Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/Ay4048oOGOLd8W5gLDDEAyTF8CE.roa
File: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (raw, json)
Hash identifier: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=
Subject key identifier: 03:2E:34:E3:CA:0E:18:E2:DD:F1:6E:60:2C:30:C4:03:24:C5:F0:21
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019424458E3943DE4611774207F5E451C479
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/Ay4048oOGOLd8W5gLDDEAyTF8CE.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214265
IP address blocks: 89.18.30.0/23 maxlen: 23
89.18.30.0/24 maxlen: 24
89.18.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8e:39:43:de:46:11:77:42:07:f5:e4:51:c4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=032e34e3ca0e18e2ddf16e602c30c40324c5f021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:7b:4a:c4:4b:dd:18:c8:6b:0f:b4:c1:58:
b2:59:d3:52:a7:50:e9:47:4c:c7:57:8e:d5:64:60:
c6:36:7b:5b:c6:0e:26:be:80:b1:f0:dd:43:7d:84:
d5:a6:81:15:1b:96:57:3c:87:ff:f6:99:25:5a:57:
0a:31:40:c0:35:d7:9d:69:c9:a1:d8:8a:58:63:a8:
29:38:83:c9:23:16:78:4c:b3:5f:bc:b6:9a:4c:e6:
22:12:fc:48:e3:0c:d3:7f:99:56:b9:34:aa:41:39:
f8:cc:68:fb:ce:5d:ee:8e:99:3f:c9:d0:f9:6c:9b:
ba:63:e0:88:37:d9:d1:21:62:2e:34:45:4b:75:f5:
4a:69:ec:03:6f:b7:03:30:20:d6:69:fa:cd:7b:3d:
8b:35:f0:55:12:76:ee:fa:4b:a2:d8:40:94:af:66:
4b:88:65:99:45:39:46:3a:86:28:fa:4a:63:13:de:
6d:11:14:49:24:4b:ff:c8:4a:30:f5:4c:26:be:fa:
d4:8a:9d:81:1d:9b:64:16:7d:bd:61:3b:34:0f:c2:
bd:97:ad:ce:1d:41:06:29:51:7f:43:08:84:05:47:
4d:56:b7:06:d1:d9:59:e8:48:05:5e:03:ff:6e:95:
c8:2b:03:6f:e5:65:10:b3:ad:16:6b:c4:90:d5:83:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:34:E3:CA:0E:18:E2:DD:F1:6E:60:2C:30:C4:03:24:C5:F0:21
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/Ay4048oOGOLd8W5gLDDEAyTF8CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.30.0/23
Signature Algorithm: sha256WithRSAEncryption
44:aa:87:e0:bc:ab:a3:a0:c9:cc:ed:fe:4c:bf:e1:e2:e4:51:
2b:91:d5:69:a5:6e:d8:0b:e6:35:51:1c:d3:8a:fa:a2:3a:b9:
c4:1b:3d:e1:d6:9a:32:94:58:60:31:22:70:5b:fc:f7:8c:e2:
58:d6:3a:a1:32:78:94:e4:a3:7a:7e:d8:7e:4a:7d:b0:0a:aa:
5d:05:75:fd:22:7f:6d:5a:40:4d:fb:c2:98:55:42:a1:5a:ca:
31:c2:5b:0d:49:27:6a:39:7c:67:a7:2b:2a:e7:25:af:1c:ed:
24:ae:4b:f1:26:9e:8a:c8:89:32:2b:40:d2:e1:a1:d3:d7:af:
f0:a4:2c:94:1e:ac:93:5d:84:fc:12:4c:f7:64:54:31:b2:25:
bc:b1:97:fd:95:a5:fc:9e:09:d1:e9:2b:1c:a2:f0:ff:c5:3f:
01:28:e3:f2:e4:4d:3b:df:7c:65:a1:82:14:b3:ad:3a:d2:e8:
54:e4:81:63:d6:33:28:04:99:bb:21:99:af:bb:34:47:2b:ba:
66:e3:0d:66:17:d5:3f:b5:f1:12:5a:f1:03:de:64:f3:80:6d:
41:ad:08:ce:ae:c8:b0:0f:1d:cd:b9:05:ce:0a:e3:c6:d5:7e:
c8:bd:89:01:ea:1e:81:9b:31:12:56:c2:62:f3:e3:e4:c4:30:
db:f7:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:34 2025 by rpki-client