Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/t7xFNtek28TRqAwV5AsSOdRcmio.roa
File: t7xFNtek28TRqAwV5AsSOdRcmio.roa (raw, json)
Hash identifier: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=
Subject key identifier: B7:BC:45:36:D7:A4:DB:C4:D1:A8:0C:15:E4:0B:12:39:D4:5C:9A:2A
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0194221F6FC7DA5577D23073B469FCB4C64F
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/t7xFNtek28TRqAwV5AsSOdRcmio.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207582
IP address blocks: 89.107.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6f:c7:da:55:77:d2:30:73:b4:69:fc:b4:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7bc4536d7a4dbc4d1a80c15e40b1239d45c9a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:5f:68:a8:8c:20:a4:22:4d:a5:3a:3a:13:
ca:74:fb:1f:e0:47:b4:eb:45:c4:f1:9b:f8:9b:d2:
4e:5f:c8:2f:0f:55:00:fd:9b:5b:a6:d9:e4:57:0f:
f7:4d:5c:70:0b:e5:2c:39:e9:6b:91:08:87:d0:0f:
63:1c:2a:2e:c9:a6:17:c2:0b:04:40:69:70:5b:0b:
cc:db:12:d7:7d:15:9c:58:74:84:ef:0c:3d:31:66:
04:6d:ae:86:f4:6a:cb:c4:5a:c9:56:45:c9:11:df:
d9:8f:94:4f:ce:31:e5:94:b1:1f:04:c2:66:7d:9f:
a4:6c:1c:2f:c4:a5:3e:15:e3:8c:ef:c0:04:bd:84:
23:3a:20:15:f7:12:d5:79:aa:11:2f:5f:d1:68:0f:
a4:47:79:8d:f9:ef:66:74:4b:0f:08:29:d8:d5:50:
74:73:85:7f:2c:29:4e:a4:fa:18:f6:ba:3b:ef:55:
58:15:bc:2d:11:d3:c5:df:5c:54:3f:b9:b5:8e:bb:
d1:64:34:90:e2:04:15:5c:7f:f1:0e:e8:72:f5:5d:
6f:d4:77:69:ca:b3:19:8d:48:96:42:6f:46:ea:3d:
4e:90:1d:71:ba:b0:34:66:45:bf:a7:53:6b:9b:d9:
44:82:48:9f:1d:b7:76:5a:d7:ba:7a:a7:5b:b3:9f:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:45:36:D7:A4:DB:C4:D1:A8:0C:15:E4:0B:12:39:D4:5C:9A:2A
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/t7xFNtek28TRqAwV5AsSOdRcmio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.225.0/24
Signature Algorithm: sha256WithRSAEncryption
39:13:da:73:30:cf:32:8a:00:10:47:41:fe:82:b9:b7:f8:67:
8d:bf:98:1b:f9:76:1a:86:d1:2e:ef:39:d4:9a:f6:f0:1d:34:
79:6e:35:d0:f9:9c:f6:6e:41:3d:77:ee:0c:e2:ef:c2:0f:c0:
43:09:d1:cc:f1:ef:62:f4:ef:51:d5:43:d5:80:b0:7e:58:f5:
35:5e:51:7b:98:fb:cb:16:04:1f:6a:32:0a:3e:66:76:45:e9:
fc:17:2b:6c:b2:8a:d0:13:1a:86:3f:84:c7:b5:01:01:0a:46:
16:ae:fe:92:0e:02:91:cd:44:a6:b3:c5:6a:e0:58:93:cc:27:
21:3f:ef:a9:85:4b:96:25:46:8c:81:bb:c5:fe:34:9f:42:ab:
f7:65:4c:c5:0a:34:85:28:db:60:47:2f:e0:e8:a5:a5:30:6c:
4f:d5:5f:45:3c:85:49:80:d3:61:ed:d9:27:c6:bb:73:3f:30:
1c:26:c2:3c:b0:fb:a2:f3:75:a8:6b:eb:1d:fd:eb:ee:03:f6:
af:78:94:79:a7:5d:2e:56:69:4e:d4:51:8b:ae:b1:7f:21:cb:
fb:3c:f6:d0:46:94:62:ac:66:b6:40:ab:85:b1:5d:56:d6:17:
4a:90:2f:c1:bf:d1:c3:fe:e7:84:75:3e:42:6e:e2:0d:1d:14:
60:d4:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:04:58 2025 by rpki-client