Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/8-i26rFhtdHjNs5mzRN1WeQ7Kbc.roa
File: 8-i26rFhtdHjNs5mzRN1WeQ7Kbc.roa (raw, json)
Hash identifier: Bn2O0H8FJkVItzyOGTMs/UhXTmWWN2eRXPlmn+qSxIw=
Subject key identifier: F3:E8:B6:EA:B1:61:B5:D1:E3:36:CE:66:CD:13:75:59:E4:3B:29:B7
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 035572E1
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/8-i26rFhtdHjNs5mzRN1WeQ7Kbc.roa
Signing time: Tue 05 Apr 2022 15:51:56 +0000
ROA not before: Tue 05 Apr 2022 15:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208037
IP address blocks: 89.232.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55931617 (0x35572e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Apr 5 15:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3e8b6eab161b5d1e336ce66cd137559e43b29b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:d7:57:8b:da:4d:e9:01:ae:15:33:cd:e4:
6b:73:6c:20:f6:00:11:78:09:7e:2d:80:33:07:9f:
b6:24:ba:45:bc:3a:ab:1f:23:87:79:e7:8f:64:03:
c6:7a:ff:3e:b5:d2:49:bc:c2:51:d1:13:e5:0e:6b:
2c:61:83:13:69:8b:ad:f9:9a:9f:85:d7:de:80:ae:
1e:95:f2:d9:cd:52:6c:78:ae:b0:7d:46:85:ce:9d:
94:88:1f:4c:3c:8d:d2:e4:87:28:af:45:e7:02:72:
df:12:a4:2a:95:2a:f1:14:ac:d0:79:b3:2f:2a:3e:
2a:5a:98:37:3f:cc:64:18:e9:17:12:fc:96:1e:60:
f4:96:14:6f:fd:4c:a4:8c:1e:e9:a6:6f:66:b6:16:
7e:51:f2:80:78:fb:21:a6:bd:68:f0:a8:4b:81:82:
1a:27:86:72:ae:ed:1c:54:c2:d9:e6:b3:46:59:cc:
aa:d8:85:c8:13:16:86:44:ba:4a:7f:7a:76:43:43:
69:34:3c:db:b7:00:ba:c3:ee:ff:0b:59:58:b1:13:
92:f2:70:ea:5a:f1:68:03:ae:61:dd:6d:01:d3:a3:
54:3f:a2:30:95:10:68:8e:80:ee:d7:ac:7e:9c:bc:
f6:6c:77:50:37:d6:64:13:4e:7c:40:3c:58:2c:10:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:B6:EA:B1:61:B5:D1:E3:36:CE:66:CD:13:75:59:E4:3B:29:B7
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/8-i26rFhtdHjNs5mzRN1WeQ7Kbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.232.172.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f8:fc:ce:d8:95:96:45:8a:0a:97:e2:c9:bf:31:53:a7:f5:
ee:67:b9:b9:1f:2a:a9:08:f6:37:9a:ce:08:c5:42:99:eb:f0:
d8:43:ab:98:79:7e:c8:f2:d3:e9:14:40:26:a1:fb:3d:aa:6c:
94:e8:60:6d:e0:ba:4f:bc:d0:be:11:c8:98:bb:1e:4f:a1:29:
99:6e:c2:f1:19:05:55:8e:2e:f0:3a:7d:87:19:3b:ad:db:de:
2f:15:20:05:33:d1:ae:54:9f:b7:33:e5:20:9b:8c:fb:73:9d:
be:98:aa:6f:cc:2c:53:10:52:60:4d:b0:48:34:6e:72:36:62:
71:fa:02:48:4d:03:81:ae:81:c8:8c:83:e3:5c:45:34:27:52:
59:03:f4:9e:82:1c:6d:be:a9:38:fe:27:85:4a:f1:af:a2:1b:
c1:18:33:95:60:bd:46:7b:3f:af:9a:b7:65:6d:d4:2a:6f:d0:
d3:1b:d6:68:93:9f:95:a1:3e:6c:79:86:a7:8d:42:44:0f:3e:
8e:7a:4f:47:89:b7:2c:77:90:d3:3f:b1:5d:07:d6:16:ea:7f:
a3:53:18:a9:a7:ee:19:20:9d:76:27:28:fe:61:c9:0d:f6:a4:
4e:76:d5:f9:e8:0d:0f:d2:0e:2a:a7:2c:58:84:ec:10:3a:66:
fb:4c:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:48 2025 by rpki-client