Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BuqjNgBweqNLnNC3y6l25ZNe9lE.roa
File: BuqjNgBweqNLnNC3y6l25ZNe9lE.roa (raw, json)
Hash identifier: 3IwpkqYoqPWFY8mIBH4Ql9MvV+Y6c7/vsfg9Jwd/Cp8=
Subject key identifier: 06:EA:A3:36:00:70:7A:A3:4B:9C:D0:B7:CB:A9:76:E5:93:5E:F6:51
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B560DC3822B6C830A853CF90717317
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BuqjNgBweqNLnNC3y6l25ZNe9lE.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 89.23.105.0/24 maxlen: 24
89.23.106.0/24 maxlen: 24
89.23.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:60:dc:38:22:b6:c8:30:a8:53:cf:90:71:73:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06eaa33600707aa34b9cd0b7cba976e5935ef651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:6b:18:02:58:62:0f:e1:96:35:fd:1e:0a:
f9:2a:33:72:9b:0b:6b:64:3c:13:23:49:22:82:79:
f5:1b:f2:76:53:5b:62:2f:cf:07:e4:51:a2:64:99:
2d:04:52:43:b1:08:f9:e4:53:3a:8b:31:08:4b:79:
4a:06:93:7c:eb:55:36:5d:72:56:ad:e1:04:ff:33:
da:54:d3:4f:14:61:4d:50:5f:4f:9a:e5:e2:a0:66:
57:c5:fe:5b:1a:1e:76:a4:b8:89:cd:71:f7:ed:f1:
2a:67:ff:b5:d2:89:e1:e1:68:de:a4:e5:34:0b:16:
fa:2b:78:23:03:3b:5a:ea:4c:c0:6c:57:d6:54:6b:
3d:d8:a4:69:1b:cc:72:9c:23:37:c1:a2:2f:bd:c0:
42:3a:f4:0e:87:a8:5a:8a:64:ac:39:02:7d:85:80:
80:ab:10:d6:ef:a8:70:8e:73:9a:e5:f7:5d:50:3a:
43:00:b9:5c:dc:a9:0e:5c:bc:46:0b:da:1c:87:40:
40:7d:0c:ca:7a:76:fa:3d:6f:ad:b8:64:95:05:3c:
70:a7:71:0d:1c:5e:b3:e2:b1:04:1c:ef:1f:c5:e4:
45:aa:63:14:d0:21:fa:15:12:61:4b:3e:40:03:cc:
f0:f9:19:60:4e:84:47:ed:be:10:7c:32:96:d2:28:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EA:A3:36:00:70:7A:A3:4B:9C:D0:B7:CB:A9:76:E5:93:5E:F6:51
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BuqjNgBweqNLnNC3y6l25ZNe9lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.105.0-89.23.106.255
89.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:3d:77:2e:e6:50:e0:27:79:b6:9e:18:c7:c9:68:8c:0f:1e:
06:7f:c6:60:62:90:3c:20:60:e5:9f:b3:3b:9e:b7:50:0f:cc:
c5:73:5c:c5:91:0c:22:c5:28:26:2f:87:20:ef:60:f0:30:af:
0f:6e:b5:3d:3b:27:f8:ab:d0:45:77:12:00:aa:ae:fb:4b:7c:
c3:96:17:33:f5:8b:2c:67:70:61:53:d9:13:89:28:4c:70:2c:
80:1b:3c:e0:05:cd:40:55:93:f1:40:71:3c:56:7d:7f:bd:f8:
92:ec:67:2c:d4:50:e0:14:12:0d:62:ea:48:fe:0f:69:52:ef:
04:f7:b0:b9:67:6e:37:b9:45:57:eb:d4:38:bc:dd:09:b0:87:
06:ba:c2:44:b7:88:ff:a2:de:ed:ed:54:f2:d1:80:02:99:c9:
19:c9:0b:c4:7b:91:d3:72:60:86:ef:3b:62:68:b9:ab:0a:aa:
d1:9c:79:ae:1b:c7:a4:7e:49:6d:72:49:99:f7:2d:61:5f:14:
d7:01:6b:05:fb:1f:e4:29:8e:c9:cb:e4:d3:81:85:5d:d9:2e:
3b:46:71:b7:a6:94:1d:d5:02:06:21:17:ca:01:44:6e:44:08:
66:e7:77:00:0f:59:20:2f:b9:d1:e5:9b:b8:5e:28:83:33:2f:
b1:6b:60:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:22 2025 by rpki-client