Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/W59DcGyguLN9xrI-xcmxOY6QPgU.roa
File: W59DcGyguLN9xrI-xcmxOY6QPgU.roa (raw, json)
Hash identifier: TMK7yyBOJ4UuNiD8jav69tHdXZ5JFay/bM1zEa400pw=
Subject key identifier: 5B:9F:43:70:6C:A0:B8:B3:7D:C6:B2:3E:C5:C9:B1:39:8E:90:3E:05
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01958557012B79830B2FBCDB047899E47AA9
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/W59DcGyguLN9xrI-xcmxOY6QPgU.roa
Signing time: Tue 11 Mar 2025 13:13:46 +0000
ROA not before: Tue 11 Mar 2025 13:13:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 89.222.88.0/22 maxlen: 24
89.222.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:57:01:2b:79:83:0b:2f:bc:db:04:78:99:e4:7a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Mar 11 13:13:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b9f43706ca0b8b37dc6b23ec5c9b1398e903e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:ad:00:01:dd:bf:97:a8:08:61:49:e5:d6:
1b:33:c7:10:cf:f2:e1:38:76:05:25:32:5d:1e:82:
5c:e3:8b:27:4c:b7:b2:7f:3e:45:02:f9:58:fd:82:
7e:9c:ca:b5:5d:63:6a:91:db:98:04:ad:37:fe:b4:
b6:9b:c4:61:89:3f:b7:2d:8e:85:e5:2b:95:14:c6:
00:79:14:f1:3d:de:73:6a:91:3c:41:9d:06:ec:a7:
e8:ee:9c:e3:d3:f2:a1:93:ba:f2:6a:1c:e0:f6:81:
ce:6f:04:7f:73:97:cf:ca:77:ab:3a:04:8b:72:33:
79:15:dc:05:d4:e0:08:cd:d9:90:d1:36:c3:3f:b1:
9d:06:2c:87:80:f7:1a:0b:1a:82:05:1e:7b:83:f3:
87:05:a7:24:fc:f7:4f:0b:65:2a:e8:64:a8:ae:65:
53:25:49:10:c4:01:50:a0:1e:88:f5:18:cf:0d:ce:
e4:46:59:7f:a4:e3:06:83:c5:60:22:a6:84:7b:e3:
46:3e:e7:20:0c:4b:65:19:cc:0a:47:9e:cd:5d:1c:
b1:a5:ad:50:10:f7:f0:fa:a2:51:8f:94:27:45:93:
6a:ea:8d:92:d0:03:34:b9:53:3d:c0:5d:76:87:85:
a4:ed:0d:5a:8f:dc:46:d9:33:9a:1b:bb:de:b9:92:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:43:70:6C:A0:B8:B3:7D:C6:B2:3E:C5:C9:B1:39:8E:90:3E:05
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/W59DcGyguLN9xrI-xcmxOY6QPgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.88.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:95:0d:96:5c:01:be:e1:7f:e2:0a:8f:ab:5a:9e:25:ad:d3:
62:35:58:f9:13:b7:e3:b1:eb:3f:73:51:50:48:0a:c8:75:e9:
99:e8:f9:20:f7:f2:17:96:3f:c4:09:b9:b8:9c:1f:a6:5a:b1:
da:9d:84:d6:09:6d:7a:b0:6c:7c:e1:a4:36:29:a8:16:73:a0:
80:fd:47:b6:62:96:a6:54:61:0c:6c:5b:bb:2d:6b:43:f7:ea:
b4:d7:6f:a9:80:66:0f:28:cd:d7:54:6b:b6:24:5c:e6:36:e0:
91:2c:35:99:fb:7d:07:65:79:e2:9c:ef:e3:43:88:51:59:a9:
6f:05:ca:c5:86:cb:ab:71:70:d0:86:4b:e6:be:89:6a:f8:b2:
2f:19:d4:d9:ba:13:73:9f:44:ba:6f:26:f6:db:05:b6:66:63:
b6:18:01:33:4e:12:17:af:b3:1a:d8:6b:7c:38:81:d2:32:4c:
07:b8:16:bf:d4:26:e3:ca:64:ac:8d:6e:df:10:48:40:94:08:
10:d5:5b:e1:32:66:a6:b0:74:ea:cf:72:7b:ad:19:25:c1:1b:
b4:8c:90:81:b6:2d:3b:76:31:85:a7:2d:69:63:06:95:e9:f7:
4b:52:ea:68:b6:42:52:64:8b:76:fe:17:25:01:61:49:c7:7f:
01:aa:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:49 2025 by rpki-client