Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/mG4zzckutUTXDNulLHgBGFAmIIk.roa
File: mG4zzckutUTXDNulLHgBGFAmIIk.roa (raw, json)
Hash identifier: eGt/Sr6TpZATYiuGGofZw2hGas45nSqsv7XPqa4riEk=
Subject key identifier: 98:6E:33:CD:C9:2E:B5:44:D7:0C:DB:A5:2C:78:01:18:50:26:20:89
Certificate issuer: /CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
Certificate serial: 01856F42BE394FA4FF1A6D8664855DF4157B
Authority key identifier: EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/mG4zzckutUTXDNulLHgBGFAmIIk.roa
Signing time: Sun 01 Jan 2023 21:35:23 +0000
ROA not before: Sun 01 Jan 2023 21:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 89.106.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:be:39:4f:a4:ff:1a:6d:86:64:85:5d:f4:15:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
Validity
Not Before: Jan 1 21:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=986e33cdc92eb544d70cdba52c78011850262089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1c:82:52:a1:03:a1:60:2b:34:da:70:a3:72:
82:10:ca:c5:ce:85:6f:44:6d:42:c0:33:0f:5f:36:
82:c7:41:9f:ac:75:38:ec:5f:c1:71:12:6b:65:0a:
9d:55:ab:9f:a6:34:94:9b:19:f9:c4:3f:48:02:8d:
79:fc:24:33:49:c1:51:34:af:48:47:b7:6d:e6:bb:
88:fb:12:33:52:ae:e5:b3:88:21:a1:e0:5b:0f:93:
39:dd:a7:2a:7e:07:27:a4:82:3f:b3:6b:94:2c:2c:
d2:0f:7c:1c:74:8b:89:26:62:1c:c1:0c:f0:3c:c2:
23:a8:e7:cd:40:b5:46:74:6b:7f:6a:73:04:d1:a3:
5e:17:0e:0f:78:68:2f:2c:91:04:71:a5:0d:81:39:
c0:ce:47:d9:51:6c:e3:48:1f:a8:bc:a4:44:f4:24:
8d:94:62:28:8e:f0:f1:5d:cc:08:34:98:86:ad:4d:
b8:a2:a6:5d:bc:68:b5:4c:1f:10:87:ca:69:4d:b9:
91:1c:66:1c:46:f3:1b:a8:e9:87:1e:77:d0:75:1a:
3b:c4:ec:d6:3d:f2:17:f1:1d:07:b2:79:65:d0:98:
7f:b1:d7:76:81:dd:53:d0:65:87:78:3b:1a:88:84:
43:39:95:14:a1:63:8c:6a:89:e0:1e:cb:b0:b4:65:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:33:CD:C9:2E:B5:44:D7:0C:DB:A5:2C:78:01:18:50:26:20:89
X509v3 Authority Key Identifier:
keyid:EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/mG4zzckutUTXDNulLHgBGFAmIIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.204.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fb:88:39:53:77:f7:57:14:63:7e:fc:36:e4:2a:ba:d8:e3:
f9:a3:6d:23:3c:96:96:4c:40:13:fe:a5:05:fe:9d:a9:b1:37:
74:d6:c1:de:ae:5a:1e:9e:68:25:7b:5c:8a:11:c0:84:15:e5:
8b:22:61:89:ec:e6:69:5c:4a:6f:91:99:67:3c:e9:5e:7e:7c:
89:87:a1:16:8b:4e:5d:26:83:35:d7:83:fa:f9:3f:2c:c5:6e:
91:4a:3a:5d:22:ea:4e:ed:fd:84:04:df:10:d2:6d:52:08:86:
a1:9b:aa:bd:d6:e5:6f:6f:14:62:dc:0f:a7:31:04:7f:fa:7e:
b0:62:4d:56:35:55:71:d8:61:27:97:f7:ca:77:1f:6d:66:56:
23:33:98:bc:93:c5:16:74:26:9a:72:a0:97:45:e7:56:6a:f7:
85:8b:f1:a3:84:ae:f6:b4:4b:6f:e2:46:5d:12:a9:5b:67:07:
50:09:71:9d:b1:34:9d:e1:cf:d6:01:1b:cd:e1:b6:2f:7f:36:
16:bf:6c:58:9d:8b:c4:55:91:b6:6c:e0:3e:27:6d:3f:44:87:
df:9f:b5:4c:99:0e:ab:37:9a:13:e5:08:65:93:93:29:68:7a:
c2:83:db:21:b0:a2:3e:a3:64:e6:c9:32:8d:f2:50:18:41:c4:
ae:cb:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:58:07 2025 by rpki-client