Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/FuyO4nKRxR39tBuC6eKFQfxQwrc.roa
File: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (raw, json)
Hash identifier: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=
Subject key identifier: 16:EC:8E:E2:72:91:C5:1D:FD:B4:1B:82:E9:E2:85:41:FC:50:C2:B7
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01942143B0EFFBEADB3CE2D86C27787CE111
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/FuyO4nKRxR39tBuC6eKFQfxQwrc.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48136
IP address blocks: 95.131.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b0:ef:fb:ea:db:3c:e2:d8:6c:27:78:7c:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ec8ee27291c51dfdb41b82e9e28541fc50c2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:67:5f:d7:b3:15:8b:8e:51:82:9a:ad:27:
ec:fc:5f:91:eb:d8:c0:3d:64:95:dd:a0:0d:c0:2a:
7c:3e:52:36:36:c2:85:bd:07:24:ae:6a:d7:b8:19:
1f:75:26:05:1b:89:07:7e:ea:6d:fe:85:76:bf:ca:
95:df:5c:b4:04:17:d9:e2:1f:99:6e:0e:5f:88:17:
c5:6b:fb:56:37:4f:6d:a6:b9:ba:c5:3d:07:a5:ce:
cb:98:c7:23:da:46:67:e7:28:99:9d:d3:ec:36:7f:
3a:87:50:02:de:47:5b:74:52:c9:67:55:d2:65:1c:
d7:25:a9:5b:7f:e5:97:7b:e6:04:0d:db:1c:a3:aa:
07:ca:b9:54:0c:12:64:b8:fb:1a:b1:b9:44:bd:10:
ff:a1:24:c5:fe:67:2d:d4:b6:a7:58:c5:e7:34:1e:
9e:7a:26:b9:29:6a:bc:9f:54:da:04:a9:77:03:58:
a6:5a:76:90:9d:a8:dc:07:30:2b:4d:f3:4c:43:68:
a5:ca:7e:21:41:35:df:c1:80:a3:dc:9c:60:40:17:
00:fb:2c:60:8d:f1:1e:7d:b5:67:15:60:e3:c6:9e:
e4:ad:c1:1c:c4:18:c2:49:53:67:c6:25:2e:8e:f7:
94:7e:a6:3c:87:f6:ba:cb:bc:f0:e9:01:3f:bc:b1:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EC:8E:E2:72:91:C5:1D:FD:B4:1B:82:E9:E2:85:41:FC:50:C2:B7
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/FuyO4nKRxR39tBuC6eKFQfxQwrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.32.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5a:6a:d0:d3:51:83:e6:8e:f2:64:0e:4f:6c:6c:d0:06:62:
38:6c:c3:16:c5:f9:83:89:75:14:57:f1:85:24:84:da:33:36:
4c:da:f3:74:06:85:f0:b5:90:a0:92:78:17:43:23:32:04:e1:
d4:b7:b2:67:1a:0c:54:0b:1b:87:30:fd:dc:48:d0:64:95:e7:
96:e4:77:d6:e6:42:86:4f:d0:2a:d3:8e:4b:c5:22:88:1b:13:
d5:76:c1:35:f5:00:fd:83:ea:d6:4a:2c:2a:25:68:82:21:a4:
5e:7f:c5:57:64:d0:23:d5:ee:9b:26:a7:c2:08:c8:f4:4a:ba:
c5:bf:6f:a8:5a:3a:ee:49:5e:6c:05:74:e1:22:cb:05:4c:a9:
d9:f2:8d:ad:b7:1c:85:d7:bb:ef:86:fb:47:78:75:f9:3a:65:
cb:6d:4b:98:ea:60:46:f3:89:6b:45:6f:6c:fe:e7:35:ec:74:
a4:8a:33:c8:72:ac:cf:68:17:c6:aa:db:a1:1f:4c:e1:90:a4:
40:1f:0f:3f:a1:95:60:3f:0b:9e:96:ad:46:b4:f2:e7:10:2f:
40:74:58:6f:4d:66:25:f3:c9:28:b3:d5:92:74:64:b7:b7:a1:
82:df:fd:7a:1b:d1:ef:84:03:ad:ac:7f:6b:19:40:b5:0a:3e:
bb:0d:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:05 2025 by rpki-client