Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/4lSW2DqUUyfLAwCJxmdcakNOOAc.roa
File: 4lSW2DqUUyfLAwCJxmdcakNOOAc.roa (raw, json)
Hash identifier: 0bkR+y4/sbmt2mM+LAt7tzsFlo9ay8a2libMzm6BQSQ=
Subject key identifier: E2:54:96:D8:3A:94:53:27:CB:03:00:89:C6:67:5C:6A:43:4E:38:07
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 0194221FA87C9E32D467C5D899855BEB6CB9
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/4lSW2DqUUyfLAwCJxmdcakNOOAc.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44739
IP address blocks: 89.47.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a8:7c:9e:32:d4:67:c5:d8:99:85:5b:eb:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25496d83a945327cb030089c6675c6a434e3807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:cc:25:8f:1a:78:51:da:f5:3f:96:07:66:
5e:9c:fb:74:94:1c:5b:40:7c:3c:05:07:79:bb:34:
72:f2:2a:e8:a0:c3:81:17:11:97:08:83:aa:a2:a8:
8f:f0:a9:eb:8e:6b:d9:ec:50:a9:4c:b8:f8:95:79:
93:20:73:b7:37:d9:f8:47:7c:87:d2:7c:8a:19:ae:
ff:1c:82:3f:f3:83:90:d7:1c:40:3e:b5:4b:92:43:
b6:17:ea:06:ff:b4:67:63:86:96:96:e0:77:f2:29:
e9:72:86:a1:bf:e0:44:d2:2f:7f:63:b6:e3:fa:fd:
c8:af:37:41:f9:99:ed:19:e3:01:16:b0:23:fd:d6:
21:89:b8:7b:40:4e:b2:0a:0c:b5:f0:2c:80:f0:48:
2d:4c:42:cf:f2:ec:eb:74:82:b9:63:b8:29:2a:b1:
a2:b1:fa:98:9d:3e:7c:7a:2c:a4:92:58:dc:c5:f3:
e2:c1:74:25:dd:31:01:39:49:ed:2b:09:36:f9:4e:
f2:06:7c:44:33:27:64:0b:81:f8:aa:5f:49:b1:55:
7e:ff:26:f4:7e:e1:4a:6e:2e:90:10:28:58:9d:71:
7a:9d:6d:2e:8e:d4:06:37:50:57:6d:b9:7f:1a:1f:
68:13:bf:ee:84:b5:ed:68:03:ad:b5:e4:6c:be:5b:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:96:D8:3A:94:53:27:CB:03:00:89:C6:67:5C:6A:43:4E:38:07
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/4lSW2DqUUyfLAwCJxmdcakNOOAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:8b:42:a2:fe:75:56:1d:48:d7:33:be:7d:7d:3b:e8:7d:82:
84:f7:a8:1f:5e:53:35:e0:15:18:1d:38:02:fc:14:bc:ea:5c:
be:32:75:b7:a6:7f:76:cf:7e:56:65:b0:a2:99:2f:17:6e:7a:
13:7f:53:25:48:86:21:69:07:a8:46:be:ca:ed:94:ec:68:26:
10:00:4d:70:05:e1:63:49:84:a0:ad:df:ba:c0:2d:1b:ba:f2:
6b:a7:83:78:59:3c:b9:0a:74:c4:d0:e8:d5:b3:e0:1f:30:9d:
c0:20:21:ef:0a:20:31:dc:fa:12:7b:5a:26:0e:92:0d:1b:76:
98:2f:7c:a4:a2:0e:a2:7d:dd:da:c4:a5:c4:3d:5d:37:33:e9:
1a:97:3f:55:6e:5d:65:38:6b:55:b8:91:22:d2:c5:e0:24:c3:
44:df:91:d2:77:0a:c2:87:13:3e:6f:03:89:4a:e5:af:7d:3a:
f7:9c:9c:fa:99:a2:32:dc:95:90:b3:6a:c8:67:21:00:87:33:
98:6d:af:85:f2:88:be:cf:34:e3:df:33:23:a6:ad:1b:79:b1:
42:36:ac:71:55:62:c5:c8:29:14:cf:98:30:61:03:4e:36:20:
66:58:28:99:43:6e:2a:71:d3:64:4f:be:8e:dd:b7:2d:b9:44:
6f:81:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:16:57 2025 by rpki-client