Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa
File: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (raw, json)
Hash identifier: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=
Subject key identifier: 17:67:A7:05:A0:F2:FD:0C:3D:78:E2:B9:63:25:DD:EC:ED:93:17:2A
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019422FB030E431B4FFBA1A09EDF6FEE2F6F
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39520
IP address blocks: 89.255.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:03:0e:43:1b:4f:fb:a1:a0:9e:df:6f:ee:2f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1767a705a0f2fd0c3d78e2b96325ddeced93172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:bd:be:d6:f4:9f:52:89:a9:bf:bd:3a:44:
fa:ff:ab:52:0f:8a:95:96:57:51:00:9e:b3:1a:2b:
9f:73:68:c7:96:10:fa:90:58:bb:5f:66:69:d0:9f:
01:a1:eb:b5:d7:a6:49:be:bf:73:2c:83:91:f6:dd:
bd:e3:32:fc:74:d5:20:78:72:8c:01:ff:1a:f2:80:
48:e1:c3:4a:90:e9:0d:8b:47:be:e2:ed:cf:7f:f2:
e7:13:a1:32:75:c0:fd:3f:12:69:99:17:01:f1:b6:
5f:4a:03:eb:82:38:24:4e:1c:3d:2b:ea:2f:f3:cd:
64:c3:6c:19:05:7d:aa:35:77:f4:cd:14:be:45:50:
83:1f:af:1e:4b:bb:4d:1a:32:8f:0c:c5:35:f6:2f:
56:4c:8e:10:02:5e:3a:5f:20:63:2e:94:45:8e:b5:
8d:b3:b3:19:20:b6:3e:b7:65:d9:d8:53:93:d8:fc:
42:f4:ad:f4:fb:86:79:aa:a8:83:9c:64:b8:33:1d:
ac:e8:d4:08:11:30:e9:d0:64:e9:dc:1f:92:c2:33:
cb:e3:cc:62:7f:5a:42:a5:33:c8:8c:3c:c4:2e:ba:
0b:7a:94:d8:81:c8:c6:d5:9b:df:5e:a6:b5:fc:55:
ad:67:5d:d1:57:5d:68:83:b5:30:2d:57:e2:13:e1:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:A7:05:A0:F2:FD:0C:3D:78:E2:B9:63:25:DD:EC:ED:93:17:2A
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.208.0/22
Signature Algorithm: sha256WithRSAEncryption
24:2b:59:7d:0b:bc:db:73:73:b0:f4:29:63:35:81:8a:6f:8b:
71:0a:df:d2:a4:5d:2b:7a:df:fe:78:65:ee:b2:df:5b:60:ea:
b3:cd:f9:64:be:45:11:5b:a7:29:58:c3:4e:4d:35:dd:5a:d4:
e2:cd:36:1c:74:44:97:34:c0:3f:f4:7e:8d:9a:53:a5:40:fa:
69:60:76:46:70:e7:83:63:f5:f6:87:c7:61:45:57:82:78:12:
c6:7f:75:0a:7f:9e:1b:2b:42:9b:a5:2f:20:d0:0b:18:28:ec:
e4:5e:bb:0b:e4:90:12:6f:7c:c8:79:ac:cc:0d:9c:3b:ed:41:
34:fc:c7:05:c4:3a:ee:d7:3d:c4:a0:19:94:ed:e3:27:6e:92:
07:b3:48:42:ca:ce:a0:0d:f7:3a:31:87:7e:9e:4f:ba:1c:6d:
c9:31:e6:8e:42:0b:fc:00:89:99:70:28:0d:d2:8c:4c:41:f2:
31:1a:2c:80:37:92:2e:a1:28:c4:ad:d0:df:56:d2:93:f3:2c:
c0:81:d5:c0:46:59:d0:ea:4f:aa:06:f9:2d:9a:5a:78:79:80:
a6:2b:ed:49:1a:ea:22:c6:ac:41:cf:82:89:4c:f6:50:07:cd:
4c:ec:ae:56:0b:af:cb:11:5d:2f:40:80:5d:1e:81:19:58:25:
32:6c:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:35 2025 by rpki-client