Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa
File: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (raw, json)
Hash identifier: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=
Subject key identifier: 0B:61:F5:05:29:98:30:8A:D9:82:05:41:DD:5F:8C:67:C0:91:E5:26
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7304997C86F92B4544AB1BBC11A2
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 89.39.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:73:04:99:7c:86:f9:2b:45:44:ab:1b:bc:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b61f5052998308ad9820541dd5f8c67c091e526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:8f:89:ff:55:95:e9:eb:85:70:6a:1f:f9:
b7:1f:13:72:32:19:cf:93:0d:b1:50:41:4c:96:13:
bc:54:40:98:89:29:e7:d9:aa:86:34:01:eb:fe:a5:
aa:be:f6:13:8c:09:fc:2f:f1:c5:06:21:5d:b2:ee:
04:93:37:ad:cf:e4:a6:30:32:8d:f0:f8:0b:c1:4e:
0f:af:9b:aa:0b:98:e3:23:93:4c:58:cf:af:91:b8:
67:6f:c6:b5:4c:91:79:d7:13:87:91:ea:01:87:c0:
f2:3d:27:d5:9c:92:48:bb:ca:16:d9:8c:e9:41:5a:
39:54:cc:9f:6c:f7:0d:91:d3:22:b9:4c:c6:b9:9f:
8b:88:4d:1a:23:0c:24:5a:c9:dc:e7:b0:a7:8a:6b:
c4:a7:f4:f4:c8:ac:96:f1:78:6b:19:24:af:97:88:
73:e6:6d:7c:8e:3f:3d:e3:67:dc:a7:42:62:0f:de:
bd:2c:03:3f:70:5d:a8:38:ef:fc:d3:41:f6:50:8e:
b7:45:11:1f:2e:00:8d:9a:e0:0a:6a:94:46:28:ee:
c9:68:2d:8f:4a:17:8d:ac:cc:73:1c:c5:d6:59:8a:
8d:37:b5:a3:25:70:43:0e:ec:38:a6:75:2d:be:74:
84:dc:ed:e5:ab:2c:c1:8a:f8:0e:6e:73:8b:bf:51:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:61:F5:05:29:98:30:8A:D9:82:05:41:DD:5F:8C:67:C0:91:E5:26
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:68:68:c3:79:80:c6:ee:a7:65:c8:d5:75:91:29:71:59:c1:
97:69:69:89:0f:e2:45:7a:b6:42:b1:30:a7:f3:b8:db:98:58:
8d:b0:17:ae:11:9c:4d:e5:32:fd:e6:98:9d:19:91:ce:39:9a:
50:e1:0a:33:3a:34:2d:a1:2a:84:87:37:47:02:73:21:22:43:
db:26:1d:09:a7:07:04:e7:e6:83:ee:e9:5b:8c:a3:b6:a4:a2:
d6:42:a7:aa:19:b4:a3:ee:13:c7:33:eb:86:01:95:dc:72:82:
90:29:8c:d0:7e:9f:f8:3a:67:8d:6a:af:56:45:7b:45:a2:d3:
a6:1c:7f:95:1a:be:ca:fc:c1:0f:64:9f:c3:13:d5:d5:c4:87:
8a:cf:51:85:42:59:b6:85:bc:77:0c:b6:77:c5:68:03:38:60:
83:20:17:d5:ac:77:2a:20:77:a3:88:3b:4c:64:95:bd:0d:7a:
c6:9c:d2:4f:32:d6:90:94:e9:63:11:97:5f:48:6d:82:27:ef:
ac:62:ff:d2:d8:8c:4b:1c:50:88:c6:6e:e0:f2:1d:9a:11:a5:
43:d9:54:60:27:c5:33:ef:b8:dc:32:fa:cc:9d:a4:dd:ae:64:
64:aa:b4:51:a0:b3:2f:27:70:f5:b6:88:08:98:14:b4:71:37:
b7:ed:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:19:03 2025 by rpki-client