Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/18Oe-4KhnSWeIAohuVOv-8N-ZM0.roa
File: 18Oe-4KhnSWeIAohuVOv-8N-ZM0.roa (raw, json)
Hash identifier: H+2p9ICX6HbPGaZKSv++WyX8urHJj4fFtPKDE1rQURA=
Subject key identifier: D7:C3:9E:FB:82:A1:9D:25:9E:20:0A:21:B9:53:AF:FB:C3:7E:64:CD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBCED5BA716FDECBFA106081C14BD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/18Oe-4KhnSWeIAohuVOv-8N-ZM0.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 89.251.20.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bc:ed:5b:a7:16:fd:ec:bf:a1:06:08:1c:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7c39efb82a19d259e200a21b953affbc37e64cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:0b:01:83:19:04:a9:00:54:9f:78:1d:bc:
d7:13:06:57:f3:7c:41:5a:32:7b:61:c1:f0:88:68:
77:f5:2a:6d:fd:2f:07:1f:84:cb:9b:7b:b0:75:64:
89:04:5b:ff:a6:d9:f5:42:8a:3f:62:ce:d8:78:c5:
58:ae:e0:a0:9d:0f:8f:34:53:06:80:02:e2:5b:5b:
cf:42:88:7e:69:40:9c:af:47:8b:2c:d6:85:30:cd:
65:ba:1d:76:7f:97:3e:4f:66:6e:30:ae:08:5a:3f:
74:6e:c8:d8:b2:fb:d1:b6:9b:b3:05:b9:29:d2:6e:
68:e1:3f:be:9c:d4:2a:11:56:0e:33:3f:f5:be:0c:
16:14:4f:ee:5f:2f:6d:53:df:c3:c7:af:82:a4:2f:
1c:41:e3:61:74:bc:ef:4f:6a:3b:fe:d2:ae:c2:07:
f2:ff:68:e9:83:9d:53:95:0c:10:fd:db:f1:e0:9b:
a4:b1:4f:5e:38:9b:ff:e7:4d:6e:8e:7e:ca:34:7c:
3a:58:60:f2:77:b5:51:e0:35:14:75:85:f4:7f:0b:
6a:86:c6:5d:b0:bc:d1:2f:2b:fa:d2:89:cb:ee:06:
10:74:54:3d:85:95:33:ec:e4:db:02:c3:2b:d6:d6:
de:cb:f6:77:91:53:b2:8f:f3:44:0a:99:d6:4b:55:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:9E:FB:82:A1:9D:25:9E:20:0A:21:B9:53:AF:FB:C3:7E:64:CD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/18Oe-4KhnSWeIAohuVOv-8N-ZM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.20.0/24
109.122.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9c:1d:5c:65:20:7d:06:22:d8:8e:6e:76:51:2d:c9:7b:4c:
17:c7:dc:f2:01:4a:6c:f5:c9:2e:f6:71:fd:ed:75:c6:90:e2:
3a:b4:c8:d4:b1:60:56:2b:09:34:84:bd:80:57:d7:7e:1f:57:
c1:25:48:a3:2c:bc:25:da:a8:65:f1:d3:a3:5c:3c:1f:29:74:
b0:f5:ce:f7:c6:1d:3a:40:99:06:61:c5:cb:11:21:a4:30:71:
00:d3:4f:bc:35:7c:a5:b2:54:ab:e1:ee:58:b9:63:cc:86:9f:
44:15:43:98:c9:f5:09:9f:79:bc:b6:30:e0:22:cb:e3:b0:1f:
df:5d:69:74:16:2c:69:d5:be:83:dc:96:ac:eb:67:21:d0:da:
2f:e7:85:84:40:e5:0e:b1:07:f1:73:27:4a:59:03:d0:af:64:
5c:dd:1f:73:a2:7d:e9:6c:1a:7b:b1:11:cc:6c:d8:00:47:43:
95:5e:8e:7a:9d:59:de:9e:28:c4:fc:5a:c0:99:3b:21:dc:25:
7b:87:96:ad:da:68:47:79:84:4d:ca:1f:b0:3e:a7:da:d9:23:
9a:e0:16:13:b5:a8:6e:1d:17:4c:81:79:e5:1e:b0:74:81:88:
c3:b1:49:57:c6:7c:16:ec:b1:a3:71:3f:f9:9c:67:2e:37:a6:
7d:04:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:30:49 2025 by rpki-client