Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/RNmZ9AW_6Gh4k0hEBpibcQEZVB8.roa
File: RNmZ9AW_6Gh4k0hEBpibcQEZVB8.roa (raw, json)
Hash identifier: GeHfyL7PNGjP0/tT29gEraZue4yvNSMVcqAZPBy3vc0=
Subject key identifier: 44:D9:99:F4:05:BF:E8:68:78:93:48:44:06:98:9B:71:01:19:54:1F
Certificate issuer: /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial: 019422202EDA8000AA247DAC12AA5B5560C2
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/RNmZ9AW_6Gh4k0hEBpibcQEZVB8.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 89.145.172.0/22 maxlen: 22
89.145.172.0/23 maxlen: 23
89.145.172.0/24 maxlen: 24
89.145.173.0/24 maxlen: 24
185.177.64.0/22 maxlen: 22
185.177.64.0/23 maxlen: 23
185.177.64.0/24 maxlen: 24
185.177.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:da:80:00:aa:24:7d:ac:12:aa:5b:55:60:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d999f405bfe8687893484406989b710119541f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:37:61:39:87:78:f1:0f:52:82:1a:31:8e:
d9:8f:d8:b6:bb:a0:0b:5c:bf:e5:d3:f1:c6:b0:55:
0d:ce:37:6f:af:59:07:0c:be:38:57:99:d0:14:88:
c3:2b:e2:68:41:db:35:ac:5d:ad:50:18:d0:0b:b7:
f8:38:1e:04:0b:69:02:fb:37:62:5e:9e:64:80:a6:
7e:1b:66:1e:12:23:f1:3b:65:70:7c:49:ae:cb:af:
f7:16:cb:cf:5e:f4:85:65:3c:4a:ab:66:43:0b:b4:
61:71:23:4b:a8:a4:b7:a5:f4:87:4f:f8:32:95:f1:
3b:d5:f7:f7:df:c1:f3:96:a6:7b:f9:65:4a:36:3a:
1b:16:14:47:eb:51:b0:c5:57:34:13:c9:e5:38:af:
8e:32:a8:a3:96:fe:fb:65:8c:bc:8b:49:f1:4b:d4:
d3:03:b0:2e:44:1c:e8:f7:e4:58:bc:28:11:28:ed:
be:ab:13:2e:9b:f2:02:31:a4:80:a0:a9:29:55:e1:
a7:39:fa:99:b4:52:7c:a5:6d:93:10:3c:67:d6:fe:
cb:92:94:e1:86:15:5b:b7:83:fd:c8:c1:b8:b4:4e:
22:45:f2:c0:bc:b6:f2:9b:5f:bb:f4:9e:ca:3c:87:
d0:61:46:53:2f:c5:78:1a:68:0f:d8:6b:5b:66:34:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:99:F4:05:BF:E8:68:78:93:48:44:06:98:9B:71:01:19:54:1F
X509v3 Authority Key Identifier:
keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/RNmZ9AW_6Gh4k0hEBpibcQEZVB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.145.172.0/22
185.177.64.0/22
Signature Algorithm: sha256WithRSAEncryption
39:5e:1e:63:9f:f4:37:dd:10:e7:ce:a8:af:fc:9f:25:62:4f:
a7:81:69:e3:41:6b:b7:b0:bb:3b:5d:2a:32:88:11:e7:2a:75:
ee:f8:25:84:14:e6:ca:27:7c:66:69:f1:fe:af:29:0d:58:a7:
e2:17:6c:1e:15:1c:82:8d:08:27:1d:54:7f:b0:d4:6e:c1:ad:
c2:9d:8f:bc:a9:68:98:14:73:37:6f:2b:85:77:4f:9b:5e:72:
2d:2c:eb:d9:36:2d:25:af:77:99:5d:23:dc:cf:72:e6:bb:bc:
1f:e8:92:c9:49:75:9e:16:ad:a6:29:03:da:e5:13:6a:c4:bb:
36:02:02:f2:47:d7:5b:5f:96:b0:c9:38:11:fb:03:c2:30:97:
13:15:f6:8f:9b:94:81:c1:e4:05:53:c5:f8:f4:8d:12:53:d8:
be:64:df:d1:12:42:4a:64:82:a5:19:f3:09:72:33:66:39:83:
68:4e:81:d6:35:9d:9d:a2:7d:0c:f0:fe:ec:91:15:a5:70:56:
27:4f:61:e9:21:bc:47:50:52:88:bc:68:c9:64:0d:bf:ae:94:
46:44:b0:5f:14:27:e9:14:cf:77:68:b7:b2:89:5a:28:11:72:
5c:c0:8f:b8:a5:2b:64:07:27:d0:21:37:d1:29:aa:1f:0e:ae:
4b:53:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:24 2025 by rpki-client