Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/9QHkwH3XoDFhii5_H5-wevfnn0w.roa
File: 9QHkwH3XoDFhii5_H5-wevfnn0w.roa (raw, json)
Hash identifier: vBY1ZnWKVkF95bYClA+BXEDvlx1Nx1rI/kqfnvMGLFw=
Subject key identifier: F5:01:E4:C0:7D:D7:A0:31:61:8A:2E:7F:1F:9F:B0:7A:F7:E7:9F:4C
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 01942747B291551462085ECC56216A6D9785
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/9QHkwH3XoDFhii5_H5-wevfnn0w.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 89.169.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b2:91:55:14:62:08:5e:cc:56:21:6a:6d:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f501e4c07dd7a031618a2e7f1f9fb07af7e79f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:d3:a2:a8:51:fa:1e:6d:ce:45:83:62:67:
55:f9:0a:56:ae:c6:43:f3:a7:e0:5b:0e:fa:06:06:
ee:6a:63:de:1d:15:be:b7:59:6a:b5:3b:ea:c0:22:
7a:43:bf:5b:c8:1b:f3:f0:a7:ee:4d:c0:66:2c:65:
db:1c:ae:42:9f:5d:82:b0:f0:a0:0b:a7:74:6c:1e:
ae:cf:a5:21:8c:b2:9d:b0:cc:6f:b4:92:d3:77:06:
69:34:3d:97:1f:fd:38:f1:f4:2f:50:5b:01:06:7f:
d6:88:07:b8:1e:cd:f6:d5:85:be:98:3c:65:ea:f9:
d1:68:63:5b:72:d3:c5:7d:9c:9f:23:60:80:78:b8:
c7:9d:98:bc:a5:cf:b7:69:68:d0:84:1c:8f:f5:7d:
53:38:ce:9e:56:1a:bb:19:87:41:c5:47:9b:2a:04:
50:94:ba:42:7a:42:7b:d5:a8:3f:fb:61:a6:59:dd:
88:cd:ce:b0:8e:62:d7:77:8d:7b:94:9d:07:b5:d1:
aa:0f:13:c4:a8:9e:25:b4:69:09:17:e7:46:03:45:
1f:bd:07:a4:8e:d5:a2:1e:69:d1:cd:c7:82:82:ab:
02:c1:af:3c:00:54:ad:a5:6e:b5:42:60:a8:f6:19:
58:c8:a1:f9:5b:c1:f1:f1:8f:10:d3:8d:a8:42:3d:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:E4:C0:7D:D7:A0:31:61:8A:2E:7F:1F:9F:B0:7A:F7:E7:9F:4C
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/9QHkwH3XoDFhii5_H5-wevfnn0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4b:25:d9:13:a8:13:b2:e9:74:9d:89:a6:4b:e9:9f:b2:27:
8a:3e:06:f6:a5:47:ce:e1:47:d1:71:19:9c:d7:65:e7:fc:16:
0a:2e:aa:7b:08:14:33:59:80:a1:5a:0f:c8:d8:66:19:8f:9f:
9e:78:f2:2c:03:46:3a:93:59:cf:27:24:1e:2a:09:f1:5d:e9:
c3:fe:0c:1e:01:ee:c4:20:a5:5d:0f:e3:f3:99:86:e3:bd:43:
a6:ae:5d:d2:f0:64:51:f3:f6:b8:47:23:1d:46:ee:21:44:85:
b3:01:7c:08:2c:94:91:93:fc:f6:e8:0f:f1:47:70:0a:02:bd:
a4:11:10:30:8d:94:ba:1c:cf:96:0c:af:77:12:b5:f8:71:6e:
13:18:48:2a:9e:d8:3c:1e:6b:06:4e:98:60:7c:d5:9f:2d:2a:
9c:14:b9:9e:a9:2e:4a:b8:8e:39:96:15:6e:8d:e9:2d:c5:e1:
ea:e9:04:2e:10:70:f6:5e:a1:f1:5d:78:57:5f:7b:12:ae:b5:
1b:39:1a:e3:7a:dc:76:77:1a:f8:8d:e9:63:c6:8e:f1:03:49:
8c:5f:d9:47:40:55:5e:13:07:db:74:07:44:54:71:81:51:fa:
e8:67:40:de:c5:c4:de:1a:80:cf:0f:2d:dc:90:f6:b7:26:bb:
e4:16:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:46:05 2025 by rpki-client