Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/0X1Ipto9w1nE9eagzvuD9O-P6yM.roa
File: 0X1Ipto9w1nE9eagzvuD9O-P6yM.roa (raw, json)
Hash identifier: 4sHYt9ffM1owRIY1+dPqOYaSkh7XHYwPkbzwcWqEjcU=
Subject key identifier: D1:7D:48:A6:DA:3D:C3:59:C4:F5:E6:A0:CE:FB:83:F4:EF:8F:EB:23
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 019423D6BEBE52EA9996ACE4B18617F24B45
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/0X1Ipto9w1nE9eagzvuD9O-P6yM.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34914
IP address blocks: 89.222.0.0/18 maxlen: 24
89.222.2.0/23 maxlen: 23
89.222.32.0/23 maxlen: 23
89.222.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:be:be:52:ea:99:96:ac:e4:b1:86:17:f2:4b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d17d48a6da3dc359c4f5e6a0cefb83f4ef8feb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:21:2e:84:75:5a:64:49:56:2b:c8:08:a2:
a0:d8:2c:88:e6:d3:24:68:61:f5:ba:44:48:59:1c:
31:2a:df:e6:19:ad:a5:fe:4f:65:e7:4e:69:7f:e1:
ee:b2:02:69:7f:df:b3:37:a8:b8:5c:af:e9:85:9c:
42:eb:7c:75:10:92:1c:87:b1:50:b2:64:73:be:b3:
87:04:1e:2a:da:fd:79:e0:1e:90:4b:e3:ea:46:b0:
2b:4d:71:a2:f9:f3:c9:40:f7:9a:2e:4d:bc:87:b5:
ae:55:47:e8:8b:a2:99:71:b0:58:f9:2c:71:6a:27:
09:6f:a0:e6:0d:db:cc:86:df:2b:c4:e5:08:75:15:
90:6f:93:84:f3:30:a5:6d:cc:1f:15:5d:96:09:4b:
66:85:2c:b1:89:e4:37:ae:5c:fd:cf:46:ad:00:90:
47:6a:77:ac:1f:3b:4f:12:cd:09:db:d0:35:33:2e:
da:cb:c4:57:02:70:52:72:4e:34:d8:55:b0:e7:f0:
08:0d:e6:84:3c:46:15:ce:cd:f3:7c:03:e6:20:92:
34:b8:97:1a:02:4e:68:ed:b8:df:33:42:15:25:de:
e3:5b:89:61:6d:5c:5f:b2:6e:3f:17:44:ed:41:57:
90:1a:8b:3d:a1:e0:0b:55:c4:f2:62:b1:99:68:47:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7D:48:A6:DA:3D:C3:59:C4:F5:E6:A0:CE:FB:83:F4:EF:8F:EB:23
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/0X1Ipto9w1nE9eagzvuD9O-P6yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.0.0/18
Signature Algorithm: sha256WithRSAEncryption
37:b9:f9:02:83:8f:ad:8f:e1:1a:f0:a6:bb:1d:34:ef:ca:38:
56:b2:50:e4:3e:03:ed:73:a0:82:03:10:fe:e9:3b:77:a8:41:
48:a4:78:2f:42:33:6a:77:59:2d:0f:61:5a:fd:da:53:65:0d:
81:c0:10:05:fe:08:a6:5e:6c:18:4a:5c:32:90:ea:4e:15:de:
4d:04:17:c6:d3:a8:ac:94:52:b8:04:8a:1e:a4:d9:87:30:d3:
77:db:3f:22:d1:3c:e9:7e:33:c5:75:d7:1e:f0:b1:15:49:a6:
34:4c:00:41:a1:a7:d2:a6:7d:83:37:1b:bc:ff:35:64:37:04:
12:18:38:59:89:3a:21:e9:9d:e2:aa:24:51:dd:74:21:bc:10:
b3:f9:79:40:7a:21:5d:5e:a4:fa:e7:1e:96:4c:cb:15:e7:3d:
09:92:75:0d:11:9e:63:c1:10:ab:4d:c5:85:bd:95:df:bd:a4:
26:73:fd:8c:97:83:f3:a9:97:09:6d:c7:bb:95:60:6a:39:eb:
86:05:ce:92:eb:ef:e3:92:a1:69:2d:8c:e0:f4:6f:6c:49:c2:
c2:ec:42:42:9f:b0:7c:3c:8f:16:de:33:c9:3c:62:4f:59:70:
32:42:e9:bd:ce:63:ed:41:84:5b:80:0c:21:b4:6c:34:e2:f3:
de:29:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:03:22 2025 by rpki-client