Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/C-SzX5D0oJO9FKH2-DYP-TcSTa4.roa
File: C-SzX5D0oJO9FKH2-DYP-TcSTa4.roa (raw, json)
Hash identifier: lKKYrKtx8jKGtV/tNbhLAv4Q0ejljim7KAcN6YB7n/g=
Subject key identifier: 0B:E4:B3:5F:90:F4:A0:93:BD:14:A1:F6:F8:36:0F:F9:37:12:4D:AE
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 018463054FD959D45900F57B1D10573EB254
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/C-SzX5D0oJO9FKH2-DYP-TcSTa4.roa
Signing time: Thu 10 Nov 2022 19:30:03 +0000
ROA not before: Thu 10 Nov 2022 19:30:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 89.34.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:63:05:4f:d9:59:d4:59:00:f5:7b:1d:10:57:3e:b2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Nov 10 19:30:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0be4b35f90f4a093bd14a1f6f8360ff937124dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:6b:e8:52:c5:f9:73:24:86:bd:78:35:9e:
23:59:77:3a:89:ef:5d:d7:83:ef:e8:da:28:61:5a:
dc:c5:a9:ca:68:1a:62:5b:9d:5b:54:8e:99:cd:a0:
16:3c:17:1d:21:7e:f3:a1:40:1e:43:6e:8e:36:66:
af:45:91:6f:92:67:dd:65:fc:30:eb:b8:fa:90:04:
02:45:74:c5:82:d4:f6:a5:d5:b4:7e:bf:f1:a0:4a:
83:41:a2:5e:16:b1:7b:d6:ea:4e:20:15:bb:d7:e0:
4a:1a:42:45:4b:f3:d8:8b:c6:57:85:e4:ce:5b:6a:
81:d1:bb:09:52:eb:65:11:52:3b:75:c7:dc:e8:3c:
95:39:b6:3f:ce:0f:9e:01:ec:b7:80:35:4d:c6:0c:
23:a7:4d:ce:4b:69:eb:68:7a:ea:da:e0:6e:f7:96:
b4:66:e6:40:b9:6f:a4:b3:2f:31:a2:34:65:8f:0b:
6f:d9:8b:e1:04:a3:36:83:12:22:0b:2c:1d:7a:3d:
d0:ed:cd:a1:9a:7a:21:a6:27:b2:d7:52:82:44:52:
61:dc:73:d6:b5:f6:0a:ac:d1:92:f5:a5:72:ab:08:
08:f6:c8:4c:10:80:93:c8:79:3b:6c:b5:8a:09:7f:
3c:78:64:f2:05:dc:e1:c5:ea:cf:b2:d6:51:25:73:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:B3:5F:90:F4:A0:93:BD:14:A1:F6:F8:36:0F:F9:37:12:4D:AE
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/C-SzX5D0oJO9FKH2-DYP-TcSTa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
87:30:9e:2b:bf:c9:95:39:46:a6:de:56:d4:45:df:5a:44:54:
50:36:f7:00:58:22:eb:b5:5b:d5:5f:f7:a0:7b:dc:b8:5e:98:
6a:82:5f:b9:c0:a0:f0:7f:e7:86:1e:fd:41:e0:95:73:ed:96:
8f:5c:42:4c:2d:a8:e4:70:3e:a2:e4:12:db:be:17:89:00:62:
11:21:eb:84:ea:45:dd:2b:76:d2:6e:f0:4e:8c:ae:a8:9e:d8:
91:6f:eb:e8:7c:46:76:8d:bc:16:3a:f4:65:2f:d6:ef:57:26:
b3:9e:75:23:0d:b2:86:17:19:c2:1d:7d:67:a4:ca:72:a6:2a:
a1:43:8e:e3:59:43:82:99:fc:81:bd:b2:5d:a9:48:75:0f:88:
89:cf:d1:b0:91:44:c2:43:2a:d2:ee:40:bf:5a:bf:e9:59:3d:
81:e6:90:23:ee:20:bb:1e:9a:b2:8a:22:20:5c:b5:28:29:1b:
8e:05:76:0c:77:7f:f6:42:6c:b6:e1:bb:ed:89:55:2f:6d:54:
94:a4:84:46:d7:18:2b:8f:ac:00:8f:70:db:d8:13:f8:7e:4a:
d4:64:6b:2d:99:24:f0:64:e8:79:fb:6e:c3:e1:27:f5:67:cf:
6a:63:09:3d:24:4f:c1:0f:3e:f0:26:ef:40:ca:b0:56:a5:6a:
b0:1c:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:31 2025 by rpki-client