Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/zRq1AsKz6guKDH8M_O8JK4YJ0Wk.roa
File: zRq1AsKz6guKDH8M_O8JK4YJ0Wk.roa (raw, json)
Hash identifier: P0kGpfGmctElcabCmea6dywJDPySZ58B39fy6Zb6vOA=
Subject key identifier: CD:1A:B5:02:C2:B3:EA:0B:8A:0C:7F:0C:FC:EF:09:2B:86:09:D1:69
Certificate issuer: /CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
Certificate serial: 018CC726C32D2C17195E68D2884A996F7B6F
Authority key identifier: EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/zRq1AsKz6guKDH8M_O8JK4YJ0Wk.roa
Signing time: Mon 01 Jan 2024 22:30:55 +0000
ROA not before: Mon 01 Jan 2024 22:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 89.106.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c3:2d:2c:17:19:5e:68:d2:88:4a:99:6f:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
Validity
Not Before: Jan 1 22:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1ab502c2b3ea0b8a0c7f0cfcef092b8609d169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:3c:d1:bb:86:11:74:9a:9d:db:8a:58:dd:
ff:1a:1b:41:ed:1d:ba:93:32:a9:67:b7:a8:03:b8:
74:3b:49:cb:02:b1:31:85:8c:17:5d:49:2c:ef:1a:
b8:5a:24:cf:1d:da:09:33:9d:e1:a9:d0:bb:8e:bc:
be:25:1e:10:e4:7b:5e:ed:c3:fb:bd:23:e4:70:d5:
32:9f:95:7c:16:60:1b:f8:57:ce:de:6f:a1:26:10:
35:ea:4b:fe:b2:2e:d4:ce:ea:1d:96:cf:0e:92:bf:
56:df:fa:d5:0c:65:9a:69:73:9a:3c:46:df:d0:bc:
97:c3:5b:85:2f:3c:aa:0f:a6:7d:25:c0:c0:d2:05:
63:16:4d:66:3f:01:f0:b6:ba:b7:de:1a:9a:ed:84:
6c:38:99:f8:8f:3e:07:d6:46:03:85:b0:0b:3f:2d:
08:f6:1d:2f:2b:44:e5:71:06:1a:d9:e2:ed:87:06:
e0:e0:1d:d7:ef:06:2f:23:7c:16:c7:a8:76:76:f1:
06:19:ac:66:2e:15:90:07:e1:f6:78:8d:df:23:76:
c7:3b:6c:5c:49:13:ca:94:5f:23:bd:f0:db:5e:d8:
a5:d4:8c:31:94:7f:4a:02:36:99:ce:2b:57:01:59:
28:26:f4:57:e4:98:8e:7a:6f:76:1e:4d:94:5c:8f:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:B5:02:C2:B3:EA:0B:8A:0C:7F:0C:FC:EF:09:2B:86:09:D1:69
X509v3 Authority Key Identifier:
keyid:EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/zRq1AsKz6guKDH8M_O8JK4YJ0Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b6:2a:fc:be:ca:86:43:5e:cd:3a:d5:26:85:4c:c5:58:73:
e2:c0:a5:0f:7f:e1:7c:4e:da:f5:0e:37:fe:ee:c1:82:d0:6b:
60:f4:2f:02:98:78:47:a5:67:e8:1d:3b:c1:10:ad:d5:8b:e5:
73:9a:94:e6:99:25:8d:1a:70:aa:55:06:02:22:5c:a8:d5:9a:
95:7c:e7:c1:09:53:f1:4f:61:29:e8:fe:63:55:62:42:8f:ba:
fe:e6:80:cb:14:30:36:a0:4a:f6:8f:4c:dd:66:83:6f:23:a8:
9d:82:b4:22:2e:86:8d:2c:a3:e0:c7:6f:c2:2b:64:94:34:c9:
89:a4:0a:31:b2:d7:96:bf:70:4e:97:33:d2:8e:01:5b:81:5c:
f7:1d:20:1a:c4:57:e0:95:7e:87:ca:01:ba:ca:e9:2c:a0:d2:
a1:96:f2:70:8c:82:20:ac:7b:75:ef:48:cb:f9:54:2b:bc:ef:
da:09:bc:e3:de:78:53:24:d2:64:5e:12:73:da:f9:25:9b:76:
cc:55:b8:79:6e:74:6c:8c:7c:ce:95:64:57:4d:f4:4d:79:d8:
71:b9:da:57:55:8d:25:f4:af:b7:02:12:fb:69:5b:39:e4:79:
2d:70:f2:a8:39:26:93:6b:1b:d4:d5:ec:36:8e:b8:4b:d6:df:
43:bf:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:57:58 2025 by rpki-client