:66:9c:da:
7b:12:bb:4f:05:92:69:0d:c9:04:41:bc:4f:1d:cf:
3f:9c:4a:05:11:6e:68:01:04:98:d3:ee:bf:a6:e0:
8b:06:73:02:5c:1a:b8:a5:db:ee:11:f0:a0:79:9c:
10:72:e8:ce:3b:e4:93:d0:c8:a8:08:f6:c4:8f:83:
e5:14:c7:df:86:24:f6:fa:79:aa:05:08:7c:5c:d8:
9b:a2:dc:13:69:c3:29:b1:eb:5d:49:96:cd:12:fb:
e2:a6:4c:cd:be:58:46:80:be:18:45:91:a1:91:22:
0c:6a:5b:56:4c:2f:94:e0:67:c9:2f:f0:0d:71:5b:
4a:9c:4b:ea:c9:70:2e:9b:82:c4:3d:56:a7:1c:2e:
fe:84:53:11:28:a8:0d:19:48:4c:67:9a:c7:dd:ad:
62:c0:30:1d:cd:61:70:70:25:85:d5:16:9e:51:55:
7d:a0:8e:aa:c0:10:58:4d:e8:7b:31:9d:46:e5:81:
a3:54:4b:90:70:30:fe:68:91:ba:73:ee:8d:e0:ff:
99:e5:8d:95:f9:0e:5a:d3:22:53:75:dd:91:ee:54:
cc:e4:c5:e5:70:e6:38:98:51:e4:24:46:f7:b4:9c:
61:34:22:19:81:15:90:70:e4:27:0b:9c:f4:14:e7:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:C5:8D:03:D2:71:00:5D:1E:1D:24:41:6B:A8:F6:40:77:2F:A3
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/z7fFjQPScQBdHh0kQWuo9kB3L6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0-89.249.201.255
Signature Algorithm: sha256WithRSAEncryption
a8:8e:c7:83:68:38:2c:41:ce:e7:78:a2:12:02:2c:59:12:56:
16:c8:ee:3f:52:7b:08:fd:9a:89:70:0b:9e:4f:23:8b:a1:82:
ea:d8:c1:12:19:8b:09:8b:6f:c7:85:7f:27:e3:1b:69:89:75:
3c:15:dc:93:ee:d0:d2:c3:14:78:e1:eb:ea:63:31:47:47:7d:
b7:7e:19:6a:02:af:f7:5c:f6:a9:b7:19:ff:9e:2d:16:05:4b:
75:ef:7f:60:21:71:f8:8e:6f:2b:1f:98:40:d2:23:69:1e:ba:
f7:60:37:a8:d6:e1:df:55:34:77:42:2e:e3:71:7f:44:6c:bb:
43:f0:14:dd:a5:97:15:c3:c5:c9:0f:86:4a:59:7b:70:2c:a1:
2b:67:20:bf:c8:3f:1f:d7:d8:c8:48:2b:71:4e:23:22:61:e9:
b8:3c:2c:08:79:68:af:9d:7a:dc:81:55:5c:9f:67:a6:53:1b:
23:9b:37:a5:5e:8b:55:c1:e0:fc:70:e5:05:11:b9:a6:f0:fe:
fd:5b:dd:63:18:82:ac:fe:48:f4:0a:be:d2:50:a6:35:ce:a0:
15:16:02:8e:2e:f4:2c:4e:b6:41:9b:85:3b:ed:6e:61:e7:2a:
f1:35:e9:13:69:a5:c8:f3:ed:04:ba:4b:25:6f:49:79:a4:66:
dd:52:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:15 2025 by rpki-client