Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa
File: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (raw, json)
Hash identifier: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=
Subject key identifier: 2B:D0:C1:08:9D:3E:38:01:37:A3:E3:85:94:61:42:9F:7F:23:3F:52
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019425FD9F374356AA61B3F3467996AF4412
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 89.251.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9f:37:43:56:aa:61:b3:f3:46:79:96:af:44:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bd0c1089d3e380137a3e3859461429f7f233f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:25:da:34:c9:e0:50:80:33:ef:26:cb:6f:
63:a1:18:df:0d:49:87:d5:c7:9c:ff:cd:0c:58:da:
84:83:eb:cc:aa:f4:89:e4:9a:c9:bc:89:66:6f:83:
6d:97:cf:41:a2:da:72:12:62:b9:1a:16:4c:5d:bb:
5b:66:0f:6b:03:43:61:6c:1c:ce:20:2d:dd:cb:3f:
da:51:fe:ee:1e:6e:da:7d:1f:e8:b0:d4:83:9b:ef:
62:b2:44:f3:c3:2a:83:68:4a:0c:3b:d9:80:bf:19:
78:c8:e8:f1:c2:cf:e1:cb:ea:25:c6:0d:52:0e:23:
27:f0:2f:2c:71:8d:5a:6f:38:bf:a2:4f:b1:9d:08:
07:ef:d3:06:c5:90:41:96:3b:22:28:06:c5:43:86:
a1:2f:53:13:96:e3:f0:c7:09:19:68:3d:2d:1d:53:
4b:81:47:a9:12:a6:e1:46:f4:4d:3a:c7:fa:7e:6c:
6c:63:f3:00:4a:e7:67:2c:15:ad:88:97:41:67:12:
73:a8:11:7d:95:f1:ec:1e:89:e7:d6:be:5a:5d:3f:
2b:2d:eb:f3:f1:8e:af:b5:5e:64:45:71:59:a6:ff:
a3:b5:63:4e:50:df:e3:05:7f:ab:7c:6b:70:2d:86:
e3:f6:4e:cf:1c:e2:3c:0e:df:09:7e:c4:2f:a9:de:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:C1:08:9D:3E:38:01:37:A3:E3:85:94:61:42:9F:7F:23:3F:52
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:05:a0:f2:75:2f:4b:21:82:8b:23:8f:03:1f:24:e7:9f:49:
a2:5b:1a:34:cd:08:35:68:39:03:96:3e:44:3e:c3:e2:4f:28:
d2:cb:b5:ca:6b:9e:a9:fc:75:04:ba:9a:9e:63:87:65:80:e1:
a8:9d:28:e1:42:bb:9d:f9:17:15:e5:48:38:68:17:3d:e9:03:
72:1c:59:c5:87:40:cc:e7:d6:ca:1c:cd:e8:8b:a6:37:ae:a4:
2c:8e:20:4e:6f:71:eb:2e:5c:8b:54:2d:9f:30:78:71:ff:19:
99:78:42:58:37:67:85:46:d9:c4:ee:d2:7f:1a:31:25:9b:25:
29:37:9c:2c:ad:8a:96:0e:2c:fc:ae:64:ff:43:fe:e3:ae:d9:
dd:cf:f7:c1:06:22:cd:e5:fe:a3:8a:4b:db:8e:c5:23:dc:05:
db:a0:e2:84:45:ed:e2:b1:0f:36:02:e9:8b:4e:fc:b4:c8:c9:
f4:d5:23:4e:27:39:ef:fa:02:1b:6f:ba:cc:1c:46:64:0a:63:
11:6e:56:d3:30:db:b4:d4:5c:45:15:5d:a3:05:75:2f:f8:1d:
16:36:73:b8:70:e4:43:75:38:27:82:82:6d:3b:0c:f2:e5:dc:
7e:d6:9a:2f:54:ef:81:cb:31:b2:7a:49:d4:f9:32:46:45:9d:
9e:b0:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:39 2025 by rpki-client