Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/tPBRBMoiKlpcXEIyGR9zaiu6_tw.roa
File: tPBRBMoiKlpcXEIyGR9zaiu6_tw.roa (raw, json)
Hash identifier: RAH5+/Gi51sOyolNLYboHOBHuJn+B4dMhBv3UUgsIf8=
Subject key identifier: B4:F0:51:04:CA:22:2A:5A:5C:5C:42:32:19:1F:73:6A:2B:BA:FE:DC
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 019427485F6A0C639CB57690845AA7B55CC9
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/tPBRBMoiKlpcXEIyGR9zaiu6_tw.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206031
IP address blocks: 89.207.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5f:6a:0c:63:9c:b5:76:90:84:5a:a7:b5:5c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f05104ca222a5a5c5c4232191f736a2bbafedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:74:04:aa:c6:0f:02:aa:38:98:00:64:79:
b2:d0:97:38:33:99:79:30:b4:b8:73:78:43:01:e4:
c8:11:61:6e:92:68:38:bd:ff:83:e1:81:58:ff:ce:
ac:94:68:6a:0b:b0:84:97:5f:0b:2e:20:4e:94:85:
07:8e:82:5f:ce:b0:31:b0:ef:50:87:21:19:32:10:
53:6f:71:50:b2:6d:e2:da:0b:1b:0f:b2:bf:2f:01:
3f:ac:36:e4:5e:98:d4:4a:f0:06:a1:43:47:e5:e7:
34:47:b7:30:ec:fa:b7:ba:8d:b3:6e:d1:c3:4f:8b:
4e:36:fe:86:7f:1b:85:80:79:d7:1a:f0:79:fd:eb:
fe:b5:f2:68:29:5c:35:20:bd:ea:63:aa:6b:86:b6:
0c:92:10:ed:5b:37:ee:14:8a:15:f2:5d:8d:df:71:
be:dd:9a:66:05:3c:1c:ee:c9:cc:83:53:50:55:66:
d8:f7:d8:68:e5:e0:8c:2e:f9:74:50:59:10:aa:67:
35:c3:28:b6:9d:1a:78:79:97:42:f7:16:4f:3d:bb:
fa:d3:89:c1:50:b5:03:48:f4:b8:0a:08:1d:ad:bb:
96:7d:b6:62:92:15:e4:2a:67:cd:ef:4c:82:8c:b2:
d1:76:15:f4:96:0a:a5:ab:f2:de:37:31:b1:40:58:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F0:51:04:CA:22:2A:5A:5C:5C:42:32:19:1F:73:6A:2B:BA:FE:DC
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/tPBRBMoiKlpcXEIyGR9zaiu6_tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.124.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:7c:2c:c3:01:83:5b:30:17:96:24:da:e6:fb:25:a9:2d:49:
85:75:f6:8a:82:a1:62:38:1b:04:42:9d:6f:6d:91:cb:e4:30:
16:75:51:24:d0:95:22:5b:c9:67:e9:e8:dc:08:f0:6b:16:36:
d9:93:b6:69:04:63:2e:63:a5:79:32:8d:c7:43:40:50:eb:58:
3d:3a:16:30:9b:6c:b4:a2:5a:ee:b8:dd:8a:f9:3c:39:c5:73:
e9:42:b9:39:65:5c:fe:78:e2:ad:79:43:3f:51:48:1f:00:de:
b6:ed:b1:b8:e0:36:3c:00:0a:94:29:72:86:5d:d0:da:18:ff:
45:05:a4:af:01:d8:eb:d8:d8:f7:d2:b0:bd:ec:41:89:88:71:
4c:1f:50:e5:11:26:61:ff:7f:53:42:1c:e8:70:6b:86:b5:e9:
93:2b:90:28:d0:37:b3:29:99:fb:c7:5a:ce:d3:5a:d5:7a:ee:
df:db:4b:15:b5:54:f3:02:e5:66:c4:ac:e1:4d:a0:aa:c4:09:
58:bc:b2:61:57:3a:21:66:d7:e8:1c:22:bd:7b:b0:d6:73:f6:
2a:88:7c:f4:04:b5:19:2d:f6:a9:6e:99:e1:70:07:09:31:1f:
54:fe:50:7c:dd:f7:d5:10:b7:84:fa:40:9b:f6:2a:9b:d7:3a:
fa:66:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:28 2025 by rpki-client