Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/D_o0FGwdUGMZgnpknFCiRqR7Y3w.roa
File: D_o0FGwdUGMZgnpknFCiRqR7Y3w.roa (raw, json)
Hash identifier: fspmB6aR587igC4xYxZs3Ujb+EXLGIysB8A/U/7DmZo=
Subject key identifier: 0F:FA:34:14:6C:1D:50:63:19:82:7A:64:9C:50:A2:46:A4:7B:63:7C
Certificate issuer: /CN=d8646e6ccb716e89501958fc86823a98368fb51a
Certificate serial: 012428D1
Authority key identifier: D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/D_o0FGwdUGMZgnpknFCiRqR7Y3w.roa
Signing time: Sat 01 Jan 2022 11:55:46 +0000
ROA not before: Sat 01 Jan 2022 11:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19146961 (0x12428d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8646e6ccb716e89501958fc86823a98368fb51a
Validity
Not Before: Jan 1 11:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ffa34146c1d506319827a649c50a246a47b637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:ca:24:72:84:83:38:b1:4b:61:9b:c4:71:
68:cd:15:61:f9:9a:32:01:92:65:a6:1e:2d:3c:10:
26:e3:d6:d1:a3:f2:4d:1d:33:8b:25:cc:ce:96:1d:
48:e6:fd:cd:4d:24:b3:0e:03:1e:82:42:d9:05:5d:
92:f0:94:7b:a3:53:61:6f:d5:fd:e3:97:a4:a4:6f:
3e:d4:58:17:f8:d2:93:96:41:4c:fe:5f:3f:bc:ea:
3b:6c:a0:f6:20:cf:9f:98:98:53:c5:5d:ce:2a:f8:
4d:56:ce:2c:c6:7b:63:f9:9d:fc:79:8b:9a:15:73:
10:d8:3a:bb:cd:3a:04:eb:96:8d:70:a7:d4:24:60:
6d:48:d9:1e:be:f2:00:20:9b:a2:9d:74:d9:73:07:
44:ce:8f:48:f7:5e:fc:30:13:ea:91:f7:ee:92:ec:
ab:a1:be:eb:38:f1:35:00:e2:c8:ca:82:9d:7a:fa:
5a:d9:77:0d:e1:c5:17:88:24:75:67:e6:2b:61:62:
c7:85:b5:0c:64:9b:0c:3f:ee:05:3e:7d:d4:de:93:
34:05:28:67:5e:2c:54:84:2e:e1:92:c5:ce:0c:d2:
2d:13:d7:04:94:14:00:48:87:0d:26:d3:fc:25:ee:
ef:c1:61:9d:d9:75:75:dd:82:d3:fa:4d:6f:ae:59:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:34:14:6C:1D:50:63:19:82:7A:64:9C:50:A2:46:A4:7B:63:7C
X509v3 Authority Key Identifier:
keyid:D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/D_o0FGwdUGMZgnpknFCiRqR7Y3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f1:81:bd:89:d7:67:5f:8d:d9:50:28:25:16:88:e1:b1:69:
64:e2:e5:fb:3d:0a:e7:7f:a8:25:88:da:99:e4:99:ed:b3:43:
4f:e9:05:26:cc:9d:f0:8d:04:0c:ee:70:2a:af:97:2c:d3:4f:
7a:60:f9:d6:9a:2b:53:97:d2:e7:e9:ec:88:90:ee:af:ed:17:
2f:5f:e1:a9:2f:fd:0e:fe:a9:6a:71:aa:63:11:69:02:d7:46:
9b:19:a4:59:2e:37:9c:50:f8:a4:8b:2e:4d:0b:d1:5c:1a:d5:
ae:5e:ce:50:c2:11:39:02:35:a5:d7:87:d3:e1:0d:63:f0:ac:
c7:b3:54:2e:f0:1c:37:c0:6b:4f:41:fb:42:ac:87:43:34:46:
f8:3e:61:5d:89:4c:72:5e:5a:cb:03:9e:00:a3:b3:85:2e:e1:
6f:cf:32:13:e8:8b:d4:e9:9e:c3:02:b6:09:ee:50:be:79:41:
49:bf:8d:da:75:f9:d9:c5:19:1f:cc:75:9c:9e:2e:71:a7:9d:
95:53:4f:65:3e:a8:75:38:32:ad:16:1d:76:06:0d:5a:d3:59:
bb:d1:41:5b:e2:8c:ce:f7:a4:f6:25:a7:20:d9:45:c9:c4:9a:
fb:80:30:12:5c:36:d5:05:ce:3f:9f:36:34:94:95:72:57:16:
57:14:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:20 2025 by rpki-client