
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BBfmwFjQeEdIoU8vmjkpYVYfHZ0.roa
File: BBfmwFjQeEdIoU8vmjkpYVYfHZ0.roa (raw, json)
Hash identifier: X5NlIn80D8OeyTm6CQtSI03Cg14f1O/8MGrSSDvlkfg=
Subject key identifier: 04:17:E6:C0:58:D0:78:47:48:A1:4F:2F:9A:39:29:61:56:1F:1D:9D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0193E3160285AE76FB7675DB6335DEA7ED30
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BBfmwFjQeEdIoU8vmjkpYVYfHZ0.roa
Signing time: Fri 20 Dec 2024 08:01:30 +0000
ROA not before: Fri 20 Dec 2024 08:01:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48459
IP address blocks: 89.42.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:16:02:85:ae:76:fb:76:75:db:63:35:de:a7:ed:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Dec 20 08:01:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0417e6c058d0784748a14f2f9a392961561f1d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:76:b0:3e:bf:cb:6f:37:c0:3f:94:9b:7b:
c9:e9:e5:cd:7b:e8:59:1b:35:21:5d:07:39:2f:4f:
2f:41:d9:d9:1b:f3:5c:e8:a2:bc:8e:09:3b:d3:65:
e7:7c:38:45:27:7f:84:af:85:3f:a8:bc:8f:5c:35:
9f:13:1f:4c:78:07:ad:7f:b2:a6:6e:16:a0:6a:7b:
55:14:23:ac:44:21:97:62:54:da:2b:89:fa:09:79:
a6:8a:d7:53:e4:ca:ca:4b:c7:78:09:c5:42:1a:56:
43:2c:a4:19:8e:30:ed:b6:12:9a:b2:48:68:61:6b:
79:95:5f:b4:3c:ad:0a:6d:33:ab:f3:a0:ca:67:d7:
5c:4e:13:36:a0:1c:a7:78:e8:2d:8c:82:5f:f7:1e:
8d:25:15:06:82:d6:87:1a:98:97:b1:8b:93:0e:50:
4b:7f:fb:70:3c:ec:68:2c:94:70:23:ce:ac:fd:13:
26:85:fe:f2:69:31:d9:af:ad:b7:a2:72:1f:b5:92:
f5:18:22:a8:55:5f:08:19:b5:6b:3a:cb:1f:25:de:
d9:fb:c0:83:be:eb:ed:f4:13:77:f1:96:58:34:8c:
59:b3:25:62:b7:c5:0c:05:ff:95:0a:20:27:a3:f7:
40:23:a4:b4:34:45:3c:86:77:ad:40:03:94:87:4a:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:E6:C0:58:D0:78:47:48:A1:4F:2F:9A:39:29:61:56:1F:1D:9D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BBfmwFjQeEdIoU8vmjkpYVYfHZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.41.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:bc:cb:14:9e:b0:37:c1:dd:62:03:04:d0:91:b8:68:b3:f2:
67:84:7d:23:2c:34:9a:87:a5:2b:99:d1:73:c4:a7:b6:97:8e:
44:75:f5:60:74:e3:c4:19:13:9a:13:13:28:73:53:30:f4:a6:
5a:e7:52:2a:2d:48:7f:46:5e:5f:93:3c:45:4d:e2:82:76:45:
f0:6a:bd:37:b3:44:b3:e1:21:2a:07:6f:6f:ec:b8:3c:37:57:
77:01:42:77:73:70:fb:06:6c:cf:dd:34:c3:e9:8a:f8:12:52:
18:37:13:43:e9:3b:be:b7:23:e1:05:0d:06:a4:e5:00:0e:52:
a6:fb:14:d5:e6:3c:f3:1a:6a:5e:24:f9:b8:1b:2b:61:33:63:
45:29:14:6f:da:92:a2:1d:b5:46:9a:cb:2d:dd:94:e5:05:e5:
00:2b:50:85:00:7c:f3:75:53:b9:5b:93:db:ae:fd:ec:4b:47:
1c:4c:7e:fd:ab:f8:ac:a1:13:ba:c4:00:5e:a6:1e:81:2d:75:
0e:82:a1:9c:f7:66:85:92:fc:d9:32:29:f2:ae:d0:9c:04:94:
9a:2d:2d:86:eb:dc:59:c0:51:ed:0f:34:89:43:b8:72:fc:2d:
03:a4:c4:f6:23:7c:0d:c3:5f:75:ae:d7:99:b2:1b:ef:27:93:
b8:aa:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:36 2025 by rpki-client