Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa
File: lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa (raw, json)
Hash identifier: XMlSfbRCxrO9BsObz26QxJ616CDdqXCBLUK5IzvxZFk=
Subject key identifier: 94:96:CD:A6:30:DE:43:08:1E:5A:A7:CF:11:98:03:0D:F4:93:82:A9
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 01958F131EB6EF728D6F801AC8FC947FD95F
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa
Signing time: Thu 13 Mar 2025 10:35:49 +0000
ROA not before: Thu 13 Mar 2025 10:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 89.222.36.0/24 maxlen: 24
89.222.37.0/24 maxlen: 24
89.222.38.0/24 maxlen: 24
89.222.39.0/24 maxlen: 24
89.222.40.0/24 maxlen: 24
89.222.41.0/24 maxlen: 24
89.222.42.0/24 maxlen: 24
89.222.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:13:1e:b6:ef:72:8d:6f:80:1a:c8:fc:94:7f:d9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Mar 13 10:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9496cda630de43081e5aa7cf1198030df49382a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:35:66:71:58:b9:7c:ce:43:c0:24:8c:6e:
4d:12:55:1e:c0:b2:e0:86:da:18:87:fb:b6:66:51:
84:ca:ec:19:aa:38:cf:bd:4a:39:2c:be:cf:fc:5e:
b8:73:5a:72:18:43:16:ac:f4:36:5c:76:8e:1c:12:
01:ce:49:31:0d:03:95:24:3d:e7:33:fd:4e:6e:36:
f8:6c:52:04:76:12:5a:d8:45:0c:7c:fa:57:53:6a:
1a:a2:a8:2e:61:5f:9d:8c:ed:3b:79:4b:02:63:d5:
8f:91:ae:d9:55:38:d5:2f:62:6c:02:09:bc:82:d6:
89:9d:6d:e9:4e:9a:96:8a:8e:da:64:89:a9:5c:7d:
f7:63:fa:c6:65:1b:f7:12:b8:00:e9:3b:9d:b4:15:
d8:b8:31:7b:7e:aa:5c:78:bc:8e:94:56:91:e6:ec:
f3:0c:3a:df:75:1a:50:a6:98:d8:ce:cf:01:71:c0:
64:c7:a8:bc:ec:d6:b0:76:8b:5d:01:5b:cd:80:12:
45:31:91:05:36:95:39:0d:b0:99:53:c3:a0:0f:2f:
20:ac:59:05:db:e9:c9:6a:83:12:4a:38:d8:c6:e5:
74:ca:cf:82:32:47:67:55:bd:df:08:e4:a3:16:87:
01:e9:1c:ea:e5:78:dd:bd:04:ff:ee:50:73:5a:1a:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:CD:A6:30:DE:43:08:1E:5A:A7:CF:11:98:03:0D:F4:93:82:A9
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.36.0-89.222.43.255
Signature Algorithm: sha256WithRSAEncryption
98:44:8c:bf:61:81:cb:49:37:c2:d3:34:04:87:2d:17:43:ff:
fa:72:19:e8:4d:9d:6c:2a:c5:63:d9:75:4d:a5:87:3a:fe:63:
9c:e5:d1:37:c0:df:6a:67:cc:32:a5:f8:71:cf:9d:ac:8e:6c:
1e:dc:ff:21:f0:58:a0:56:87:69:f3:46:96:0f:70:44:99:be:
1b:d1:07:1e:77:82:7d:7e:56:28:03:1f:65:43:89:7b:08:7d:
18:8a:b0:63:aa:b2:34:6a:43:5d:1e:d3:45:f9:ae:3c:d8:fb:
9a:7d:cf:0a:2e:dc:d4:bc:de:de:5f:42:60:ca:cf:86:35:4b:
9b:df:b5:51:03:d1:d0:ca:c9:3f:ed:d8:86:36:22:19:72:de:
8d:87:2e:f4:10:8a:36:9f:b3:97:1a:1d:19:dd:6b:cb:2e:ba:
7d:26:62:61:0a:ae:2a:e0:7a:88:fe:01:fe:fe:8b:dc:51:38:
19:b5:ef:74:01:3c:f4:bb:db:c6:87:ca:29:e5:cf:ec:7f:a3:
dc:49:58:ec:c3:cf:fa:41:e7:4c:fa:b8:73:e9:ec:e8:e0:f8:
82:db:91:3b:5c:c7:82:6a:9b:de:62:15:4d:e9:fd:5d:f9:bf:
98:83:b3:dd:77:4c:13:e9:43:aa:0c:47:68:0a:2a:72:a1:cb:
b9:fe:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:22 2025 by rpki-client