Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/4Tm0PZUUIE0UeZZBqtv7lryYo-U.roa
File: 4Tm0PZUUIE0UeZZBqtv7lryYo-U.roa (raw, json)
Hash identifier: 0NIbs8VY7e4Rgbfid5jxPayxl5Z49peq9M37VuuCheQ=
Subject key identifier: E1:39:B4:3D:95:14:20:4D:14:79:96:41:AA:DB:FB:96:BC:98:A3:E5
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019427B5CB8B822447527DEB73A33E6C8669
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/4Tm0PZUUIE0UeZZBqtv7lryYo-U.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 89.187.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cb:8b:82:24:47:52:7d:eb:73:a3:3e:6c:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e139b43d9514204d14799641aadbfb96bc98a3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:54:b4:0a:ca:d8:9a:b1:eb:c1:74:3e:8e:
c5:5a:e4:2b:95:f5:57:72:9d:0f:c7:ef:b0:84:dc:
27:c1:7f:43:f8:ee:0e:f5:62:09:ed:ba:ee:25:3b:
7b:54:00:cb:06:02:8f:dc:eb:3d:62:d5:f1:22:22:
84:7a:ea:c6:d0:5b:d2:71:be:15:33:d7:f4:32:d0:
7b:30:de:b2:44:b4:56:78:b3:56:f0:0b:1b:5f:06:
7c:e1:15:8a:61:72:56:31:96:87:03:c2:9a:e5:cd:
0d:d8:37:d7:39:1b:dd:3f:8e:59:59:c5:9d:4a:29:
8b:e1:d0:e9:e5:eb:f0:0a:38:b0:e8:5b:49:23:45:
19:5e:9c:a4:a3:f2:85:3d:ce:0f:75:1b:68:a6:3e:
fa:82:c6:b2:fd:3b:c3:9b:a1:c3:63:02:5a:90:4f:
5e:bb:5f:74:f5:2b:b6:27:78:7f:6f:be:cc:c4:af:
bb:28:f4:59:f3:87:0c:6a:6d:6e:30:b7:46:ba:eb:
e0:f2:a2:20:e6:cb:28:86:dd:ad:da:bf:25:ef:56:
38:c8:b4:fe:f9:34:80:67:e9:50:c0:4c:3a:98:14:
ae:8a:81:e4:b3:80:aa:cf:39:dc:d3:5f:54:d1:75:
37:8e:6a:b6:88:6b:46:11:a0:a7:2a:58:f0:1d:07:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:B4:3D:95:14:20:4D:14:79:96:41:AA:DB:FB:96:BC:98:A3:E5
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/4Tm0PZUUIE0UeZZBqtv7lryYo-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
29:10:dd:73:83:f5:9e:18:b9:e3:bb:dd:80:e7:96:f8:b4:11:
06:10:00:42:63:91:3b:b8:14:52:0d:fb:07:9c:14:19:e3:ec:
78:fa:a6:53:95:8c:22:81:a3:91:5e:64:ed:2d:e2:d1:1b:6f:
0b:13:9a:13:8c:44:2a:f9:75:cc:41:e7:b2:e4:cc:75:81:dd:
8d:06:89:df:cd:23:57:46:0a:63:46:56:07:a5:b5:49:fb:58:
df:c3:4c:20:45:2a:be:e9:8e:0f:ad:29:9a:83:58:46:3d:17:
60:02:dd:e9:69:99:9a:ca:14:75:1e:c1:ed:c6:37:5e:61:45:
7d:d1:5d:42:59:57:41:0a:d8:a7:28:75:5b:d8:89:3d:b5:82:
19:47:34:05:f9:88:16:b1:ac:aa:a5:ea:e6:73:cc:ee:26:86:
01:22:8d:74:b7:b5:3b:cf:5d:8b:d8:ab:56:a1:8a:40:0c:30:
13:2b:e4:c7:03:df:cd:e0:d5:c5:68:5a:3e:40:4e:be:58:25:
c4:fd:2e:36:36:8d:64:22:ad:27:c4:ba:92:d7:a7:1a:a1:c1:
64:f6:22:91:d2:1b:2f:c7:94:bd:61:6e:e1:31:d5:87:bb:a3:
99:d3:bd:cf:61:f4:c5:51:9c:d6:8d:a7:59:2b:5f:46:ba:35:
6d:51:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:23:32 2025 by rpki-client