Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa
File: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (raw, json)
Hash identifier: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=
Subject key identifier: E2:97:FA:26:16:76:66:B6:F3:0E:CD:CA:22:1C:46:8C:49:41:95:AC
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7748880AEF7CE6C0C5F03A31A680
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36224
IP address blocks: 89.39.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:77:48:88:0a:ef:7c:e6:c0:c5:f0:3a:31:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e297fa26167666b6f30ecdca221c468c494195ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:7c:af:26:30:b4:d6:2b:3d:96:b6:e2:b2:
be:55:55:32:5c:2c:20:44:e9:06:da:3b:23:b9:17:
3f:9c:ff:bb:5c:a9:49:14:c3:7c:9d:78:56:3f:4b:
6e:cb:89:ce:19:19:2b:9c:b4:03:9d:5b:ed:5c:33:
1c:74:24:28:2b:f1:6b:b8:41:74:cf:64:3b:20:18:
f8:2a:43:13:2e:6a:91:18:9e:10:df:e2:7d:5a:96:
46:b7:dc:52:8f:9f:60:94:cb:79:b5:63:84:d6:39:
ee:26:0d:b1:9e:66:28:41:d0:0a:f0:a8:2b:10:3e:
46:27:38:42:77:76:d6:fb:82:a8:43:38:7c:db:38:
3c:ff:b1:d2:0a:d8:80:3f:76:c1:e3:0f:32:32:f7:
df:36:af:04:84:d0:05:95:ba:84:e3:13:f8:19:0c:
c0:66:6d:43:bf:5f:75:1d:b0:94:64:da:06:dd:b5:
67:30:39:e0:a7:5e:58:54:58:cd:a7:af:86:82:86:
1f:a1:96:90:9d:b1:dc:16:99:4d:6d:1d:2d:7d:1d:
59:fe:ab:8a:b3:72:a2:24:ed:ce:dd:a9:0d:4f:52:
e2:9e:12:0b:50:47:13:bf:a5:6e:2a:0a:32:82:e8:
63:24:6a:12:0f:5c:15:3f:23:90:bc:b4:d8:58:c0:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:FA:26:16:76:66:B6:F3:0E:CD:CA:22:1C:46:8C:49:41:95:AC
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4e:22:0f:64:e9:b9:46:f1:42:50:f9:3f:35:48:46:37:2f:
f4:4b:0c:0e:4d:b1:c3:74:b0:18:3e:37:81:67:ce:12:86:68:
5a:b9:ce:b4:6d:90:d9:e3:57:0f:29:53:b2:f7:68:ce:8c:11:
8f:a9:c0:2a:23:f0:95:8a:06:b0:69:8a:cb:e2:35:16:3d:ae:
fc:40:5c:79:49:31:7a:0e:05:40:93:91:f7:0b:da:b4:44:5e:
6e:c5:dd:9c:04:49:e0:17:72:f1:b0:ca:53:9d:9c:6c:1f:01:
73:d0:cd:84:bc:b3:a9:3a:8e:5f:ee:bb:d8:12:b6:77:f9:9b:
85:75:97:fe:f2:4f:24:ed:d6:1a:ca:36:56:17:e1:97:c8:02:
6d:67:f7:2a:17:41:ef:53:4b:a5:ef:60:8b:ce:44:a5:8c:e1:
f3:37:4d:ba:71:12:7b:89:4b:66:d4:e9:fc:5e:b4:35:d6:80:
df:46:a8:ad:91:53:cb:2a:d3:8d:78:db:65:9e:fe:37:f6:1d:
cc:57:32:3d:f4:55:d2:de:25:53:32:e2:14:9a:09:f7:8c:6f:
76:38:01:56:e5:f4:f3:46:4a:ac:01:9b:58:bb:81:26:65:9e:
09:8c:ca:03:ed:78:bc:1d:dd:67:7a:9d:51:a2:71:32:c6:ed:
e5:57:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:51 2025 by rpki-client