Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Rxrp1heOaEaWEFtYKe0f2dBga1o.roa
File: Rxrp1heOaEaWEFtYKe0f2dBga1o.roa (raw, json)
Hash identifier: 7XFvUguakglknudZUQRNwg58TL7mPN+urYYYiKg5sug=
Subject key identifier: 47:1A:E9:D6:17:8E:68:46:96:10:5B:58:29:ED:1F:D9:D0:60:6B:5A
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019427B5C4CB23E7107F62570F9425E27180
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Rxrp1heOaEaWEFtYKe0f2dBga1o.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 89.29.190.0/23 maxlen: 23
89.29.206.0/23 maxlen: 23
89.29.225.0/24 maxlen: 24
89.29.247.0/24 maxlen: 24
89.29.253.0/24 maxlen: 24
89.29.255.0/24 maxlen: 24
176.57.96.0/24 maxlen: 24
213.181.72.0/23 maxlen: 23
213.181.77.0/24 maxlen: 24
213.181.89.0/24 maxlen: 24
213.181.90.0/23 maxlen: 23
213.181.92.0/23 maxlen: 23
213.181.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c4:cb:23:e7:10:7f:62:57:0f:94:25:e2:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=471ae9d6178e684696105b5829ed1fd9d0606b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:cb:33:a9:ef:28:3b:8a:fd:50:c1:39:99:
a9:06:7e:85:55:9e:55:fb:e2:de:36:25:9f:41:be:
a2:35:0e:19:7a:a3:cb:93:3c:b1:fe:f7:2d:dd:a4:
45:7c:12:67:4c:44:b7:55:60:d9:5b:0f:62:f8:e7:
03:47:8e:d6:1a:fa:66:5c:3d:08:86:7f:bf:70:03:
0a:2a:3f:1c:a7:5f:d5:a3:f3:47:de:fa:80:ec:7c:
2d:dc:23:7b:a1:e1:ed:02:31:b8:c9:72:40:6d:d9:
b7:9f:0d:fb:bb:c1:16:5b:00:03:06:eb:50:4f:6c:
80:6c:c7:d6:ea:14:34:9b:6b:9e:f1:a2:c7:15:d1:
ad:08:d6:16:fb:ef:92:93:cc:99:d0:35:ae:1d:88:
58:ec:58:61:ef:8e:e1:61:47:7a:ff:83:9a:b4:1b:
a6:22:7f:5d:31:e8:9f:67:c9:20:40:6c:44:66:ca:
dc:d1:40:22:b8:e1:e6:2b:52:a6:cd:95:1f:6b:0d:
3c:3d:80:3c:64:4d:34:fc:3f:6d:35:3b:96:62:2a:
be:20:97:07:a1:f6:2c:1d:d2:6e:4f:e7:8c:db:0a:
fc:84:e1:a6:bf:19:4a:f4:f1:15:47:70:d1:a4:45:
1c:53:ed:08:2d:aa:13:b2:65:05:82:b2:7a:b2:e9:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:E9:D6:17:8E:68:46:96:10:5B:58:29:ED:1F:D9:D0:60:6B:5A
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Rxrp1heOaEaWEFtYKe0f2dBga1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.190.0/23
89.29.206.0/23
89.29.225.0/24
89.29.247.0/24
89.29.253.0/24
89.29.255.0/24
176.57.96.0/24
213.181.72.0/23
213.181.77.0/24
213.181.89.0-213.181.94.255
Signature Algorithm: sha256WithRSAEncryption
3f:46:a2:a4:05:36:da:5a:96:a2:fd:e1:7d:97:b2:b8:8c:e5:
4b:6d:78:3e:e8:36:ee:3b:1e:0f:13:09:cf:c7:cb:77:a4:b0:
df:e0:d9:9c:c5:40:0a:e8:8e:4d:8a:86:8a:79:f3:fb:e6:1a:
4e:d8:be:71:60:b2:6f:f5:e1:5b:48:17:e2:3e:e7:dc:b0:f9:
ae:1f:a7:29:da:e5:7e:aa:4f:79:7e:47:dc:25:fb:08:de:8f:
52:60:05:85:e2:f5:46:54:dd:34:fb:9a:a2:e3:54:b2:56:14:
91:fe:30:94:e9:12:42:c4:ad:5b:9a:f6:7a:5b:d5:fc:e9:95:
e2:46:23:d1:c8:81:ac:66:7a:e8:d1:c8:0e:20:2f:7e:dc:8a:
a0:b4:91:a0:01:b7:fc:6d:34:9f:46:5d:db:99:03:89:ed:e1:
9e:73:19:c7:36:54:0a:4f:c2:89:77:df:26:59:2c:b6:27:40:
4d:20:99:6e:ba:35:6e:0d:20:b4:46:57:6f:b8:c1:c8:91:61:
cb:1f:7e:e1:6e:d1:21:da:c4:3f:f5:7c:11:d5:a4:56:24:a2:
53:db:7d:3b:33:ad:aa:be:48:9f:bb:88:2f:c5:53:ee:b4:2b:
eb:f5:cf:9b:d2:ed:27:30:3c:ee:c5:da:ba:da:e9:79:5b:a0:
79:1d:31:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:01 2025 by rpki-client