Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Itb9F8_-lcZ_KdRc5siOEO4H89E.roa
File: Itb9F8_-lcZ_KdRc5siOEO4H89E.roa (raw, json)
Hash identifier: XLIfgStgZc44GKy7d8yA6H23MBSze3hjDW/70wwI9b8=
Subject key identifier: 22:D6:FD:17:CF:FE:95:C6:7F:29:D4:5C:E6:C8:8E:10:EE:07:F3:D1
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D619C9F3D4B24A57FAB9B91A3ECB13
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Itb9F8_-lcZ_KdRc5siOEO4H89E.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58022
IP address blocks: 89.40.22.0/23 maxlen: 23
89.40.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:19:c9:f3:d4:b2:4a:57:fa:b9:b9:1a:3e:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d6fd17cffe95c67f29d45ce6c88e10ee07f3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:90:4c:50:83:bb:e8:cb:df:92:e5:9a:96:
12:13:85:64:71:1f:29:c4:06:b6:85:18:e1:fd:2c:
3d:1a:d9:f5:12:26:0c:3c:14:d4:70:b8:3b:d3:95:
3c:93:09:19:86:70:d9:21:5a:76:79:74:94:7a:21:
66:ce:58:8e:2f:b5:01:e1:a2:54:fa:92:ec:64:63:
5a:36:15:a7:43:c4:64:12:46:8c:6f:00:e1:3f:ef:
fd:b1:c9:b5:ec:34:bd:66:58:ee:8f:fd:ea:98:88:
42:06:78:11:b9:f6:70:24:4a:ee:ce:6d:3e:6e:d6:
d5:81:94:47:91:d5:f8:fa:68:c0:a0:0f:8d:f1:02:
76:16:d1:20:09:44:d2:bd:10:2a:7b:6f:be:88:a8:
12:f4:e2:6a:e1:8f:18:4a:96:a6:ab:21:5b:c7:29:
5a:81:e9:e2:fa:7a:66:b1:1d:8f:2c:b0:1a:3c:a6:
15:b2:c7:7c:1c:83:e0:f3:a1:b7:1c:62:e9:8f:38:
ec:32:f0:ed:85:d8:fb:a1:5f:48:16:6f:12:eb:b6:
ec:81:22:5e:4f:a1:a8:c8:26:77:63:1c:4b:db:e7:
58:c9:82:2e:f8:90:f6:a3:1b:e0:2f:2a:b3:ff:1a:
13:c3:3e:2f:9f:b5:74:8a:31:f4:ef:c3:b0:6c:ab:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D6:FD:17:CF:FE:95:C6:7F:29:D4:5C:E6:C8:8E:10:EE:07:F3:D1
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Itb9F8_-lcZ_KdRc5siOEO4H89E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.22.0/23
89.40.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b2:0f:12:0b:5c:24:32:2b:c6:28:d7:e2:38:fd:3f:82:5f:
00:4c:9b:c5:a6:d6:33:ed:2e:df:27:0d:30:70:4f:c3:ff:f4:
cf:27:59:b5:a6:8d:5c:9f:82:b8:d6:ca:b5:bd:7a:30:d5:dd:
3d:59:e1:2d:a0:a4:be:27:e1:09:c5:f3:d1:f5:4b:aa:9b:45:
73:ec:08:4a:c0:e4:8c:b3:62:cf:94:1e:af:dd:0d:6a:fd:43:
8b:80:41:ef:24:93:c2:0d:5d:ea:44:fa:f9:0f:f3:5f:bf:ff:
df:81:c1:5b:5d:c0:bc:c2:37:88:63:45:09:f4:07:64:60:21:
bf:3c:93:f6:a8:0d:e2:89:c8:94:6e:de:74:d8:d5:ce:d2:52:
81:6a:9d:e4:dd:21:f1:8b:63:9d:05:22:10:21:08:53:41:7d:
10:10:27:13:51:ca:2f:b0:b5:bb:82:ed:a9:91:6d:1b:81:95:
93:c1:04:09:c0:7a:3b:e1:54:e0:39:91:05:ad:d2:79:c2:04:
47:8d:ea:8a:6a:44:4b:24:9f:07:87:34:5a:76:38:1c:5b:ef:
df:b9:72:17:43:bf:70:a2:47:a2:2a:c2:65:88:3f:26:ea:4c:
14:7a:c5:89:1f:5b:fb:c2:57:ff:65:b3:c3:75:11:f1:1f:89:
ff:b9:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:26 2025 by rpki-client