Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iaTTiCU-FdhIGCYdaVbFjvMNtN8.roa
File: iaTTiCU-FdhIGCYdaVbFjvMNtN8.roa (raw, json)
Hash identifier: 1H/UtfmOmSdW/ptZZEv9Ol07nG9R5lGS00eMxC4IyAA=
Subject key identifier: 89:A4:D3:88:25:3E:15:D8:48:18:26:1D:69:56:C5:8E:F3:0D:B4:DF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423698330348B060EE83336257EEEB3DC
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iaTTiCU-FdhIGCYdaVbFjvMNtN8.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3164
IP address blocks: 89.39.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:83:30:34:8b:06:0e:e8:33:36:25:7e:ee:b3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a4d388253e15d84818261d6956c58ef30db4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:b0:33:2a:b8:33:92:e9:1d:85:77:fa:0c:
9d:7a:70:33:a9:20:ee:07:b4:ec:96:dd:b7:1d:64:
d7:44:aa:1e:94:b5:87:7d:38:f3:39:bb:ab:d4:da:
1d:4b:e2:b2:4f:82:f4:97:5d:81:a7:11:e7:a0:52:
6e:55:03:0b:58:1a:f2:11:16:b5:18:e6:83:7f:77:
00:2c:f9:2c:cf:c3:c8:82:8b:31:7a:aa:c1:bc:7f:
81:d0:15:0d:01:4b:94:ba:76:14:9c:c3:52:3c:cc:
a0:1d:25:0e:df:d4:d4:0b:5f:33:dc:82:00:0b:5b:
b0:34:d0:3d:5a:c0:12:ef:df:4d:8b:b2:6a:63:38:
77:48:b1:5b:ae:16:26:ca:64:82:ac:66:02:a4:bb:
a5:11:00:5d:41:74:93:10:e4:30:0c:77:6c:5d:d8:
62:22:93:74:37:fa:d1:97:16:ff:ed:4c:96:83:99:
7b:4d:6b:0e:56:25:44:33:fd:56:33:20:c8:5b:52:
cd:0c:8a:5b:b8:85:3f:53:41:ce:20:86:86:50:56:
4b:c9:8e:ca:b2:1f:56:5a:33:ca:b0:10:5a:e1:97:
03:a0:11:ae:9f:b3:ea:2b:82:80:53:26:db:ce:d8:
10:eb:9b:00:21:45:6b:1a:2a:e2:bf:ec:fb:99:37:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A4:D3:88:25:3E:15:D8:48:18:26:1D:69:56:C5:8E:F3:0D:B4:DF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iaTTiCU-FdhIGCYdaVbFjvMNtN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.189.0/24
Signature Algorithm: sha256WithRSAEncryption
23:52:1c:73:e9:99:5b:07:fb:0b:a9:e0:21:dd:7f:2c:fa:9a:
f2:5c:47:db:2a:bb:2e:f7:37:23:14:ff:75:ad:b4:cf:f2:4f:
76:97:f0:bf:26:fe:e5:9e:c2:44:6c:83:b0:d7:8f:15:79:54:
08:ac:14:db:94:b0:af:d8:a5:b2:c7:1c:45:12:d4:3c:89:af:
fe:35:54:5c:eb:d0:76:42:9f:71:b7:9f:e1:a7:ed:96:9c:b9:
cd:d4:5b:5b:16:ee:64:6d:fa:f4:21:bb:08:8a:23:ac:df:2c:
c6:35:3a:c6:81:b8:29:2e:ed:d0:eb:fb:2e:6a:64:fd:a8:e2:
b5:4c:d2:73:45:78:6d:b1:c2:5e:c2:35:e0:63:41:e9:93:8c:
22:d8:b4:1c:72:3c:85:cd:98:42:34:01:a1:e9:31:32:ab:0b:
0e:13:05:ca:99:af:a5:ed:80:f1:92:f8:67:2d:10:4f:51:9b:
a7:88:a5:7c:f8:d6:17:67:c4:0b:9e:2f:9a:94:4f:a2:6f:92:
ea:65:b4:8d:c6:cd:b4:ee:a7:a1:33:77:ef:8a:86:4c:06:50:
40:20:bd:94:7d:16:ec:ba:fe:24:71:17:02:04:2d:77:bf:b0:
6e:89:88:65:2e:00:89:00:7b:8b:f0:0d:f5:b7:0b:0a:37:45:
44:31:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:29 2025 by rpki-client