Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa
File: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (raw, json)
Hash identifier: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=
Subject key identifier: 85:1F:CE:EA:8A:D0:ED:52:28:41:94:73:D0:5B:7F:AD:0B:6B:8E:61
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01942143AE9818D0DAF007DB2225BC699718
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12642
IP address blocks: 87.239.199.0/24 maxlen: 24
91.195.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ae:98:18:d0:da:f0:07:db:22:25:bc:69:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851fceea8ad0ed5228419473d05b7fad0b6b8e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:1c:89:66:ff:6b:e3:70:cd:55:51:d3:ac:
e1:69:62:46:8b:fb:aa:30:1f:c1:57:5d:d2:e7:0d:
fb:c1:7d:35:0b:09:f0:64:e2:13:64:01:88:aa:62:
4f:0e:6f:2e:3b:53:ff:47:ed:e4:a2:41:40:97:9a:
76:32:89:8e:e7:0e:a7:25:e7:5a:e6:25:cd:b0:8c:
c3:22:69:2d:eb:11:ac:9b:e6:64:90:b2:0d:f4:d9:
e5:28:95:98:7c:6b:ed:44:ad:c6:ba:a9:ad:f5:ec:
5a:ef:99:5f:da:f7:f3:05:64:c9:d3:0f:32:5d:ff:
90:3e:e1:08:9a:1a:42:e7:9a:48:32:0a:0c:6f:6a:
6e:8c:23:fb:a8:02:a5:1e:48:a4:a4:9b:af:ba:1e:
93:e9:03:3e:fd:cb:d8:02:fd:4c:74:c1:b7:33:7d:
44:b1:86:80:67:25:06:29:5d:e3:ea:30:20:3e:e5:
b8:f4:1f:cd:3c:51:9d:d1:c6:be:d0:12:8e:b5:88:
f3:cc:59:5c:cc:78:7b:52:eb:35:0e:dd:9a:67:15:
46:6f:c7:b6:1b:5d:e6:ba:47:94:96:0d:0b:ca:2b:
1d:bd:f0:59:21:ee:1c:96:95:3a:53:d8:9e:c8:78:
3e:cb:dd:31:24:48:9d:4d:bd:63:36:39:7d:ab:59:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1F:CE:EA:8A:D0:ED:52:28:41:94:73:D0:5B:7F:AD:0B:6B:8E:61
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.199.0/24
91.195.191.0/24
Signature Algorithm: sha256WithRSAEncryption
02:57:10:05:43:e6:15:07:53:28:e0:c0:64:b7:94:6c:39:15:
f3:08:75:ac:a2:47:49:0c:ff:de:6f:63:74:e0:4e:5c:08:1a:
c9:bc:9a:02:93:17:17:e0:3f:87:e1:7b:16:5e:6f:99:6b:e7:
2b:46:01:15:db:53:11:51:ad:f0:87:69:b9:16:c5:ef:4e:cf:
3a:74:a9:5b:02:ca:86:03:d5:32:81:b1:8a:fb:3a:2f:90:b3:
38:d8:1f:91:ed:2a:7f:09:9f:f3:c4:68:81:40:e3:b3:70:c5:
25:23:5f:11:d5:af:29:83:0c:da:b5:2f:33:46:24:9f:6a:36:
32:23:ae:28:e4:9f:0d:c7:36:21:cb:f0:47:24:d0:53:be:91:
d7:2b:c6:23:8c:4a:71:7e:4c:9e:f6:7e:1c:80:9c:12:9e:9e:
27:0e:1d:c2:b3:90:13:af:f1:fe:5e:28:27:43:04:5c:b5:f9:
0f:7c:30:45:1e:8e:77:eb:6e:ba:f6:66:50:23:91:44:54:9c:
1e:9b:7d:28:25:bb:92:ff:62:da:89:8d:25:15:14:8f:d2:30:
8e:48:cb:4c:0a:30:31:e8:07:3a:1a:1c:e1:8e:98:e6:9d:1c:
16:98:15:4e:35:a0:d8:93:d5:8f:14:c0:bf:84:16:93:93:fd:
69:26:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:54 2025 by rpki-client