Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/C29j8BjW64hUTo90rvT2p7vncMk.roa
File: C29j8BjW64hUTo90rvT2p7vncMk.roa (raw, json)
Hash identifier: z1gCCbWIlJIwgYs0Ud8cLUPoe3m6/PGlyP6Xd1WDnws=
Subject key identifier: 0B:6F:63:F0:18:D6:EB:88:54:4E:8F:74:AE:F4:F6:A7:BB:E7:70:C9
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 01942369380179E28A6E97AD49D16ACBDB71
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/C29j8BjW64hUTo90rvT2p7vncMk.roa
Signing time: Wed 01 Jan 2025 19:48:05 +0000
ROA not before: Wed 01 Jan 2025 19:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212944
IP address blocks: 89.35.78.0/23 maxlen: 24
185.163.51.0/24 maxlen: 24
2a07:dfc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:38:01:79:e2:8a:6e:97:ad:49:d1:6a:cb:db:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Jan 1 19:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6f63f018d6eb88544e8f74aef4f6a7bbe770c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:d1:20:25:f9:e4:77:db:67:34:15:c2:e7:
86:4a:3f:5b:06:30:04:b5:b9:a3:04:e1:17:82:d5:
31:a4:13:d5:08:f2:ce:2e:94:6c:14:f5:e8:18:5d:
de:0a:35:1f:aa:a0:67:8e:0a:ed:57:cf:a6:b1:06:
a1:9f:df:85:32:87:fb:69:d1:fd:f8:49:16:2d:53:
05:03:80:b7:a0:4a:9b:9e:b0:ba:73:38:7a:f6:f4:
f8:aa:60:da:8d:e4:be:cc:f1:97:24:b6:f3:f4:0b:
6f:f2:f3:a8:21:5e:a8:61:f8:ae:ea:ea:6d:ca:07:
82:26:9c:8a:82:91:88:3d:b9:cb:1b:b7:14:2e:65:
3c:e8:0e:0f:f8:29:4c:83:36:42:c9:b9:70:04:a1:
d7:5b:1d:78:fa:96:46:25:51:50:f9:49:d4:9f:90:
bd:cf:c2:c1:81:72:85:61:6b:b9:1c:81:36:7f:76:
0a:5f:33:13:a0:4b:dd:7d:89:dc:95:33:6f:7b:f1:
be:0a:01:f8:6c:c2:4f:a1:88:52:fc:f5:9c:10:2c:
31:ad:ec:7e:33:ac:74:0e:51:de:a1:df:d8:46:c6:
f1:19:af:a8:b1:1f:53:e3:73:85:45:d3:68:42:25:
6b:af:81:4d:29:49:e7:0c:b8:84:9b:74:cc:95:4b:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:63:F0:18:D6:EB:88:54:4E:8F:74:AE:F4:F6:A7:BB:E7:70:C9
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/C29j8BjW64hUTo90rvT2p7vncMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.78.0/23
185.163.51.0/24
IPv6:
2a07:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
98:a5:2f:33:b9:e8:bd:22:7f:34:a5:2e:20:9b:65:ea:b0:f7:
0a:98:06:82:6f:6c:84:2b:bd:82:7d:8b:84:48:3d:e5:f9:4f:
d9:18:6d:07:8d:5f:fa:f3:36:f6:82:2b:87:3f:0c:76:b8:b4:
e6:d7:52:8b:55:dc:55:f7:81:83:b5:7d:94:45:6b:04:99:22:
12:41:3b:7f:03:cb:9d:1a:77:84:4a:98:4d:e2:49:91:43:d3:
b9:a4:c2:a4:a0:2e:c2:f9:c7:cd:93:22:51:3f:8d:6c:aa:d9:
77:2b:8b:6a:95:8a:15:a8:8c:d0:24:65:0e:de:d1:9e:fd:10:
ce:6a:fe:33:95:cf:c7:c1:6b:a7:79:4e:35:8a:ec:26:24:17:
d1:8f:c0:9d:41:0a:23:2c:55:ce:5a:f4:a9:9e:ca:5a:96:03:
dc:c7:45:23:ee:fb:d5:48:95:e7:f0:cc:59:4d:d5:c8:aa:1b:
be:13:da:d3:94:16:a8:4c:fb:67:82:e4:95:f1:ce:5b:98:76:
35:06:13:20:a7:fe:59:55:d7:50:3f:e4:be:4b:cc:7f:23:4e:
09:74:18:95:07:90:77:e0:04:1b:74:48:93:0b:5d:4e:96:42:
5d:41:47:9b:c2:37:8a:9d:95:54:19:f2:77:dd:4b:f1:b6:64:
6c:46:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:32 2025 by rpki-client