Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa
File: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (raw, json)
Hash identifier: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=
Subject key identifier: 09:B8:44:6C:C9:F8:00:A5:55:AA:05:A8:5F:6F:D9:03:23:DC:66:F5
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D3CB2F88F967E0253111AFB61A2F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa
Signing time: Thu 02 Jan 2025 17:50:24 +0000
ROA not before: Thu 02 Jan 2025 17:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47798
IP address blocks: 89.3.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d3:cb:2f:88:f9:67:e0:25:31:11:af:b6:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09b8446cc9f800a555aa05a85f6fd90323dc66f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:f7:52:d3:3c:64:ca:6d:cd:cd:e8:29:bc:
04:34:3d:99:8e:8f:22:3d:80:9f:89:48:d5:5a:0d:
f7:a1:f5:74:8d:e3:3a:48:4b:ad:89:33:ef:76:92:
72:6a:80:f5:69:f0:17:56:c8:5e:12:0e:07:61:df:
20:8b:d0:d1:ab:84:e6:a6:52:5f:37:24:a5:58:32:
9a:c2:87:f2:18:b2:73:97:c8:71:92:43:fd:0b:ce:
f6:fc:02:2e:36:29:d0:4a:0a:f3:40:6e:1b:f5:a3:
a2:91:29:2c:e3:8e:bd:f3:d3:44:b3:e0:61:34:cb:
b6:51:08:85:33:9f:e9:e7:05:76:7b:a9:77:9b:96:
7c:99:0b:72:eb:a7:b9:05:5c:26:d5:dd:fd:e4:7f:
04:7f:af:88:2b:6b:09:d7:e8:34:57:34:73:72:4e:
6a:48:8e:3a:c3:e7:ae:9d:38:d0:75:6d:cc:22:df:
99:a3:45:1f:15:17:ed:ac:9a:16:1d:b2:1e:ab:96:
3e:78:a6:7c:09:83:2f:f9:26:8c:e7:48:f4:a4:50:
e7:9b:33:2e:4e:92:7c:17:4b:dc:2b:d8:2f:5c:eb:
9d:78:87:21:cc:de:c9:5e:34:b4:68:10:e1:54:75:
85:aa:c4:a8:ce:c8:53:f6:b7:44:0c:4d:64:02:0e:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:44:6C:C9:F8:00:A5:55:AA:05:A8:5F:6F:D9:03:23:DC:66:F5
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.3.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:37:bc:d6:b8:08:8c:5d:94:fd:10:3c:a9:44:64:9d:d9:e0:
b8:9b:4e:60:69:e1:23:4b:1e:5d:0d:3c:22:3d:c3:b2:1a:4f:
4a:01:b2:4d:3b:d5:04:2d:28:d7:6d:64:38:66:0c:2b:b6:fa:
b5:ef:4e:b5:d8:aa:da:62:6a:42:3a:a3:66:1a:6b:10:5f:8e:
bd:35:7c:0b:c0:55:11:0b:41:6c:f4:fe:66:4b:ec:1a:d0:cd:
90:c4:2e:90:f6:7c:4d:01:7c:6b:e9:3e:c4:5c:0f:fe:68:51:
01:4f:d4:d8:11:20:a3:99:8b:61:93:b3:b6:0a:e3:9a:84:12:
94:a6:dc:1e:29:73:6a:ee:01:07:cb:bb:86:45:eb:b3:68:cb:
e4:ab:49:26:fb:85:e1:7e:b9:16:a4:f3:82:b3:7b:dd:c0:71:
97:32:2a:5c:51:e7:52:c0:3f:25:c7:04:95:da:83:18:9b:18:
05:24:07:78:10:18:10:30:94:a6:ab:39:78:24:6d:7c:23:2b:
54:78:5a:03:ce:49:78:70:ab:9e:dd:7f:26:62:87:e3:6c:0b:
02:e1:dd:c0:dd:eb:98:47:ac:b4:13:03:cd:29:16:d5:d8:62:
3c:55:92:f2:2d:14:01:d5:1b:39:86:80:9d:6e:5d:32:cb:e1:
53:26:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:57 2025 by rpki-client