Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9haWDNChiBmFmCkJOJQFvuH-IMI.roa
File: 9haWDNChiBmFmCkJOJQFvuH-IMI.roa (raw, json)
Hash identifier: +8RvV3XWl90X5W8zvgbYpA7irxF7XdHRCQ7iO5l8i3I=
Subject key identifier: F6:16:96:0C:D0:A1:88:19:85:98:29:09:38:94:05:BE:E1:FE:20:C2
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01942B295FD0A4563D887DEDE4A9EDF0A4EE
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9haWDNChiBmFmCkJOJQFvuH-IMI.roa
Signing time: Fri 03 Jan 2025 07:55:19 +0000
ROA not before: Fri 03 Jan 2025 07:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 89.187.11.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:29:5f:d0:a4:56:3d:88:7d:ed:e4:a9:ed:f0:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 3 07:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f616960cd0a1881985982909389405bee1fe20c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:6e:e7:b9:e7:77:9d:7c:e2:cd:21:ab:bd:
f2:ff:37:dd:86:8a:3d:b0:e0:61:d2:1a:2b:c6:7a:
10:19:67:14:45:61:81:c3:cd:b5:2d:3e:6d:3b:a9:
82:2a:e1:c2:ec:5a:c7:77:cd:a5:53:aa:59:a8:b3:
97:e8:bc:8b:52:a0:fa:c9:e7:b8:a9:e6:f0:35:e3:
3f:b5:9b:c2:58:39:22:90:e4:90:7c:ea:da:04:50:
e4:99:c2:7d:a8:9d:e3:8d:dc:80:99:e7:5f:cf:a3:
9a:f0:9b:b0:a5:83:28:6c:cc:73:98:7f:48:b7:89:
43:0f:64:8a:49:8b:79:5e:b2:98:e7:ed:5e:a6:9d:
2f:4f:73:5b:24:4c:81:84:4e:23:02:6b:ed:e0:00:
a2:20:b9:5f:af:71:df:c8:c0:6a:fc:b6:16:ab:98:
f1:cb:5d:94:52:32:2f:95:bb:d2:cb:36:c1:42:d3:
be:11:e4:7f:05:b4:95:38:17:77:a6:1a:f4:ac:7a:
b6:04:0a:ba:71:72:54:8c:cf:b7:be:24:e8:15:65:
fa:cc:10:9e:98:12:21:bf:3e:1b:80:8e:65:62:10:
cd:93:3d:b2:95:01:5d:72:65:dd:0f:06:94:79:11:
9e:f9:1b:e0:8d:15:0e:cc:e2:99:cf:13:bc:c9:18:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:96:0C:D0:A1:88:19:85:98:29:09:38:94:05:BE:E1:FE:20:C2
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9haWDNChiBmFmCkJOJQFvuH-IMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.11.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:eb:0d:2d:48:e5:9b:b3:80:3e:b8:f0:44:90:4d:f1:a5:5e:
f1:26:55:59:7c:56:a0:af:9a:0e:6b:ec:0a:83:f1:e7:6c:e0:
3b:41:ef:8a:58:89:d7:4d:e4:75:bf:3f:a8:40:e3:00:1e:f9:
aa:75:4b:72:d6:5a:f6:6e:6f:d8:85:07:18:5a:cf:3e:56:63:
53:61:77:f4:47:34:ea:17:9c:18:a8:b2:9f:40:e4:b4:2d:38:
4b:0e:6a:64:e7:49:2d:f8:19:b1:b4:ad:2f:a9:43:07:57:38:
c0:de:46:50:06:83:3e:b6:55:b5:f7:b7:5e:de:c5:8e:8c:60:
c9:44:3a:c6:aa:99:94:06:e6:f0:bf:6b:67:9d:5b:80:da:81:
b0:bf:64:e7:1d:13:aa:ff:5c:7b:63:10:91:b6:ff:6d:83:62:
1e:9a:8f:22:84:23:ba:88:13:05:5b:55:8b:14:e9:22:67:e2:
52:5b:46:05:9c:b1:ec:e4:b6:df:4c:45:5e:a6:20:d3:59:41:
44:4b:02:f4:a9:dd:60:e4:16:c1:e6:5e:c3:af:25:c0:bf:fa:
dc:71:68:f5:aa:62:ed:e5:df:9f:32:57:42:06:2d:9b:cc:96:
5c:d5:b7:b0:5a:13:60:d1:64:2c:18:07:39:8d:ba:2c:00:02:
92:19:c0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:59 2025 by rpki-client