Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/iWkENaumrn_VqAXGYeFWSy8pOdc.roa
File: iWkENaumrn_VqAXGYeFWSy8pOdc.roa (raw, json)
Hash identifier: BifAs92ML2XP6L2w5bLWRZw5RDndqu7o+E6QeoQC5zA=
Subject key identifier: 89:69:04:35:AB:A6:AE:7F:D5:A8:05:C6:61:E1:56:4B:2F:29:39:D7
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 019421B23A45EBA5F8E1468BB80360AB4B47
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/iWkENaumrn_VqAXGYeFWSy8pOdc.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3491
IP address blocks: 139.123.232.0/24 maxlen: 24
193.24.65.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:45:eb:a5:f8:e1:46:8b:b8:03:60:ab:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89690435aba6ae7fd5a805c661e1564b2f2939d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:3c:39:cf:85:cc:2d:db:d6:29:20:e4:87:
91:c5:1d:2b:47:1d:b1:ca:a5:46:63:9d:62:9d:53:
f4:a6:8e:ff:eb:80:6d:42:fa:53:86:fc:17:6d:f6:
62:fd:be:15:fd:76:f4:49:0d:c0:63:05:89:66:20:
39:90:21:a9:e5:65:18:b0:a7:8a:c2:2a:f1:a4:e0:
61:cb:ae:f9:ab:00:51:96:3a:6a:8c:3d:f9:80:29:
7c:3e:f0:0f:f6:d1:19:4c:e2:79:69:0e:9b:d5:e4:
7c:16:f8:a1:3f:5c:b4:99:e1:b5:c4:73:ac:e8:b8:
14:06:5d:47:f4:34:9f:89:f3:e3:e5:ea:81:47:0f:
68:0d:0e:ec:bc:03:6e:e2:bc:5d:0b:f8:4e:d0:f1:
03:c1:b3:b7:f7:63:aa:03:d8:53:b4:de:31:26:a5:
dd:25:7f:e2:04:36:dd:23:f8:a0:09:9f:a0:13:ee:
c7:b2:30:f1:8e:f7:a4:33:99:6f:c8:39:8c:fc:45:
a7:db:b0:30:95:8a:f5:f4:65:71:1c:a0:db:b9:e8:
20:cf:a8:cc:96:7b:aa:35:56:fb:fc:bd:28:c0:0e:
a9:b0:1a:6c:74:b8:2f:77:37:99:1c:1d:d6:93:f5:
00:97:ae:27:5c:4b:7d:e2:19:95:a1:71:1e:5a:56:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:04:35:AB:A6:AE:7F:D5:A8:05:C6:61:E1:56:4B:2F:29:39:D7
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/iWkENaumrn_VqAXGYeFWSy8pOdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.123.232.0/24
193.24.65.0/24
Signature Algorithm: sha256WithRSAEncryption
af:43:3e:f0:c9:40:c8:41:f5:8d:97:5d:fa:a2:37:d4:d8:dc:
c5:7a:02:2f:76:ce:f2:26:54:25:f0:fa:95:47:81:51:40:3a:
85:c1:bc:45:0b:93:c3:45:39:97:63:63:41:c2:9d:4b:79:09:
d4:b5:2e:0e:c4:d7:4e:79:cd:55:95:d6:de:06:5a:81:7b:a5:
16:8f:5f:f0:09:d5:67:69:9a:15:d5:2b:ab:45:ec:f9:d6:c0:
2f:be:3b:da:44:ef:ae:3c:12:cc:f7:fe:b8:01:36:19:c1:a1:
30:af:e0:c9:d9:95:ea:d9:6a:41:48:7b:95:9c:e4:f3:50:04:
d3:ca:6d:6c:9a:79:18:e4:71:89:ae:75:d8:b4:af:e4:bb:ac:
10:9d:83:25:70:e6:c1:9a:60:8f:65:e9:60:59:08:f0:83:c3:
a0:d9:59:bd:3a:a6:3e:96:75:97:08:35:86:b3:b2:27:2a:e7:
03:40:79:18:98:97:18:53:8e:20:93:c3:b8:5a:54:ad:1b:ef:
b0:91:07:3c:aa:12:a7:26:b2:d3:40:81:22:0f:3f:9a:ea:c4:
a8:fa:fb:76:e6:ec:cf:7a:66:3c:58:37:7c:50:a0:5f:b6:a8:
2c:0f:1c:f5:a6:0d:e8:0f:aa:21:ad:ea:97:05:4e:7f:80:2f:
c6:26:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:29 2025 by rpki-client