Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/70-fJUunJdCeO6pvk6emj_pLfvU.roa
File: 70-fJUunJdCeO6pvk6emj_pLfvU.roa (raw, json)
Hash identifier: 08aax8640a1/M0xqNg6NMU1lvmk8H6NFdPTXPG5zCSg=
Subject key identifier: EF:4F:9F:25:4B:A7:25:D0:9E:3B:AA:6F:93:A7:A6:8F:FA:4B:7E:F5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A82E832A6A62829CD04AD5AE425F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/70-fJUunJdCeO6pvk6emj_pLfvU.roa
Signing time: Wed 01 Jan 2025 19:48:34 +0000
ROA not before: Wed 01 Jan 2025 19:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58078
IP address blocks: 89.37.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a8:2e:83:2a:6a:62:82:9c:d0:4a:d5:ae:42:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef4f9f254ba725d09e3baa6f93a7a68ffa4b7ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:57:ab:ae:2c:8a:73:02:ba:c5:c6:d1:7b:
b1:64:26:20:c9:62:bb:13:88:f0:e2:38:58:5f:4b:
3e:ff:42:61:bb:20:da:4b:59:6a:4c:14:80:eb:c0:
e0:97:9d:84:6b:70:ab:0c:79:a0:c8:73:9b:b3:c6:
c2:f1:d4:88:0d:99:ec:c2:78:66:ad:0f:3b:40:87:
69:4f:68:48:73:b3:02:1a:ba:b9:d7:89:cb:72:39:
89:90:9d:be:63:d3:00:fb:c5:09:ad:5e:d6:99:dc:
55:34:48:40:b7:87:64:90:3c:0a:b2:b8:3f:35:67:
f5:73:06:c7:aa:22:d5:31:65:41:a6:e3:21:43:e6:
d1:fc:6c:7e:76:e4:ef:96:3f:7f:63:5c:f6:6f:f2:
3b:8e:a1:be:4f:ac:e4:f0:45:a6:a7:fd:ff:48:50:
17:6d:9c:b8:74:32:6a:dc:3a:83:f4:bd:aa:91:76:
53:b2:e9:9a:1a:3c:a8:67:7d:e7:ea:1b:ad:fa:42:
92:80:db:7a:ee:36:30:ec:a1:22:80:f3:14:11:93:
0b:65:6d:7e:57:54:cd:48:d3:fa:b3:ea:00:d4:3a:
33:15:65:0e:d8:f9:9d:59:d4:94:3d:e2:f0:53:1b:
1e:67:35:9f:b8:3a:06:27:1c:5f:7e:af:72:a2:ba:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4F:9F:25:4B:A7:25:D0:9E:3B:AA:6F:93:A7:A6:8F:FA:4B:7E:F5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/70-fJUunJdCeO6pvk6emj_pLfvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.184.0/24
Signature Algorithm: sha256WithRSAEncryption
62:95:57:83:1c:48:2f:97:d4:9a:8e:79:2f:6b:d3:b6:72:96:
02:f8:63:d0:ea:07:7d:d4:4f:ed:55:d1:2e:1a:56:f7:e0:1c:
ff:f0:c4:8f:27:55:58:ec:47:c1:55:5c:83:d3:b1:48:0d:6b:
ca:74:fc:6d:a0:e3:e6:1c:98:21:3f:d0:c2:c0:77:56:35:a1:
88:70:35:7a:7b:5a:74:9f:76:14:b8:5b:3a:d7:06:61:9c:b7:
96:77:98:16:14:ff:26:40:3f:51:df:5c:3e:15:13:f3:54:93:
3a:dc:4d:9f:6d:10:e2:7b:1c:08:d4:46:91:36:ae:f6:76:20:
a9:a8:f4:33:8e:a4:31:2a:23:7e:a2:dc:82:b4:99:3a:83:a9:
fd:69:19:f8:c1:c7:47:6a:11:bc:46:ce:3d:07:c1:20:74:30:
8f:65:33:8b:5c:a1:ec:da:43:93:28:65:40:ee:b7:1d:3b:89:
2a:c9:a2:3c:db:82:24:04:57:02:3e:1f:d9:49:b4:db:c1:30:
1a:bc:22:18:6f:4d:5a:39:df:47:68:a1:d9:30:bf:b0:20:b8:
55:30:63:2f:6e:85:86:26:51:05:ef:06:a6:26:ce:a5:15:c5:
9b:a4:65:ac:16:bf:3b:ee:d5:91:d7:8f:54:f4:53:c2:55:e8:
7c:93:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:45 2025 by rpki-client