Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/efMkZ2k6kT2uaa0nvd_UF5R2YTQ.roa
File: efMkZ2k6kT2uaa0nvd_UF5R2YTQ.roa (raw, json)
Hash identifier: UXdynRvZYhvdABjNMlrBYzJa51Bx0x1vi/fvhV/5OxY=
Subject key identifier: 79:F3:24:67:69:3A:91:3D:AE:69:AD:27:BD:DF:D4:17:94:76:61:34
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01958B04EA5C6470BAE25B262384DE8DF6E6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/efMkZ2k6kT2uaa0nvd_UF5R2YTQ.roa
Signing time: Wed 12 Mar 2025 15:41:50 +0000
ROA not before: Wed 12 Mar 2025 15:41:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 89.144.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:04:ea:5c:64:70:ba:e2:5b:26:23:84:de:8d:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 12 15:41:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79f32467693a913dae69ad27bddfd41794766134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:af:87:bd:91:e1:89:1e:d9:21:38:56:2e:
76:22:fb:57:e7:80:52:12:2e:3f:05:2a:15:20:86:
a0:10:71:b7:11:f8:39:99:0e:3a:47:7b:c9:2e:55:
29:e6:57:6b:9e:dd:39:cf:f3:db:92:7a:c7:4f:c1:
6d:63:40:b1:bc:22:68:f9:a4:8c:65:96:4d:09:63:
84:3d:de:1f:23:d3:f2:84:a5:77:c6:9a:31:64:33:
6f:9b:7c:f8:ce:56:3b:d0:06:ae:d1:d1:74:f3:7c:
96:be:19:24:cb:58:f7:04:70:1f:34:c2:cd:6f:ce:
0c:ac:2f:2b:4b:95:b0:c0:22:2a:cf:17:f9:1c:32:
c4:84:74:7b:b7:35:7d:a3:c0:a3:0d:bd:0a:7e:c4:
bc:df:77:3f:ff:09:9d:47:78:fe:e5:34:7e:3a:9c:
27:b2:1d:03:09:51:13:30:75:7b:af:76:02:3b:3e:
be:76:65:d9:93:16:74:a4:49:d4:d7:14:62:a5:5b:
1a:96:86:59:13:e4:f1:ac:e4:84:f9:7c:59:6a:17:
75:a1:cf:d7:8d:24:35:cc:6e:c5:28:80:27:9a:7c:
82:24:9f:cc:5c:0e:33:05:21:ee:a9:94:d5:f8:52:
ac:fa:43:72:3e:cd:52:d1:31:39:ef:d2:70:41:c9:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:24:67:69:3A:91:3D:AE:69:AD:27:BD:DF:D4:17:94:76:61:34
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/efMkZ2k6kT2uaa0nvd_UF5R2YTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6b:a4:c2:b1:bf:b9:2a:02:bd:52:dc:a6:87:f8:57:8b:3a:
33:e3:e6:9e:8e:62:dc:07:e2:0d:34:f0:9c:80:ee:f8:28:cf:
ce:fe:a8:a4:32:c3:ba:02:67:31:61:6a:87:a7:85:28:3b:1f:
e0:34:57:65:33:e7:63:df:0f:c2:83:bc:c0:83:1f:46:7d:ab:
b4:e1:b1:87:62:e3:af:da:33:b9:9f:d9:ce:d4:c4:9d:93:f7:
5a:af:ac:b8:d0:ca:d1:09:07:9c:a6:51:67:c2:94:42:cd:b3:
ed:e4:39:c2:8d:e4:be:30:d5:bb:b9:f7:66:40:ef:8f:35:15:
bd:b2:df:04:f8:aa:37:e8:ff:63:5c:d0:88:a0:56:d2:72:e4:
17:f5:10:ba:ee:d2:8c:8e:d2:ce:48:d3:4b:83:c6:10:b5:c1:
f2:8c:82:84:52:d4:21:72:ab:b6:6d:94:c0:8a:24:d0:bd:bf:
2f:39:ad:38:e5:29:82:2b:8f:17:6f:e5:3c:5e:a1:e0:7d:32:
37:8b:10:4c:62:d5:5d:b1:02:bb:02:2b:e8:ca:bb:b2:b4:9f:
40:38:55:6a:61:a9:c5:53:29:d1:16:3a:48:10:a8:70:23:24:
2c:ac:28:bf:da:82:f8:3c:78:dc:42:5c:5e:8b:51:af:38:27:
55:6b:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:53 2025 by rpki-client