Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/gfOuYPIFKu1t4LchnV-tiQ23x_o.roa
File: gfOuYPIFKu1t4LchnV-tiQ23x_o.roa (raw, json)
Hash identifier: MaDF2nJtr0HdC25PICF1gfuevH1AQFouYi3XzrLGpak=
Subject key identifier: 81:F3:AE:60:F2:05:2A:ED:6D:E0:B7:21:9D:5F:AD:89:0D:B7:C7:FA
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 019423D6BE8CB92465220464CD2216896156
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/gfOuYPIFKu1t4LchnV-tiQ23x_o.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29033
IP address blocks: 89.222.0.0/18 maxlen: 24
89.222.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:be:8c:b9:24:65:22:04:64:cd:22:16:89:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81f3ae60f2052aed6de0b7219d5fad890db7c7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:25:c0:60:21:43:af:1c:93:ef:11:59:03:
d6:38:07:aa:47:5e:da:35:fa:2c:84:cb:17:e9:0f:
45:86:35:d9:7c:b8:6a:67:67:08:d2:6c:88:f6:af:
16:9c:1c:ee:c1:df:3b:b6:e1:19:d4:23:c5:03:0b:
c5:50:e8:aa:a2:d7:f3:2c:a5:d6:5b:29:11:82:11:
1a:9b:48:22:09:55:02:1c:b1:d4:c4:ea:4a:99:9c:
6b:2b:e1:25:01:9e:9c:b3:2f:d7:34:58:57:79:e4:
f8:c8:36:b2:9b:c1:26:b6:91:6c:4f:68:a0:9a:62:
c3:89:ac:bf:bf:88:f6:cf:eb:01:e4:dd:a2:75:0d:
ac:72:08:d5:53:fa:0d:6f:58:f5:96:cc:13:aa:54:
82:b6:68:75:c2:b1:d0:24:ec:e2:45:76:d7:89:74:
9c:1b:42:72:6f:70:3b:c0:ba:d5:51:89:d3:c2:cf:
1c:2b:03:06:c2:d8:66:56:12:e1:40:72:82:4b:e5:
eb:63:0a:52:1f:ab:6e:c7:94:b5:29:fd:96:e2:55:
c7:07:38:db:01:d9:f7:5c:13:7e:7e:95:f2:ca:df:
9a:6d:0b:44:29:b9:50:5a:b0:29:a3:29:56:6d:55:
53:d9:c9:59:c9:a5:dd:ac:e9:16:48:3f:64:56:7a:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:AE:60:F2:05:2A:ED:6D:E0:B7:21:9D:5F:AD:89:0D:B7:C7:FA
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/gfOuYPIFKu1t4LchnV-tiQ23x_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:89:82:c0:7c:39:97:8b:92:26:8b:5b:a4:3f:de:49:8d:95:
ad:6e:c4:ab:b6:53:83:c5:11:59:c6:11:d1:80:67:39:af:70:
90:8d:89:1d:72:5b:6e:07:71:d5:4a:c4:60:91:b9:3c:c1:10:
0d:ee:27:31:76:a7:17:d6:38:5a:fe:73:6e:81:3f:3e:a9:67:
2e:aa:6e:8c:de:d4:c4:9e:ee:1c:5a:07:e9:5e:59:c2:38:70:
be:ec:de:f6:78:01:db:42:16:de:70:d0:83:5a:a9:b7:52:61:
b7:59:55:f3:13:c3:0b:f4:bd:ab:4e:f5:fa:4a:b4:ca:eb:5a:
2b:b8:9b:a7:bf:b7:37:06:68:37:df:f1:6e:74:27:78:90:56:
2d:f6:f6:cd:19:d4:bb:65:e7:c8:da:e6:8e:25:87:0c:02:5e:
c9:80:52:74:01:56:5e:7d:ac:67:08:10:a5:85:51:b4:00:07:
72:d7:a2:aa:51:92:3d:53:8c:a8:ef:ed:c0:70:d1:38:21:30:
86:8a:4a:2d:cf:ca:d1:1b:6b:6e:6f:1c:5c:2e:5f:90:d5:f9:
a8:c6:a7:87:ed:10:20:3b:5c:e3:69:fe:f3:b5:a4:30:5e:78:
ba:28:86:f2:d3:a3:1f:a5:1e:dd:fd:dd:79:33:1a:92:07:44:
88:6f:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:44 2025 by rpki-client