Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9-oB0IHV-YN7raFIiqDPlqsXoms.roa
File: 9-oB0IHV-YN7raFIiqDPlqsXoms.roa (raw, json)
Hash identifier: k8auLtRGc+PwWG12jA2C111GO34KFhE0pJovZcfemUg=
Subject key identifier: F7:EA:01:D0:81:D5:F9:83:7B:AD:A1:48:8A:A0:CF:96:AB:17:A2:6B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A45FD446ECA5518363DD4E5EFB4C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9-oB0IHV-YN7raFIiqDPlqsXoms.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57009
IP address blocks: 89.43.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a4:5f:d4:46:ec:a5:51:83:63:dd:4e:5e:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7ea01d081d5f9837bada1488aa0cf96ab17a26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:63:75:5d:40:d0:86:20:9a:5a:d6:c4:b9:
75:bc:a0:26:3a:d5:96:96:cd:b1:f4:7d:40:27:83:
c9:5f:6f:27:ce:51:cb:e5:b4:cc:36:df:15:3c:a4:
8b:27:f5:18:bb:7c:91:c4:0a:70:cc:09:52:81:82:
a3:52:d2:8b:45:ac:8d:ae:83:7a:8f:9a:22:13:e3:
8b:e2:33:1d:eb:df:8b:72:ec:54:03:9a:53:bd:ea:
8b:5d:a4:e4:b5:b0:33:ff:36:21:27:1e:86:af:ab:
da:f3:fd:8b:67:f9:b2:02:46:a5:6f:36:91:56:e4:
79:9f:c9:b1:f8:e8:9c:7d:ea:0a:a4:2e:2b:e1:27:
f8:c5:4f:d8:2d:43:ce:c9:08:9f:72:76:d9:60:d8:
9a:87:4f:53:fb:bb:f9:ac:22:f7:a9:25:71:68:f0:
64:d3:32:d4:9d:7f:ff:43:a6:14:16:92:c2:f4:83:
32:4d:e1:73:7c:76:75:7d:b5:c4:b5:89:de:64:c7:
86:77:b0:cd:20:e9:81:57:9a:b0:c6:aa:3c:ba:ab:
7e:45:34:73:22:28:55:aa:13:24:12:f4:f1:1c:34:
cf:1f:32:db:a3:fe:25:73:bd:0d:cf:38:78:2b:44:
db:1f:86:9e:88:e9:50:01:7f:c6:82:15:de:e5:e6:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:01:D0:81:D5:F9:83:7B:AD:A1:48:8A:A0:CF:96:AB:17:A2:6B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9-oB0IHV-YN7raFIiqDPlqsXoms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:15:f6:f9:4b:e3:b5:71:09:10:be:40:1e:e0:17:e2:a7:ac:
b7:bb:f6:46:28:fe:1f:8b:0f:0a:7d:87:9a:02:a7:40:90:41:
55:e1:88:f3:41:20:9a:33:49:51:03:c2:dd:29:b0:96:b9:ea:
df:35:ec:35:63:0f:33:09:f5:7e:8a:b6:2d:a8:e6:3a:d6:c7:
03:7d:93:62:85:8b:5f:b9:8b:ab:8d:59:51:f7:56:03:2b:2d:
3d:36:f3:90:69:97:66:54:60:2c:ed:a0:7b:a8:e8:c7:4c:e6:
45:65:b3:53:ff:17:ec:32:11:bd:26:81:70:de:87:7f:4b:7d:
6a:9e:4e:85:23:03:0d:9e:a4:5f:3b:6e:11:c2:d8:ed:d9:a1:
c2:ab:aa:4a:4f:ad:9a:8a:51:8e:72:d7:9f:b9:61:2d:ea:48:
56:12:0b:c7:28:f0:bb:07:4e:e7:01:3c:14:b2:ff:24:ff:e5:
37:f0:1c:54:7d:c1:11:d2:72:27:c0:24:01:25:d6:a0:88:97:
c2:aa:3c:f7:a5:14:65:e5:f7:34:88:47:72:f9:e3:8e:cc:f0:
14:82:c0:85:b8:28:f5:12:79:ff:a7:4d:41:ad:95:a2:38:4d:
c4:cf:c6:41:5d:b5:f7:95:0a:eb:7c:6e:a3:f6:a7:c4:81:8f:
3d:c1:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:46 2025 by rpki-client