Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sZBaGUQ9orcUGKM7uQsYbhD7WdE.roa
File: sZBaGUQ9orcUGKM7uQsYbhD7WdE.roa (raw, json)
Hash identifier: 7F3nGIXzBMETLRrQIWgqpgy4T4oNmAwxTDFMFsq/BRg=
Subject key identifier: B1:90:5A:19:44:3D:A2:B7:14:18:A3:3B:B9:0B:18:6E:10:FB:59:D1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195A4491E1944BEB3B0A82C1DA35E303BE2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sZBaGUQ9orcUGKM7uQsYbhD7WdE.roa
Signing time: Mon 17 Mar 2025 13:26:50 +0000
ROA not before: Mon 17 Mar 2025 13:26:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 89.213.6.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:49:1e:19:44:be:b3:b0:a8:2c:1d:a3:5e:30:3b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 17 13:26:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1905a19443da2b71418a33bb90b186e10fb59d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:4c:70:60:69:e9:ff:3d:43:54:0f:d9:9e:
4b:54:4d:d5:fb:30:66:60:28:1f:80:ed:56:1a:ef:
aa:8a:8d:aa:cb:23:f5:2a:91:fb:df:67:e7:b6:6b:
63:34:e2:95:16:54:93:de:f9:5e:54:76:79:c3:4a:
45:90:46:f1:b8:e7:9f:db:06:e2:1c:3a:cf:a7:11:
c0:5c:42:e0:f0:c0:8c:e7:44:7b:e6:54:9b:72:58:
90:22:48:ac:eb:34:ec:3c:c1:78:37:f2:c4:02:c2:
61:a3:66:4c:4d:07:a1:9b:7a:e0:23:2f:5f:95:fe:
fc:7b:2d:21:26:4a:41:7d:18:98:da:a0:b4:19:6b:
75:29:f0:0b:a8:17:85:b4:6f:31:da:5c:53:c7:25:
9e:6c:41:fb:9f:96:2b:16:6e:32:5e:a3:9b:50:99:
69:e4:e5:f8:d0:ed:78:58:38:b2:af:fc:49:0f:0a:
8d:5b:e9:dc:73:e7:b3:43:06:94:97:d5:44:46:4f:
8a:84:4b:47:fa:86:2c:08:22:05:61:b6:7b:ff:08:
62:de:1d:c0:dd:9a:81:73:09:2c:a8:db:71:78:c3:
89:f5:24:13:42:e9:79:44:ac:21:0a:bb:36:10:18:
98:df:ff:d5:12:a5:8e:6d:ba:41:e1:38:fc:ff:16:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:5A:19:44:3D:A2:B7:14:18:A3:3B:B9:0B:18:6E:10:FB:59:D1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sZBaGUQ9orcUGKM7uQsYbhD7WdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.6.0/24
213.218.215.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1b:63:25:9a:35:df:75:04:17:15:0d:cc:19:36:8b:83:19:
12:03:62:3b:51:20:de:ba:f1:2a:e2:4b:4d:d2:7a:e5:27:b1:
81:35:54:e8:1c:71:76:f1:18:dc:57:16:c0:06:56:f8:6b:bf:
13:53:e1:2b:0e:c0:88:ad:15:51:ef:7b:d8:6b:81:44:de:d4:
70:1d:d1:a2:c1:7b:b5:df:a7:27:63:2d:ee:a3:03:a7:f7:2c:
64:aa:3f:33:64:28:f2:1f:d4:9b:69:4b:97:f6:66:8d:ba:f2:
e5:3c:39:7b:df:13:0b:54:85:6f:c4:aa:40:a6:4c:78:71:4e:
f1:c1:9b:6c:b8:72:c2:ba:02:ef:9e:e4:80:95:3e:db:68:4a:
48:f1:ee:de:a4:ab:d2:b6:b9:aa:8a:83:27:27:55:8f:ec:aa:
65:71:22:44:7d:48:0b:9f:f7:bc:20:ae:e9:9e:3a:68:8a:ae:
b5:36:1a:5a:e3:35:d2:f8:ff:13:57:f1:62:40:9e:08:9f:dc:
9d:4b:d8:be:1a:51:b0:76:45:34:f6:3d:0d:6f:cf:8e:15:f4:
70:c5:78:7f:ad:cf:43:36:0c:f5:fd:19:44:f4:14:8f:a9:1d:
fb:b2:f6:7d:df:a0:d1:46:3e:23:87:15:95:ec:8b:86:67:ef:
c8:a9:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:20 2025 by rpki-client