Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BemYATbHrOU5ETDbOT9q-ivKRnE.roa
File: BemYATbHrOU5ETDbOT9q-ivKRnE.roa (raw, json)
Hash identifier: piZxntIrcqOmQC4P1pJTSDOsHeY9+Q4wmmjmnN18QyA=
Subject key identifier: 05:E9:98:01:36:C7:AC:E5:39:11:30:DB:39:3F:6A:FA:2B:CA:46:71
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236996C338EA3ECF5078FDEB62C349A9
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BemYATbHrOU5ETDbOT9q-ivKRnE.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48459
IP address blocks: 89.42.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:96:c3:38:ea:3e:cf:50:78:fd:eb:62:c3:49:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05e9980136c7ace5391130db393f6afa2bca4671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:26:a4:b3:ea:97:c3:58:bc:f9:40:8f:8f:
95:27:29:9e:fe:e4:92:75:11:bb:d7:34:dc:45:f8:
a0:38:ae:dd:d6:0d:9d:43:23:d7:49:77:04:fc:86:
51:7e:24:7b:43:d4:9d:06:07:67:49:fb:de:1f:41:
7c:86:cf:be:b0:23:68:1e:cc:bb:ac:1a:45:fb:28:
de:6b:fc:d0:c3:d1:ce:b0:88:25:0e:16:83:da:fe:
1d:15:31:2e:b2:7d:1f:04:0e:09:c8:e8:23:19:77:
4f:1b:3f:41:66:0e:fd:a1:b8:34:24:92:cf:ec:46:
25:ce:a0:76:cf:fd:12:65:31:fc:2d:c3:a3:41:fa:
eb:2c:0e:f7:58:bc:5b:78:10:82:a7:6d:f7:ec:75:
50:3f:e0:bc:6a:66:3f:54:33:c6:72:86:be:96:93:
9b:8f:bc:aa:64:49:70:aa:c1:ee:02:92:76:8d:f5:
c9:85:c3:30:fa:ba:7b:68:e8:24:bf:c2:7f:43:20:
5a:5c:3d:54:cc:32:41:dc:ed:9d:d1:65:1a:fd:3c:
21:14:55:51:15:84:1c:a6:44:ec:d5:e4:e3:b6:8b:
56:b5:cc:4a:2f:d2:1e:63:42:10:dd:0f:89:e7:ed:
ca:e2:72:d6:f1:f5:4c:54:c7:5b:2b:a0:6e:0e:5a:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:98:01:36:C7:AC:E5:39:11:30:DB:39:3F:6A:FA:2B:CA:46:71
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BemYATbHrOU5ETDbOT9q-ivKRnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.41.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ed:d3:1d:e5:c5:8c:42:75:e6:4f:9b:5c:66:ad:0c:b7:34:
4f:d7:84:70:ce:2a:7c:80:ec:77:9d:be:80:37:12:d9:d7:b8:
93:bc:85:80:fb:82:1f:88:29:cb:aa:62:8e:38:ed:18:5c:7b:
9b:b2:98:7e:30:56:3d:2e:1e:e7:44:7a:06:0d:d2:84:ef:c9:
a6:19:c0:54:2c:50:54:ee:97:5f:45:e6:af:89:21:7c:b2:2f:
e1:39:7e:bd:83:36:ba:9a:ad:40:89:68:e9:48:04:5d:7b:44:
38:6a:af:23:63:52:73:19:81:89:f8:13:2e:d4:09:77:c2:46:
24:43:ee:72:40:9b:54:66:2b:bc:8f:76:15:cb:ce:6a:60:a1:
32:32:e0:48:1a:c5:45:06:27:e9:f3:d6:ec:a9:eb:20:2d:3e:
5e:44:12:69:e6:b2:a8:c5:de:4b:f4:d8:82:91:99:79:a9:31:
96:f7:78:1b:68:c6:8b:1f:f5:47:43:a5:3d:b2:2c:3e:dc:e8:
39:24:13:37:ed:eb:41:fb:41:b5:90:f9:ed:be:f6:8d:76:f5:
3f:eb:93:62:69:33:ce:02:0e:6a:06:ac:48:b9:b0:dd:70:d2:
96:b4:51:b0:46:2c:24:e9:d8:eb:4f:f3:81:63:f8:f4:99:a1:
6c:05:95:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:13 2025 by rpki-client