Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/k6ecNcnbAZIyCOPD0MoxfkibUqI.roa
File: k6ecNcnbAZIyCOPD0MoxfkibUqI.roa (raw, json)
Hash identifier: awTNySDFU2d1b56oFQ+XGjPUCIpbCwMaqqaTpqjxhlg=
Subject key identifier: 93:A7:9C:35:C9:DB:01:92:32:08:E3:C3:D0:CA:31:7E:48:9B:52:A2
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369AEE1CB60027749D8C3221D38EE7A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/k6ecNcnbAZIyCOPD0MoxfkibUqI.roa
Signing time: Wed 01 Jan 2025 19:48:36 +0000
ROA not before: Wed 01 Jan 2025 19:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60583
IP address blocks: 89.36.143.0/24 maxlen: 24
217.19.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ae:e1:cb:60:02:77:49:d8:c3:22:1d:38:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a79c35c9db01923208e3c3d0ca317e489b52a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:ac:26:78:f0:52:3f:f2:02:73:99:37:8e:
b9:88:0c:42:dd:0b:d5:bd:92:b3:a3:23:4b:0c:0a:
f9:b7:6d:2a:af:86:18:65:30:3b:6b:60:15:b1:c3:
02:8d:01:e2:7c:fd:21:2d:09:8d:63:ef:05:3a:63:
eb:2d:a8:d0:02:b0:aa:e2:53:71:fb:40:96:4a:54:
52:9f:84:59:59:fa:62:94:32:62:1c:5a:ba:cb:c5:
f6:de:fa:3e:5b:44:d8:b4:f7:8c:2e:db:99:e3:cd:
76:39:40:57:f0:52:0d:73:0e:c5:ac:e3:b3:00:1b:
b2:a0:6a:71:06:7b:29:23:90:3a:d1:81:92:9f:a9:
83:e3:7b:cc:59:02:ac:9b:8a:c0:b1:99:0c:50:83:
b8:25:0e:ea:73:ab:03:81:8a:e6:5b:8d:8c:17:d0:
c2:09:09:a5:63:df:fc:ca:de:37:40:36:1e:ae:f0:
f5:ca:75:88:77:ea:69:c3:8a:55:c0:ce:bb:cc:3f:
7d:71:b0:f5:7a:91:42:a8:36:6e:13:57:d3:f3:4d:
a7:a5:09:06:e4:bc:1e:13:f2:a2:f4:da:dc:7a:9f:
22:f5:fb:39:85:84:fc:b3:b1:82:07:cc:23:76:1b:
9f:fe:3d:a4:9c:6b:1d:11:c8:3a:95:f6:91:f2:9f:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:9C:35:C9:DB:01:92:32:08:E3:C3:D0:CA:31:7E:48:9B:52:A2
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/k6ecNcnbAZIyCOPD0MoxfkibUqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.143.0/24
217.19.12.0/24
Signature Algorithm: sha256WithRSAEncryption
77:66:0a:ac:f5:cc:72:17:9e:50:34:a9:66:91:e6:15:5e:71:
34:1d:46:e2:15:2d:45:99:42:b6:5d:50:54:8d:91:8b:07:7c:
48:cd:3f:40:0a:a6:49:50:6e:27:22:e6:fd:b0:5a:7a:4d:59:
cb:84:0a:2e:73:90:5f:cf:2c:31:75:b0:4b:ba:9e:43:55:67:
8c:32:a1:17:01:68:d8:69:cf:13:60:10:25:7a:5b:bc:df:b7:
84:fd:46:89:d5:ea:9d:dd:2a:ec:62:5a:54:69:69:f2:8a:cb:
14:90:e9:73:4a:43:11:ce:de:12:d5:54:ae:cd:9c:0c:bd:34:
fd:3c:73:84:cf:1e:f8:1d:50:f7:92:5a:88:72:8c:e1:ab:17:
d9:5f:ab:fc:8f:2a:f3:52:30:28:c1:92:ca:ea:b9:5c:cf:d8:
49:ec:a4:5f:d1:77:29:e3:fd:7e:bf:ee:9b:7b:2d:0c:96:fb:
69:23:0f:21:16:d8:2e:20:a2:62:85:e1:4e:6b:b3:61:80:ea:
b4:4a:1f:dc:5f:5d:5f:71:b1:2c:ee:04:8b:23:d3:1f:d8:f3:
49:f6:e9:88:e6:c0:c9:6e:f2:34:e6:a7:b6:62:e6:72:67:e0:
af:76:f5:f5:a3:18:44:5d:7d:4e:c2:98:40:fb:0a:3b:ec:b5:
f5:e2:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:05 2025 by rpki-client