Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/qvCCYCJKwYp-OQiGJWrjQN6GnYE.roa
File: qvCCYCJKwYp-OQiGJWrjQN6GnYE.roa (raw, json)
Hash identifier: IXEsDSXk7cKyv3gBbnxZ1ieqaPBJHIubd2ma3kMo8q8=
Subject key identifier: AA:F0:82:60:22:4A:C1:8A:7E:39:08:86:25:6A:E3:40:DE:86:9D:81
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019427B5C45EB2CFE23D44686957506F78A2
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/qvCCYCJKwYp-OQiGJWrjQN6GnYE.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197740
IP address blocks: 89.29.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c4:5e:b2:cf:e2:3d:44:68:69:57:50:6f:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf08260224ac18a7e390886256ae340de869d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:14:0e:6a:b0:db:72:67:fc:4a:da:55:9f:
1e:1e:9b:33:ad:95:28:f1:a6:8f:d8:6b:16:48:96:
f3:21:ee:b9:42:f8:bb:b0:44:34:86:2d:b2:f9:94:
c9:99:fe:db:06:be:7f:39:bc:ab:aa:ef:c3:bb:df:
ba:91:71:ee:76:4b:56:13:10:26:79:10:c4:54:38:
69:a3:4b:ab:7b:fc:89:81:eb:4c:fe:9a:f4:4f:a7:
93:b3:2b:2b:5c:8f:9b:3c:ec:bd:d0:11:e7:43:9f:
56:c4:e6:de:80:aa:f5:05:72:0b:8e:68:da:ee:67:
c0:07:fa:99:16:c8:b7:05:61:f4:7d:01:1c:5f:5b:
34:df:b7:b1:1b:cd:38:e9:a4:42:15:be:32:17:80:
dd:a1:6c:e7:ea:44:49:8d:f7:88:49:98:da:8a:ea:
3e:44:6d:ff:92:8e:ef:8d:d0:96:5c:c7:55:d6:a0:
6d:f2:7e:f8:6d:0d:10:a7:76:21:f6:9f:4b:01:f3:
54:8f:d5:9d:67:f5:c8:d5:e2:61:c8:6a:65:4b:3f:
3d:6a:27:2a:87:3b:80:47:25:b8:ba:45:9e:ae:67:
b6:60:a7:bb:e9:03:24:c3:15:4d:52:a6:bc:31:85:
27:68:9e:da:d0:a8:aa:93:99:36:b6:b6:ef:97:a4:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:82:60:22:4A:C1:8A:7E:39:08:86:25:6A:E3:40:DE:86:9D:81
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/qvCCYCJKwYp-OQiGJWrjQN6GnYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.252.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:94:b7:5c:37:fa:92:30:42:a4:9a:23:c7:ad:db:df:c9:23:
23:4c:0e:8c:b8:41:84:f6:8b:14:dd:a4:a4:39:8a:fa:f9:ba:
62:9c:5d:5d:c0:22:ab:b6:c8:cf:ee:1d:d3:6e:21:6d:f5:59:
b2:9b:0b:df:df:38:e5:dc:0b:92:e0:bd:c3:91:32:21:1a:da:
9f:86:fb:6a:ff:51:8a:33:3f:b3:0b:91:e4:66:6f:aa:58:67:
f1:3a:f2:04:c7:6d:6d:c7:e9:bd:76:ba:55:67:30:f0:57:b8:
45:b9:21:10:ad:91:80:d3:26:ee:a5:2d:d9:af:02:96:b5:06:
16:d8:31:bd:a3:d1:7a:ec:38:2a:3f:2e:d3:62:94:8d:d8:65:
7d:e1:da:6b:d2:40:c7:34:22:ef:48:7f:08:f8:73:d4:7c:80:
42:75:2b:99:46:da:56:6a:13:08:c8:74:97:41:53:29:c8:3c:
4b:e2:d0:15:84:66:8f:56:fa:55:ed:a2:67:3b:ff:17:6f:75:
36:43:31:41:36:6c:46:64:76:b5:f1:04:87:f3:47:d7:61:b2:
ea:ab:eb:39:7a:55:1e:c8:a3:46:bc:86:16:37:38:e5:1c:7a:
fc:e7:04:56:84:5a:2a:bb:59:d6:cf:8e:79:c6:55:a4:b4:21:
b0:b3:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:58 2025 by rpki-client