Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa
File: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (raw, json)
Hash identifier: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=
Subject key identifier: 0A:DF:26:0C:02:59:F2:56:77:88:7C:2C:00:08:8F:80:9B:8B:6A:1A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC9324F97500A799FD75B2416E460
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397283
IP address blocks: 89.251.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c9:32:4f:97:50:0a:79:9f:d7:5b:24:16:e4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0adf260c0259f25677887c2c00088f809b8b6a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:83:80:dc:0b:c8:98:0a:37:5a:65:eb:73:
43:40:88:95:4d:d2:3d:bb:9f:2d:ee:f1:0d:c0:23:
2a:53:a5:5c:ff:fc:0b:ba:91:81:9a:80:9d:51:e5:
c6:83:33:86:ab:7d:69:ff:57:f2:d8:1a:a9:23:69:
a9:48:09:ac:2b:1e:04:44:5d:bf:25:cd:e4:b5:b2:
36:ea:20:5b:54:2e:e2:f7:67:2f:92:5f:1e:05:65:
f7:cb:53:63:ba:2f:9e:a8:6b:23:a1:62:27:18:92:
ed:5f:02:d2:69:45:4a:3e:13:c0:2b:9c:a5:1d:5f:
a5:d4:e5:55:a4:ea:13:bb:e5:21:0b:97:99:6a:84:
93:38:6a:0c:a3:29:49:8d:45:28:3f:cf:4f:06:80:
3e:fa:4a:3a:e7:ec:1f:2d:8f:d7:f7:fd:ab:d2:ac:
62:f6:2a:d9:d8:63:27:0d:d3:31:5c:c6:52:e6:79:
7b:a3:c9:4c:3c:50:c9:81:f9:8a:d9:a0:65:aa:f9:
87:e9:07:46:bb:49:8e:99:96:1e:71:56:7a:9b:70:
35:a2:a6:4e:f8:f6:16:6a:23:d8:f3:29:48:68:ce:
8d:28:6a:d8:11:18:34:f0:85:14:ee:93:88:b7:06:
9a:00:54:98:40:87:d0:78:48:8a:24:d0:cb:33:d3:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DF:26:0C:02:59:F2:56:77:88:7C:2C:00:08:8F:80:9B:8B:6A:1A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.25.0/24
Signature Algorithm: sha256WithRSAEncryption
59:96:b7:c5:f5:de:5c:ab:88:e3:41:2e:ef:26:f3:de:14:bd:
31:46:c9:71:4a:7a:52:35:be:cf:ff:07:79:c2:df:d9:58:81:
dc:d5:c0:30:9a:38:cd:a8:ad:2e:ed:a7:b4:82:8f:53:69:6e:
db:c0:e7:f3:da:ab:fa:8b:65:c8:06:85:cb:74:1b:18:51:bf:
a4:5c:4f:0f:3f:61:9c:43:2f:4d:89:eb:e9:f3:37:49:c8:0e:
63:49:e2:f3:6c:2e:5e:de:f3:c4:2d:87:d7:ac:3b:4f:87:20:
a9:4e:ac:c0:c5:16:01:44:cd:bd:7c:e2:52:f4:3c:a7:93:f3:
4b:df:bf:2e:43:1d:cd:b5:06:ab:bd:0b:e2:e4:7b:d9:06:eb:
a0:9e:fb:ab:be:dd:65:72:e0:84:3f:21:0d:4f:76:21:e9:2f:
ea:64:40:b3:47:52:77:10:48:b1:5f:19:69:7f:82:af:9f:f5:
8e:a1:c7:fd:87:a1:d5:8b:be:13:26:9c:db:41:5f:49:21:d7:
8e:e2:ba:7f:a5:e6:d2:a3:05:ae:8c:c5:85:42:d4:cf:c5:d5:
ed:7b:cb:f2:d2:e4:b4:01:7a:b6:d0:ec:4a:63:0a:9d:11:b9:
61:a7:60:2b:2e:dc:ff:ea:13:27:12:5c:24:81:7b:1e:18:8b:
d4:6f:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:10:00 2025 by rpki-client