Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5ylkGB0OEQVIq-iyDrh_qD4MPR4.roa
File: 5ylkGB0OEQVIq-iyDrh_qD4MPR4.roa (raw, json)
Hash identifier: apzx7x7XXYTZ+MCZpUOzh2kCbqfkuGQJrP9qWynQ4QQ=
Subject key identifier: E7:29:64:18:1D:0E:11:05:48:AB:E8:B2:0E:B8:7F:A8:3E:0C:3D:1E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274853F33DB2D1FC9462152BEDFF5E8D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5ylkGB0OEQVIq-iyDrh_qD4MPR4.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272403
IP address blocks: 89.42.71.0/24 maxlen: 24
89.45.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:53:f3:3d:b2:d1:fc:94:62:15:2b:ed:ff:5e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e72964181d0e110548abe8b20eb87fa83e0c3d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:c8:69:a0:23:40:62:75:54:69:2e:19:1a:
4e:23:81:bf:86:bc:1f:5a:e5:8b:f6:c3:6b:cd:ae:
39:1a:98:a2:8e:c1:93:52:df:d1:90:b9:d6:56:e9:
de:1a:7f:e7:d7:ca:38:19:84:ec:38:1d:c6:1d:a6:
b8:cb:7d:fa:2a:ac:66:c3:a0:00:f1:04:a4:cf:94:
6e:70:fe:4a:28:9f:f4:ab:49:5a:7d:0e:d0:75:c8:
99:28:4c:f8:93:cf:bf:74:c7:9f:db:16:cc:35:b4:
5a:be:9e:a2:5c:8c:1b:25:98:e6:d3:69:41:43:5c:
e4:63:9b:fe:51:d4:23:c8:62:75:41:2b:2c:4b:df:
ec:d3:33:fb:84:2f:8b:ee:2a:94:b0:21:bf:bd:be:
58:63:5f:ce:00:6c:d9:0f:f6:ce:c3:c1:e2:f4:82:
50:33:e1:99:c9:81:79:81:25:7f:57:70:55:97:5f:
db:bc:5d:9c:66:13:32:ce:03:06:dc:24:c4:90:5a:
05:27:4f:57:d3:0a:e5:59:fb:09:90:a4:9f:e7:5b:
c1:65:d7:89:e8:be:37:3a:5c:42:15:ec:a6:9b:12:
1b:86:fc:88:ee:78:05:a9:83:d2:f9:9a:ec:31:0a:
29:a7:98:21:8c:aa:55:a8:15:82:c5:54:56:a5:4c:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:29:64:18:1D:0E:11:05:48:AB:E8:B2:0E:B8:7F:A8:3E:0C:3D:1E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5ylkGB0OEQVIq-iyDrh_qD4MPR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.71.0/24
89.45.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:57:ee:0e:69:4d:f4:df:6f:b2:d7:63:94:a6:cf:34:8f:1e:
9a:f9:3d:e1:b5:78:55:a5:a1:09:44:45:ff:f0:3b:5a:25:bc:
6e:c9:d5:1d:d4:59:a3:02:c1:3c:88:11:6d:8e:b0:b8:2f:7b:
ac:d6:58:2b:63:2f:29:32:69:fa:8b:8b:8d:21:ee:dd:2f:2c:
b8:98:e1:ac:bf:71:c9:cb:bb:15:ba:81:49:c2:1f:5f:6d:42:
60:cd:a3:16:b7:8b:5a:83:47:b2:ef:8d:98:99:93:b9:8f:f6:
cc:98:81:c8:ee:05:be:8c:7f:2e:6d:24:80:d1:81:83:ce:82:
56:8c:c0:e6:45:8a:25:fd:06:6d:53:a2:31:4b:c8:40:45:dd:
36:8d:14:c0:14:06:ce:1e:75:e8:d8:11:ce:31:5a:9e:7b:f3:
7c:33:a0:05:1e:6e:fd:c9:44:56:34:45:ce:9c:b1:10:48:c5:
49:f6:ab:ea:b3:19:0f:0f:83:fe:fc:79:ec:91:84:22:79:83:
4c:b3:2c:2f:13:9b:b1:3e:b3:12:49:cb:0a:d6:03:69:44:28:
6e:73:45:43:e5:3e:0f:e0:ec:43:a8:b3:26:e1:56:3f:07:68:
22:90:de:0e:e5:60:cb:fc:8e:68:de:a5:cc:a5:d2:19:56:49:
6e:31:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:49:20 2025 by rpki-client