Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa
File: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (raw, json)
Hash identifier: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=
Subject key identifier: 8F:4C:15:18:0F:D7:60:DA:5A:8F:48:1D:3D:59:D8:7A:D4:38:91:DA
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 0194266AF2C857B5BF15A5C2F936DB2ED209
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa
Signing time: Thu 02 Jan 2025 09:48:50 +0000
ROA not before: Thu 02 Jan 2025 09:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 89.107.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:f2:c8:57:b5:bf:15:a5:c2:f9:36:db:2e:d2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jan 2 09:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f4c15180fd760da5a8f481d3d59d87ad43891da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:ff:3d:2a:c1:30:19:f7:a6:5f:42:64:dc:
5f:61:38:b7:26:11:bd:77:14:d6:e7:56:f4:7d:ff:
74:35:20:89:0a:ac:4d:77:66:f4:76:0d:7b:f8:87:
8a:72:e4:b9:3e:34:dd:05:fd:45:51:cd:e1:aa:0f:
35:c5:d0:c8:05:ce:e0:ce:6c:e9:a9:11:38:22:9c:
98:46:3b:d0:70:3e:9b:b4:7f:01:ac:07:da:33:6a:
34:fd:a1:df:04:cb:b6:03:8c:ca:08:2a:77:1a:89:
55:8d:85:f9:a2:dd:f2:49:42:7d:60:d1:c1:3c:97:
22:34:a6:57:bb:c1:3d:61:81:50:31:36:10:56:e1:
97:e8:bf:d6:06:0a:d9:54:ab:85:a0:9a:ef:2b:35:
04:36:50:0f:9a:4d:31:14:b2:3f:69:e8:db:a3:05:
63:03:cc:b1:c3:e9:eb:4e:be:57:3b:9b:be:d7:e2:
4e:92:f8:7d:bc:91:59:b5:49:06:21:81:7c:34:45:
bc:0b:42:40:b0:37:67:59:07:49:2f:30:e9:81:bb:
c5:d0:08:7d:d1:38:52:ec:26:d8:43:28:0e:71:c3:
ac:0f:88:b4:9d:e2:ca:63:44:9a:47:18:cc:a1:f0:
13:91:de:70:b3:aa:5c:70:e4:3b:1c:07:03:66:6b:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:15:18:0F:D7:60:DA:5A:8F:48:1D:3D:59:D8:7A:D4:38:91:DA
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
91:eb:0c:af:5b:34:cb:04:d5:42:70:e9:cf:3d:93:15:72:7a:
db:86:a4:35:58:3a:21:ca:e5:b8:85:90:84:4f:45:43:23:c4:
90:f0:b3:3e:82:59:0b:93:a0:92:20:92:66:90:4d:c6:9c:bd:
53:3c:a7:34:08:8f:49:5c:d6:48:d4:96:2b:e0:8b:d3:f9:74:
03:25:5c:c8:c3:ca:05:ca:c8:4f:c6:66:c7:92:20:f4:da:fa:
80:5e:b6:8c:d6:f1:56:ac:5d:02:1d:ce:cb:bc:47:2c:db:33:
38:c0:e9:9b:a1:1d:b2:3d:4c:e1:87:96:fa:25:6e:bb:72:24:
ab:ea:6e:fa:37:44:80:e1:7d:92:45:09:7d:c8:5b:ee:49:d0:
d8:d3:04:ce:cc:85:d4:68:01:c7:2f:ad:c4:40:04:88:0d:10:
6a:97:a8:bb:ad:54:1e:33:35:f5:d5:07:a3:c1:f2:b2:1c:dc:
e4:ba:e2:e7:84:d9:b0:39:ba:9e:05:c6:8d:0f:d3:92:15:9f:
3c:ab:cf:67:6a:71:1a:65:5e:ca:6e:ce:6a:0e:07:d0:23:c8:
58:84:6b:a9:cd:09:80:02:84:8f:c8:5f:9a:3f:2c:25:80:7c:
59:6a:de:74:56:07:bd:17:8b:14:af:27:2d:31:4c:2a:8f:7a:
28:c8:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:14:04 2025 by rpki-client