Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/zNRiiIFeW8UKu7IQZIDYON_cQfs.roa
File: zNRiiIFeW8UKu7IQZIDYON_cQfs.roa (raw, json)
Hash identifier: wUsjBaj0xTbDQvrMgEJesVzLsnAldJ7dhBI+c2Dynfk=
Subject key identifier: CC:D4:62:88:81:5E:5B:C5:0A:BB:B2:10:64:80:D8:38:DF:DC:41:FB
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019423EE2D307A758589457B0AFD4CB206B4
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/zNRiiIFeW8UKu7IQZIDYON_cQfs.roa
Signing time: Wed 01 Jan 2025 22:13:19 +0000
ROA not before: Wed 01 Jan 2025 22:13:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 89.249.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:ee:2d:30:7a:75:85:89:45:7b:0a:fd:4c:b2:06:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 1 22:13:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccd46288815e5bc50abbb2106480d838dfdc41fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:af:77:68:1d:b1:28:74:30:be:f3:b8:22:
b7:d3:d9:23:ff:81:73:27:dd:4d:3e:ea:a7:9e:34:
a0:01:ff:be:77:ef:46:bd:e9:28:0b:f9:df:e5:65:
2d:04:0e:b4:3d:dc:ea:8e:b5:2a:6a:ae:17:57:4d:
34:27:d4:a5:50:9c:fc:59:ee:ae:83:d7:19:d7:a2:
7c:5b:1a:07:ef:1e:17:78:23:b9:61:6d:fd:25:a3:
e2:5f:5d:42:be:d0:9d:0a:be:0a:27:c7:70:5e:63:
81:20:89:b2:0d:27:98:81:3c:b7:ec:0a:4d:02:ec:
86:e2:0d:32:59:12:2e:36:72:ed:f9:d9:79:fe:78:
b6:b0:64:02:ed:3e:b5:44:41:c1:a5:e6:23:7c:ea:
01:99:b9:01:72:6a:83:f1:83:2e:50:71:58:41:bf:
96:ce:60:d5:39:77:a0:ab:cd:e5:60:42:9c:e9:c2:
2c:02:2b:83:da:32:1b:3a:4c:87:64:15:60:dd:a7:
df:7b:1d:3f:a9:06:ad:bf:3a:45:fd:19:b7:d1:99:
88:e7:3f:25:25:7b:31:e3:65:62:f4:bc:0b:9e:92:
45:2a:d1:9d:00:78:f8:2b:9e:51:2d:43:95:82:c7:
f5:3e:6e:67:88:51:77:7e:f0:25:10:08:aa:f6:50:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D4:62:88:81:5E:5B:C5:0A:BB:B2:10:64:80:D8:38:DF:DC:41:FB
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/zNRiiIFeW8UKu7IQZIDYON_cQfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:66:30:dc:3f:74:93:23:26:5c:2b:98:f8:2b:84:ff:68:a4:
68:9b:f7:01:c8:88:64:20:52:f7:57:e0:32:9d:a1:9b:cb:ce:
ae:85:9c:eb:e4:f0:d1:4a:3d:94:3d:ad:73:83:34:49:bf:ca:
c2:64:4d:60:ea:c8:b1:6d:da:63:97:85:f6:d9:7e:a8:94:e2:
80:94:4a:69:ba:73:24:62:2d:5b:a8:70:30:e6:01:57:22:b0:
a6:e2:5d:50:58:1b:33:06:da:36:8e:74:ef:68:d6:fa:c1:df:
ed:a4:e7:f5:d8:46:9c:51:49:1d:5a:23:d2:d8:e3:46:5d:42:
fb:fe:53:b3:74:4a:80:c7:e2:f0:ef:42:67:36:59:3b:44:1d:
92:40:6b:cf:40:71:f1:f9:09:17:1a:66:b5:2d:db:84:b5:d1:
54:69:ee:46:4c:62:9a:bd:c1:33:db:42:df:9d:30:df:1e:b2:
ad:fd:0c:02:7c:39:c8:ab:5f:f5:4f:d1:00:f1:4f:1a:11:53:
ed:6a:23:3a:44:78:a4:19:46:87:5b:89:14:7d:1a:2b:72:c8:
dd:0d:a8:df:e6:2a:3b:09:2a:03:cc:7d:8b:60:e9:b6:bb:51:
53:58:75:ee:33:ae:63:3f:20:33:94:63:c3:c1:cc:c4:89:fc:
ae:14:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:47 2025 by rpki-client