Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6bDtTigEJHvfITo5EDhb-HZYmus.roa
File: 6bDtTigEJHvfITo5EDhb-HZYmus.roa (raw, json)
Hash identifier: pn8MSlEBA6t8aqrinf0kHwKBgbSA1XvILb1MNY3rWQI=
Subject key identifier: E9:B0:ED:4E:28:04:24:7B:DF:21:3A:39:10:38:5B:F8:76:58:9A:EB
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019427B5C4F8E78A5CF5B780F8608A73849C
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6bDtTigEJHvfITo5EDhb-HZYmus.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208229
IP address blocks: 89.29.250.0/23 maxlen: 23
185.250.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c4:f8:e7:8a:5c:f5:b7:80:f8:60:8a:73:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9b0ed4e2804247bdf213a3910385bf876589aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:35:b4:76:0f:6b:7c:f9:09:97:d5:5a:23:
13:06:9a:54:59:b0:9c:11:50:57:10:b7:4d:88:d9:
6d:21:b1:71:43:d9:a1:8f:ba:30:e1:e2:04:89:97:
4d:3c:c3:a3:9d:8b:c5:97:f5:a7:3e:07:0b:09:ca:
5d:dd:83:8e:6f:b5:58:70:43:21:b9:22:b1:72:36:
ed:c4:fa:c3:52:b6:e9:08:68:81:6f:68:81:ec:4c:
d5:64:30:3d:34:44:30:ac:4f:d1:db:39:35:79:a9:
5f:d7:00:5c:d7:55:e5:1f:28:5c:d1:0d:6f:cd:aa:
02:74:cf:d2:ec:71:1a:44:04:d6:b2:ed:c2:c1:8a:
ad:29:ec:b9:0d:0c:c1:0a:5d:fa:01:f9:85:0f:59:
f6:68:84:8f:d2:4d:46:2a:65:c3:c9:0f:dc:16:1d:
18:ea:d2:d7:f7:d1:dd:f9:ea:f5:c3:ba:76:05:fe:
54:df:c9:9b:1c:e2:de:3a:26:85:c8:14:20:be:3f:
dd:b6:39:0e:36:5d:13:ff:d9:95:46:a5:0a:95:e5:
5f:c2:5d:3a:45:19:ba:38:ed:3d:8f:c3:66:b5:2f:
ea:3d:39:7c:a5:d6:cf:e7:b2:6f:af:db:3a:57:5d:
e7:c1:ed:23:d1:02:68:16:d3:f0:23:fa:8c:11:53:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:ED:4E:28:04:24:7B:DF:21:3A:39:10:38:5B:F8:76:58:9A:EB
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6bDtTigEJHvfITo5EDhb-HZYmus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.250.0/23
185.250.196.0/23
Signature Algorithm: sha256WithRSAEncryption
39:05:89:df:18:15:16:ec:3a:69:81:f9:2a:2f:8a:c6:4f:8b:
9b:34:59:30:00:d4:1d:db:80:47:b6:ae:8d:f3:1c:6b:8f:cc:
10:09:5f:44:35:44:59:d3:b6:51:a6:ab:73:39:83:04:bc:d8:
d8:80:64:1e:33:4d:5a:9c:34:e0:a7:b0:ca:11:c7:b4:e9:aa:
a2:3c:8b:3f:6c:bb:b8:42:98:70:f5:56:2f:82:7f:1f:a7:af:
1c:99:d5:cf:26:68:60:93:79:12:43:7a:9d:d7:a2:18:63:67:
6b:56:e5:a2:6f:75:44:e9:94:0b:9e:11:2e:c4:dc:9e:88:f6:
72:4f:50:bf:fd:72:a6:36:7a:da:f4:b6:08:ca:0c:ef:5a:db:
14:74:27:0b:5a:3f:0a:85:aa:3a:9e:1e:8f:fc:bb:70:bf:27:
da:7f:fa:55:dd:e5:90:9a:ae:6a:80:c5:0d:01:65:e9:04:10:
d4:53:62:08:d0:cc:b4:db:e6:90:2e:70:32:2e:4b:26:c9:7f:
b7:d5:02:87:da:09:4b:a8:35:84:bc:27:7f:6e:cc:46:a1:26:
be:6e:1c:59:1d:d0:4e:cb:81:25:94:e1:a5:e8:ab:e0:2e:23:
61:ce:59:a6:60:9c:31:ca:b9:74:c9:a9:da:b0:02:17:82:f8:
95:60:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:10 2025 by rpki-client