Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/f4-wFD0QqEcspXApnO_G4NwWdc8.roa
File: f4-wFD0QqEcspXApnO_G4NwWdc8.roa (raw, json)
Hash identifier: qpBfFwMlzp/OcFznO3bkAMLEjnpYaHNS/ChdP7EbykQ=
Subject key identifier: 7F:8F:B0:14:3D:10:A8:47:2C:A5:70:29:9C:EF:C6:E0:DC:16:75:CF
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 018EA8A7DE94219705C6259D3D0FD7061378
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/f4-wFD0QqEcspXApnO_G4NwWdc8.roa
Signing time: Thu 04 Apr 2024 10:29:17 +0000
ROA not before: Thu 04 Apr 2024 10:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202719
IP address blocks: 89.190.50.0/24 maxlen: 24
89.190.54.0/24 maxlen: 24
212.96.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:a7:de:94:21:97:05:c6:25:9d:3d:0f:d7:06:13:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Apr 4 10:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f8fb0143d10a8472ca570299cefc6e0dc1675cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:53:f3:73:0a:52:e6:c7:79:dc:72:42:8e:1c:
15:93:a3:3f:b3:ac:14:4e:1f:46:86:33:c1:88:30:
7d:ac:1e:19:2d:fb:12:c2:c7:84:ff:f1:eb:fe:70:
26:d2:9b:33:3e:9f:70:43:19:ea:0f:62:b6:5e:5b:
42:27:0f:ae:bf:b6:8f:71:88:5b:c4:ec:f6:eb:ea:
09:35:63:41:39:3d:6b:36:d0:75:93:fa:3e:54:8a:
f2:47:f8:16:af:57:18:ac:13:23:5f:39:3c:35:40:
be:cb:da:f6:28:f9:9c:1e:af:53:48:92:04:ba:b2:
5e:4d:b6:85:84:6c:29:4a:15:77:bd:dd:f7:5b:2b:
59:3f:ed:7d:2f:d9:ea:c7:57:86:3a:82:b7:52:b9:
49:d2:ab:36:85:37:3c:26:97:a4:66:d0:23:12:a2:
8c:28:f9:67:a7:52:97:e6:a7:49:1a:a2:e2:f4:53:
16:e9:14:3e:d7:76:cc:6c:86:af:2d:01:01:83:b6:
f2:fa:95:3a:f6:8a:ca:05:3e:59:94:9c:d5:23:d0:
cc:c1:59:5e:6b:f6:9e:b0:02:cc:40:06:e7:3d:8f:
ed:b1:1f:76:da:6d:94:38:53:a2:73:26:35:cf:94:
b5:b6:b4:c2:6f:64:1c:6c:8a:ce:5e:76:1b:74:2c:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:B0:14:3D:10:A8:47:2C:A5:70:29:9C:EF:C6:E0:DC:16:75:CF
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/f4-wFD0QqEcspXApnO_G4NwWdc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.50.0/24
89.190.54.0/24
212.96.167.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5d:78:ca:ad:84:d1:25:5c:67:bf:46:4e:b9:c4:25:05:37:
56:69:9a:93:1d:10:53:0c:f1:b6:a2:03:84:bc:26:83:36:11:
16:21:3e:46:80:2a:ac:d7:f4:ac:45:3a:73:e0:e8:3f:a8:ab:
c8:d8:55:5c:af:f5:d2:aa:2a:d3:87:cf:75:4d:1c:36:4b:bb:
3e:6e:6b:30:8c:ea:aa:68:9b:6d:51:bb:ff:a9:9b:45:f2:ee:
39:e5:61:fa:46:68:31:9c:2b:72:d6:94:b5:d1:9b:55:00:32:
01:89:08:b7:15:e8:7b:e3:ef:9c:48:ac:37:2b:45:aa:f8:ba:
9b:96:dc:06:96:5d:0b:39:c9:bc:98:d9:6c:9e:d1:b2:0c:f1:
63:0e:3d:96:bb:ed:be:4e:2b:c9:7d:a6:21:7f:9e:d6:b7:e6:
48:a6:0a:8d:5a:89:50:bb:22:cf:e1:a5:0d:cd:da:e4:dc:f2:
b2:96:92:ec:29:da:09:14:da:77:83:7d:60:11:8a:7d:5b:ab:
17:0f:db:9b:48:ac:1b:62:3a:66:7e:02:0f:d0:7d:d9:be:ad:
e3:1f:c2:ea:c4:4b:0a:e4:07:76:6f:d5:bb:3d:b7:33:90:f5:
05:38:f4:d3:35:6c:d5:9b:32:8d:23:90:c3:73:cf:4b:75:90:
26:d6:f0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:02 2025 by rpki-client