Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gTk1lcSv1GqBxkdnTSbhgp6FAvg.roa
File: gTk1lcSv1GqBxkdnTSbhgp6FAvg.roa (raw, json)
Hash identifier: EX5PQZJ6oQfWK6g98cGKTF+ao2Fov7GAVySIGEbxNU4=
Subject key identifier: 81:39:35:95:C4:AF:D4:6A:81:C6:47:67:4D:26:E1:82:9E:85:02:F8
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B42883C0A3893504E1F944388BE6E0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gTk1lcSv1GqBxkdnTSbhgp6FAvg.roa
Signing time: Thu 02 Jan 2025 15:48:25 +0000
ROA not before: Thu 02 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147049
IP address blocks: 89.117.202.0/24 maxlen: 24
89.117.205.0/24 maxlen: 24
89.117.210.0/24 maxlen: 24
89.117.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:28:83:c0:a3:89:35:04:e1:f9:44:38:8b:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81393595c4afd46a81c647674d26e1829e8502f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:79:13:f6:bb:44:72:43:34:86:7b:df:1a:
9e:c0:f4:c3:15:e0:00:2c:79:25:c3:04:fe:da:1d:
e6:dc:33:11:35:86:8c:18:09:dd:41:1e:96:39:1c:
3e:9c:46:38:a8:ca:3b:b9:36:98:e6:09:01:6d:22:
ed:ec:d8:90:d0:58:45:79:64:d2:d3:d9:22:86:1f:
dd:6e:2a:90:2c:40:bb:2d:fa:05:ee:57:cc:72:53:
1e:9a:24:32:48:4e:04:32:0d:fd:b0:69:b6:eb:e6:
b0:2f:c6:2c:15:ff:78:66:bb:41:27:23:66:a5:d0:
a1:65:55:d3:6e:6a:b3:e6:5d:74:7d:ed:9c:b8:a7:
0d:21:46:b6:df:41:10:d0:a6:79:59:0c:50:d3:a2:
44:86:7a:af:a9:14:04:3d:ec:81:27:2a:45:78:c5:
1f:47:9b:42:c8:4a:79:69:e0:e1:30:94:38:b1:34:
1c:9b:9d:3c:fe:ca:bc:64:64:fd:d7:7d:ac:b9:0c:
70:4e:89:c6:de:4d:45:93:15:3d:ac:d4:14:1d:61:
0f:2e:a0:8e:b5:b6:3a:28:b9:2a:63:cf:cb:95:23:
2f:b7:4c:6a:a7:7d:e8:2b:9a:e2:c2:02:81:be:03:
9c:e8:1b:be:55:84:b1:22:cd:d0:e9:25:49:e5:15:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:39:35:95:C4:AF:D4:6A:81:C6:47:67:4D:26:E1:82:9E:85:02:F8
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gTk1lcSv1GqBxkdnTSbhgp6FAvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.202.0/24
89.117.205.0/24
89.117.210.0/24
89.117.232.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e7:0f:b2:f9:76:ab:de:76:6e:70:2b:f8:10:04:d1:49:3e:
fc:1d:a6:24:db:07:b9:e0:3c:4d:87:bc:3f:28:4a:fd:80:5d:
e4:dd:4b:17:f6:72:47:cc:66:a3:50:a3:44:27:79:f1:7d:58:
c4:00:57:58:f2:d1:f5:61:89:76:d3:0c:98:a2:25:35:72:a3:
87:14:5a:48:de:aa:49:51:de:c9:3f:b3:c1:c2:d5:99:97:2c:
b7:98:7c:5b:67:0b:8a:fc:60:33:1b:47:a0:01:1a:68:25:5e:
a6:e1:41:fe:da:f2:dc:93:66:9d:2b:be:9a:23:40:55:9c:0b:
26:f1:51:fb:47:67:e0:9a:62:a2:96:9b:a0:df:77:51:70:55:
c7:e4:6d:5e:b8:31:fa:4c:9d:19:5f:19:5d:11:1a:73:21:22:
ec:36:52:f2:0c:f9:08:29:6f:ff:27:cb:23:71:69:91:09:d0:
2b:82:25:95:fc:17:73:76:59:33:1b:12:7b:64:f9:83:19:36:
e6:85:89:5f:1b:df:ee:5e:3f:5d:37:bf:ff:3a:74:6b:98:01:
28:04:c6:71:de:3a:57:a9:a9:36:a9:48:27:89:00:4c:be:27:
a6:9d:9c:77:80:32:ee:37:c2:05:a3:fb:b7:f5:70:d2:e6:a1:
5f:e8:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:21 2025 by rpki-client