Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/7eNb44WNvRe3zUhzNoMOXBV0hdw.roa
File: 7eNb44WNvRe3zUhzNoMOXBV0hdw.roa (raw, json)
Hash identifier: u5nCu4SXyaiL5SI5Y24CZX8YRjgh+vsOfZ1NUiBL330=
Subject key identifier: ED:E3:5B:E3:85:8D:BD:17:B7:CD:48:73:36:83:0E:5C:15:74:85:DC
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019423D80770404611EC2CA121CD0316AE3A
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/7eNb44WNvRe3zUhzNoMOXBV0hdw.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214678
IP address blocks: 89.34.76.0/24 maxlen: 24
185.240.88.0/23 maxlen: 23
185.240.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:07:70:40:46:11:ec:2c:a1:21:cd:03:16:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ede35be3858dbd17b7cd487336830e5c157485dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:be:1d:9a:85:af:4d:82:fd:10:d4:01:8b:
aa:8e:ac:61:9a:ea:a7:b2:0a:ed:4e:d4:f7:b0:52:
df:db:be:cb:da:51:5a:e1:bb:0d:e5:4e:ce:d6:e1:
aa:63:f3:08:da:4b:e5:5c:38:35:74:30:f4:4f:64:
32:76:44:30:5c:15:5b:68:4f:8a:7e:a2:b4:b8:b9:
da:2d:76:aa:9a:1f:61:10:12:6f:cb:87:fe:8a:3e:
41:1e:92:9f:3f:8f:2a:16:9b:82:ac:23:de:e9:1a:
38:cc:88:dc:d9:38:78:0f:e7:80:34:31:e9:45:1a:
22:7d:64:09:fb:0c:82:6d:27:dd:45:e4:3a:58:7e:
a5:9b:c9:dd:42:a9:3f:3b:3e:ca:74:f9:1d:10:9e:
0f:96:58:7b:bd:f5:16:3c:d8:a9:73:a6:fb:34:90:
77:18:be:a6:00:9e:a9:6f:bd:0c:ba:3f:e3:ef:a0:
e2:66:35:2d:db:b1:78:d8:b2:e3:e8:d4:63:64:cc:
01:c4:53:c5:c5:31:f5:90:21:27:28:55:a8:d6:5d:
f3:a0:e8:08:1d:82:15:3d:da:66:d4:80:cf:a7:9a:
75:bc:97:05:e4:32:dc:95:22:95:02:65:15:a6:28:
d7:44:c4:8d:a5:70:6a:d0:8b:75:bb:40:d7:b1:56:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:5B:E3:85:8D:BD:17:B7:CD:48:73:36:83:0E:5C:15:74:85:DC
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/7eNb44WNvRe3zUhzNoMOXBV0hdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
185.240.88.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ed:f4:0e:d1:5c:a0:5d:6e:04:37:d7:a9:6a:c2:ac:18:9b:
f3:a1:dc:e7:f4:d7:61:de:76:51:dc:30:71:89:24:89:d3:30:
d7:e0:4b:b5:f9:fb:b8:9d:9f:e7:34:ea:b3:86:9d:b2:12:d2:
17:3a:dc:03:b9:5e:a8:e2:59:2b:95:8a:af:93:6c:11:94:81:
21:0f:d7:46:1a:5e:44:48:d0:2a:0e:62:ac:ff:71:ec:4f:4a:
5d:1d:e9:e0:ea:03:eb:62:59:32:e0:cb:57:9f:87:ba:d8:ab:
81:aa:8c:6a:79:63:89:f4:a6:c6:72:5e:98:38:f4:f1:7e:f4:
13:fc:be:3b:ec:5f:0a:0c:5a:be:9f:b2:b3:6c:3f:9b:75:11:
ab:ee:6b:fd:3b:84:68:cc:2e:5c:c5:d8:d6:c9:cc:77:e6:58:
e3:df:f7:2f:ec:31:67:56:96:b1:d9:4a:b5:43:45:c5:84:6c:
20:3a:d8:8b:cd:e8:38:89:15:a3:56:43:6a:06:d2:56:9e:dd:
13:e0:07:10:4a:d5:8a:c3:a9:e3:8a:cb:48:e3:de:4f:e4:af:
ae:09:0f:6a:11:4b:52:49:ef:a9:ab:f7:b2:cb:0d:5b:77:58:
86:84:ae:a9:fa:3f:55:65:5a:c9:4e:85:d9:e4:c2:f4:9b:b2:
f2:46:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:43 2025 by rpki-client