Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hQWOIgzmlyoWXqGpwbSrb8gWJms.roa
File: hQWOIgzmlyoWXqGpwbSrb8gWJms.roa (raw, json)
Hash identifier: XhFL+2KnargpiP4J3dq/EGEihmIcxCjofx7qVg8Lf/E=
Subject key identifier: 85:05:8E:22:0C:E6:97:2A:16:5E:A1:A9:C1:B4:AB:6F:C8:16:26:6B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236983764D874C431B1B7B8C7FDAF745
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hQWOIgzmlyoWXqGpwbSrb8gWJms.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 89.40.104.0/23 maxlen: 23
89.40.233.0/24 maxlen: 24
188.213.19.0/24 maxlen: 24
188.213.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:83:76:4d:87:4c:43:1b:1b:7b:8c:7f:da:f7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85058e220ce6972a165ea1a9c1b4ab6fc816266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:c5:f0:71:ad:3d:a8:20:cf:cf:6b:22:02:
2a:37:a2:92:f2:89:49:ba:b7:9e:08:18:83:96:ed:
07:74:e4:ca:6c:cc:dc:e0:03:50:2f:b7:71:1c:a7:
92:b2:e4:08:3a:21:cc:aa:05:3e:61:26:5c:2b:af:
d8:41:7e:07:02:d3:82:07:83:aa:0d:9b:d2:79:28:
a1:50:8a:d3:aa:02:b6:c0:5f:a7:32:f0:f2:04:72:
81:7c:f1:96:aa:8b:20:55:46:8c:f6:53:e2:54:2b:
88:ed:32:4d:81:3b:72:39:ef:9b:43:7a:ac:6f:01:
4b:dc:08:e7:92:78:21:e9:89:a6:7d:5e:6e:c7:a5:
04:63:ec:9b:c6:46:87:1d:52:2f:c4:f2:c2:db:a3:
92:53:78:75:5d:a9:5b:57:69:05:2c:a7:bf:0a:76:
a7:a9:78:d3:f3:5b:d0:e7:11:9e:fe:fc:69:16:8d:
82:60:a8:a2:de:e8:aa:f4:6a:d2:1d:17:c7:75:83:
19:75:cb:a9:fa:24:6d:79:1f:42:bc:ff:0c:ce:54:
91:17:e2:92:00:98:6e:7f:51:c5:96:31:18:34:4c:
46:e4:42:cd:c5:e4:d3:43:9b:3f:56:27:08:a4:28:
0d:7f:cc:5a:7c:f2:b5:8c:92:99:45:91:79:d9:43:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:05:8E:22:0C:E6:97:2A:16:5E:A1:A9:C1:B4:AB:6F:C8:16:26:6B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/hQWOIgzmlyoWXqGpwbSrb8gWJms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.104.0/23
89.40.233.0/24
188.213.19.0/24
188.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a4:7e:92:4c:cf:84:14:7b:61:7a:2e:c9:fa:fb:1e:25:73:
35:36:23:b5:b2:e2:59:8f:b8:76:f0:52:ee:91:6e:b7:7a:b2:
52:3f:da:c3:f6:91:a8:c5:ce:5b:05:79:b2:9e:c8:29:7d:c3:
05:f7:c6:b2:1a:09:1f:c4:a4:1b:d3:32:a0:07:85:98:1e:2a:
06:db:a6:a7:d4:0b:38:bb:eb:d9:e1:30:64:13:51:a5:91:2b:
eb:9c:bd:0c:94:64:51:85:23:7b:f5:5c:8a:62:38:41:57:2d:
1a:1b:c8:3d:a1:b9:d4:ab:17:72:d8:7d:4e:d0:f7:e6:d0:22:
49:04:c5:b2:29:46:6e:c1:68:8e:af:8d:2c:9d:75:59:f4:c4:
1b:2b:77:84:83:8f:74:11:93:cb:15:7c:26:23:a3:35:88:eb:
a6:59:2d:d2:de:a8:fb:c1:97:1d:cd:00:48:81:70:06:fb:2f:
3d:1b:85:81:77:db:14:e6:f9:55:c9:bd:12:95:c3:47:cd:ce:
65:7d:04:d2:89:37:17:9b:ff:2a:e3:0d:f2:9c:da:1b:a2:08:
d7:18:aa:68:35:46:95:7c:29:7e:2f:48:39:5a:09:d0:f1:9a:
e3:14:a9:08:45:cb:4b:da:10:da:0d:52:49:14:a8:4c:84:2f:
cb:5f:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:33 2025 by rpki-client