Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/0RMwiHYFEOeH6_LeBWADgiblM9M.roa
File: 0RMwiHYFEOeH6_LeBWADgiblM9M.roa (raw, json)
Hash identifier: 3oFxd4s8Iw1Izdg8onjEBGccdmYd9cRiB0xT86wnHKM=
Subject key identifier: D1:13:30:88:76:05:10:E7:87:EB:F2:DE:05:60:03:82:26:E5:33:D3
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 01943AC8643A165B9876885BD49F91C67BD4
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/0RMwiHYFEOeH6_LeBWADgiblM9M.roa
Signing time: Mon 06 Jan 2025 08:43:18 +0000
ROA not before: Mon 06 Jan 2025 08:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 89.19.219.0/24 maxlen: 24
89.19.220.0/22 maxlen: 24
89.19.220.0/24 maxlen: 24
89.19.221.0/24 maxlen: 24
89.19.222.0/24 maxlen: 24
89.19.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:c8:64:3a:16:5b:98:76:88:5b:d4:9f:91:c6:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Jan 6 08:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1133088760510e787ebf2de0560038226e533d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:87:57:37:66:c5:1c:6c:f3:9f:26:be:a8:
30:8b:4a:12:4e:b0:78:cb:cb:b6:de:ef:d9:e3:c0:
2a:ed:c6:5c:e7:0b:64:ad:71:02:45:ca:ff:ca:be:
7a:ad:16:14:40:00:f0:0e:60:35:ba:dc:5c:91:98:
b6:70:72:8f:20:29:5b:a0:81:a2:56:47:48:b9:fb:
71:b0:0f:07:d4:5c:ac:68:84:c6:b3:b3:44:fe:68:
ce:a0:b2:e1:f9:73:c7:3e:54:3c:40:27:b4:c3:8f:
11:5f:c5:8c:07:c1:56:e4:31:74:3e:bc:93:a2:c2:
94:67:2a:6a:63:f2:ed:c2:36:05:11:88:81:0e:4b:
80:b3:a5:3e:fd:7e:f7:86:39:c0:83:6c:f7:cf:51:
8a:02:88:34:10:d9:e2:cb:eb:f4:33:ea:4b:7b:f3:
bd:e7:96:e5:ca:0b:06:de:ab:46:33:ba:6d:22:01:
11:80:ca:88:1c:eb:aa:cb:db:47:0f:4a:29:58:b4:
1b:14:05:a5:5e:23:d5:ca:1c:7c:b4:23:fa:41:33:
e1:8b:64:df:da:b7:b0:2f:8a:f2:c9:4a:66:5e:af:
96:53:70:80:28:d5:5d:86:86:ac:0f:c7:20:6a:47:
23:35:b7:ae:fb:ec:b7:3b:57:be:02:b3:a9:85:2b:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:13:30:88:76:05:10:E7:87:EB:F2:DE:05:60:03:82:26:E5:33:D3
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/0RMwiHYFEOeH6_LeBWADgiblM9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.219.0-89.19.223.255
Signature Algorithm: sha256WithRSAEncryption
a4:ae:a6:7b:02:bf:f4:e2:88:dc:ff:90:da:0e:c2:78:58:f8:
ba:0e:c7:8c:46:9e:01:7a:28:61:28:22:c7:a4:0e:93:20:42:
10:bd:e7:59:1c:28:71:eb:92:59:a2:5e:26:4e:83:ce:d1:a5:
61:90:88:59:f2:47:f8:35:fd:97:ec:5e:2c:c8:f1:30:ad:a6:
00:6b:c3:b8:27:21:49:7a:26:4b:a0:54:3b:40:9a:7f:df:8a:
2a:e1:f8:9e:e6:72:f1:34:57:57:3f:cf:be:d6:9a:d7:df:21:
db:69:bc:aa:04:5d:c3:bf:44:7e:ff:f8:65:e5:b6:09:33:e8:
c9:94:56:64:e1:26:e6:1e:75:16:3b:ad:cf:43:70:65:89:c4:
5d:12:d0:eb:c0:c3:18:5a:d3:83:9e:65:19:70:a9:3b:e6:23:
67:68:f7:34:0a:2e:18:0a:bd:23:29:c0:fc:bc:c8:e1:c2:48:
86:c8:f4:a3:09:21:bc:03:e9:fa:45:b2:2e:07:96:fb:53:b6:
4c:57:d4:2d:86:67:28:67:d5:4a:f7:5f:0b:d2:36:d4:f1:9b:
f9:37:cf:53:1d:de:5a:4d:d6:7e:6a:51:b7:2e:fb:35:f0:68:
0b:1f:bd:a2:8a:c4:15:8b:71:95:c3:43:28:c7:b3:29:43:23:
2b:a2:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:40:09 2025 by rpki-client