Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/1-TStVdhhYOeTfMZrPefyVxz7DmQ.roa
File: 1-TStVdhhYOeTfMZrPefyVxz7DmQ.roa (raw, json)
Hash identifier: WaWNUPBHGy5r2y1iAR7pYf/XQHgcS5gS8NDCXNw3v54=
Subject key identifier: F9:34:AD:55:D8:61:60:E7:93:7C:C6:6B:3D:E7:F2:57:1C:FB:0E:64
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 02FC0947
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/1-TStVdhhYOeTfMZrPefyVxz7DmQ.roa
Signing time: Sat 01 Jan 2022 04:57:55 +0000
ROA not before: Sat 01 Jan 2022 04:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48931
IP address blocks: 89.42.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50071879 (0x2fc0947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 1 04:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f934ad55d86160e7937cc66b3de7f2571cfb0e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:df:c1:d9:de:5a:9d:d3:f9:a1:1e:4f:5d:
be:6c:6b:93:d9:39:a8:39:9e:a6:58:90:61:a6:45:
7e:f3:34:f2:95:e0:a5:61:00:68:c5:47:50:b0:e1:
b5:1d:fb:1c:14:93:ec:dc:62:5f:0a:6f:6b:2d:1a:
cf:17:86:7b:17:14:3a:2e:41:16:9b:8f:ef:ba:e6:
12:9a:af:4a:4b:e6:40:c9:4a:53:8e:01:c1:41:d1:
9c:b0:8c:fe:42:8c:2d:13:25:6d:c4:70:69:18:3d:
4e:90:8a:a9:a4:83:f4:c6:7a:5b:fa:9c:93:00:1f:
d0:5b:bc:38:e4:c2:6e:d0:10:6a:4c:7b:ef:06:ca:
3f:07:72:88:6e:a1:e8:3a:16:67:3a:44:26:6e:de:
be:33:c6:cb:33:f2:37:b0:85:ba:a6:a2:5f:56:4c:
db:a1:4d:7e:59:ca:9b:9c:88:ac:7b:bc:99:39:38:
e2:cf:78:ec:b4:10:cb:0e:55:14:1c:f0:90:4d:f3:
4a:a2:f3:77:48:54:9b:0a:fe:99:b9:da:a9:76:1f:
3b:a5:a3:74:4c:e2:56:16:8c:b3:6a:9a:df:d2:b8:
a2:cc:85:18:90:e3:bc:9a:d0:0b:35:2a:b5:8a:6f:
9b:53:20:fd:91:c9:5b:b1:1f:00:cd:ad:9e:4c:bf:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:AD:55:D8:61:60:E7:93:7C:C6:6B:3D:E7:F2:57:1C:FB:0E:64
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/1-TStVdhhYOeTfMZrPefyVxz7DmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.38.0/23
Signature Algorithm: sha256WithRSAEncryption
59:94:f3:13:97:ed:24:3e:79:16:83:6d:ff:96:21:fe:c2:23:
d2:fb:9a:5c:fe:78:22:d2:99:99:91:ba:81:6d:39:ae:d8:38:
06:2c:85:5a:b5:ca:20:2a:73:ab:ce:59:b6:94:60:60:d0:10:
96:48:14:ea:10:c9:c8:2b:d7:c6:4f:a7:71:6f:de:3c:84:cd:
e9:e2:75:c2:e1:44:55:ba:13:5c:14:2c:ef:a8:05:4d:01:dd:
02:fa:8f:03:ea:74:e7:5e:2f:ee:60:a9:af:77:16:91:ea:80:
fe:04:58:ef:18:ff:04:4c:62:90:a8:7a:c2:52:5e:92:90:c9:
bb:36:ab:26:37:74:13:c0:e8:94:68:bf:77:03:80:6e:50:70:
03:7e:e0:ba:6d:09:eb:5e:e4:28:1b:d8:20:a0:be:a4:57:13:
14:f1:73:80:f5:5c:3a:71:ce:dc:20:40:ec:b7:6b:2d:97:13:
ac:fc:1e:64:63:6f:17:76:6c:2e:d7:dc:4e:8e:a3:50:19:81:
49:81:a4:49:16:70:6d:af:d3:2e:22:37:55:5d:1f:ba:a6:b4:
e5:7e:77:c9:4f:ee:98:d5:6b:41:9e:0e:08:86:ec:fc:26:87:
89:11:14:92:94:02:22:5d:dc:2b:39:4f:f2:1d:2a:14:d6:2f:
11:39:4b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:34 2025 by rpki-client