Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LJtkeKYD8xNpp6_zrttZ0eZpGRw.roa
File: LJtkeKYD8xNpp6_zrttZ0eZpGRw.roa (raw, json)
Hash identifier: 3DvhbEpcGqEyb+KPeewmF0gxDVsPujG8oOnFMtlxw8s=
Subject key identifier: 2C:9B:64:78:A6:03:F3:13:69:A7:AF:F3:AE:DB:59:D1:E6:69:19:1C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A2BD758CE365A1DDB6BE65AAE55B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LJtkeKYD8xNpp6_zrttZ0eZpGRw.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56570
IP address blocks: 89.36.79.0/24 maxlen: 24
93.114.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a2:bd:75:8c:e3:65:a1:dd:b6:be:65:aa:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c9b6478a603f31369a7aff3aedb59d1e669191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:63:eb:92:6d:00:f1:4c:8a:58:60:ca:6e:
78:04:ed:71:1a:9f:6a:e3:d0:ca:c6:cd:ec:52:f9:
df:8a:96:3c:8e:ef:b9:27:a2:a9:87:dc:cf:11:2f:
be:da:c4:5b:5d:c4:23:5d:54:03:1a:de:9f:9d:4a:
2d:df:9a:2f:dd:65:37:86:31:62:be:35:93:93:11:
f2:33:22:85:47:a1:bb:ab:96:00:e2:9c:51:99:b7:
3a:1d:af:b1:63:db:f0:85:50:9e:57:49:7a:e4:72:
8d:61:99:cd:4f:bd:4a:72:6b:fd:0a:40:be:57:c6:
72:8e:2e:85:a5:11:cf:93:4e:d5:0c:f1:42:25:bb:
0a:b5:5d:a9:69:b1:e1:9a:06:c1:f7:38:20:05:46:
1a:6f:5c:f2:6b:f1:01:0c:b4:38:36:81:5e:36:b4:
f3:ea:5f:d8:68:64:fd:41:c5:7d:ca:e7:18:cb:d4:
fb:b9:25:90:da:28:02:b7:90:cd:33:86:e5:17:d5:
f2:6f:e1:52:c0:0b:c6:b1:8d:4f:cb:90:54:e8:c3:
d5:4b:e2:be:71:fd:98:48:10:6a:63:1c:9b:e2:6a:
9b:18:a3:57:a1:79:1f:3c:5e:fe:9d:87:76:79:d9:
ba:58:17:3c:81:5f:c8:ed:f3:b1:5c:1c:4e:fa:6e:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:64:78:A6:03:F3:13:69:A7:AF:F3:AE:DB:59:D1:E6:69:19:1C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/LJtkeKYD8xNpp6_zrttZ0eZpGRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.79.0/24
93.114.66.0/24
Signature Algorithm: sha256WithRSAEncryption
79:dc:4b:b4:03:dc:02:e3:f1:87:31:46:ba:6f:bd:6c:53:17:
da:6a:06:ef:56:a4:a3:b4:ee:e9:5c:db:7f:0d:f2:0c:ad:fe:
f6:52:15:33:c0:46:f2:1f:d8:b8:bf:bb:d3:69:7a:0b:3d:69:
02:55:35:88:79:06:ab:53:72:99:20:3a:08:20:b2:22:12:f3:
35:cb:bc:53:49:d3:d8:30:0e:7d:f4:e4:76:7f:bc:a4:fa:99:
69:79:6e:98:94:ba:07:49:4c:03:30:c4:64:25:51:d7:ca:f2:
49:82:ea:57:2c:36:42:c3:b7:b8:2b:c4:a9:c7:d4:48:b8:c5:
af:bc:82:c4:c4:5e:af:a9:ba:70:05:71:70:36:89:f4:48:92:
81:3f:a0:a2:31:02:64:6a:5a:02:76:53:a2:7f:a0:52:27:9c:
30:67:15:c0:91:f9:9f:b1:5c:50:50:c9:99:1e:44:89:2a:ad:
b6:ce:b7:c6:96:58:e8:0b:8a:96:e1:47:85:ec:f2:c0:cb:2c:
5e:96:66:ab:5a:15:3b:4d:ef:5d:bf:51:45:71:57:a6:bc:fc:
ba:03:33:97:6f:ed:08:4e:c3:3a:6a:c1:c5:68:ed:f7:a4:86:
50:79:10:f6:29:6b:a5:ec:4b:26:ee:42:a8:45:90:7a:0c:48:
ea:60:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:13 2025 by rpki-client