Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/foa891AnmG5IItmg1Wf-_lEJLDs.roa
File: foa891AnmG5IItmg1Wf-_lEJLDs.roa (raw, json)
Hash identifier: rxdmVGXyq1cHavmoPP06AY0vL55EfYeqB1P3hGrfV4Y=
Subject key identifier: 7E:86:BC:F7:50:27:98:6E:48:22:D9:A0:D5:67:FE:FE:51:09:2C:3B
Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial: 019425220BFD5A3C145FB8ECBB0CF19BBD79
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/foa891AnmG5IItmg1Wf-_lEJLDs.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44456
IP address blocks: 89.162.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0b:fd:5a:3c:14:5f:b8:ec:bb:0c:f1:9b:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e86bcf75027986e4822d9a0d567fefe51092c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:2f:3f:9e:48:28:22:07:8e:70:69:a0:82:
4f:84:20:b9:22:b3:5f:1a:47:8c:1c:ec:cb:05:af:
ec:53:dc:93:1c:72:fc:3e:85:74:9c:1f:30:51:e3:
6b:a3:81:07:e0:77:4a:aa:78:f4:be:0b:05:a1:f5:
83:73:89:a7:2f:ae:f5:91:bd:11:b1:a8:7c:95:27:
28:eb:31:6e:21:eb:8f:58:f2:9a:2e:b1:51:dc:e5:
ef:22:ba:ec:40:27:bd:80:59:28:9e:f3:15:48:c1:
29:ab:c0:9e:66:23:d3:60:e7:d8:a4:93:ab:e5:e0:
e8:e9:95:2a:9d:0d:48:38:3a:3c:45:82:15:0e:2c:
64:8e:1b:a2:91:d7:c8:5f:fc:0d:b5:1a:87:3b:47:
09:37:a6:07:d3:a3:00:c9:5c:8f:8e:a6:0c:fa:b8:
8d:36:42:67:f8:18:15:17:0f:ac:d1:6c:09:f0:fd:
d7:06:aa:39:f0:04:46:70:7b:73:02:b1:2f:fb:0c:
f4:00:b5:a8:e3:de:4c:9f:21:84:b6:e4:71:20:3d:
88:77:0f:68:50:91:12:17:6a:28:d0:65:f1:4d:31:
43:82:68:f9:25:8f:f0:06:7d:21:18:c8:8a:eb:09:
e8:bb:9f:84:df:e6:06:69:e1:a2:e4:5a:dd:45:81:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:86:BC:F7:50:27:98:6E:48:22:D9:A0:D5:67:FE:FE:51:09:2C:3B
X509v3 Authority Key Identifier:
keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/foa891AnmG5IItmg1Wf-_lEJLDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.162.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4d:82:65:6f:9d:38:2d:46:85:f8:45:68:2c:c7:65:3e:d9:
66:ab:00:61:72:20:5d:ab:b7:57:45:79:df:3f:29:2e:f3:26:
38:a4:ac:ad:41:5a:fe:89:62:cd:bf:5d:c3:31:df:fd:49:49:
28:8f:87:87:73:b8:3e:89:89:25:ce:eb:c5:50:37:d5:99:f7:
dd:13:86:ef:d6:58:2d:16:85:aa:72:7b:c8:ca:1b:d4:e9:6f:
85:62:e1:1e:f1:08:93:ea:4b:51:84:48:dd:e6:7a:47:38:2e:
67:64:61:9d:8e:67:6a:24:ca:bd:bb:5e:f9:0c:6a:59:17:ec:
7c:84:9f:fc:85:1c:77:75:ca:47:c9:ce:86:8c:2a:59:18:0d:
17:57:04:3d:e6:f7:e6:62:f0:00:51:06:88:b3:7c:2d:70:7c:
49:c9:63:16:42:27:c5:04:d2:5f:38:96:2c:e8:25:95:af:b5:
40:f4:f5:0b:35:d3:51:89:bd:88:b9:d0:19:ef:07:ea:42:78:
00:bc:f3:46:6c:b4:4f:7a:43:bf:c6:ff:a1:ea:05:3a:99:34:
4e:f3:2d:8c:5d:cd:37:8c:d8:a3:9c:9b:72:23:80:e0:fe:c9:
b6:d8:50:01:76:a5:93:cf:c0:13:54:0a:74:ea:4d:0b:8a:7d:
6f:de:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:05 2025 by rpki-client