Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AV3lu-WefChJAUJviPW5nn0jlEE.roa
File: AV3lu-WefChJAUJviPW5nn0jlEE.roa (raw, json)
Hash identifier: gFKQXowk9EBJou1c9ljrGtfvdfjLrs0fGOl+YZ2dCQU=
Subject key identifier: 01:5D:E5:BB:E5:9E:7C:28:49:01:42:6F:88:F5:B9:9E:7D:23:94:41
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01955D50041791DDDD46730237ADDC3C5BDB
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AV3lu-WefChJAUJviPW5nn0jlEE.roa
Signing time: Mon 03 Mar 2025 18:41:19 +0000
ROA not before: Mon 03 Mar 2025 18:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:50:04:17:91:dd:dd:46:73:02:37:ad:dc:3c:5b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Mar 3 18:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=015de5bbe59e7c284901426f88f5b99e7d239441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:c5:9f:35:fc:e6:79:02:af:58:20:0c:8a:
69:0b:ca:97:cd:a5:cf:18:c7:24:a1:65:3c:ba:25:
52:8d:de:ac:5a:ea:e2:5e:e5:70:b3:48:9c:74:7f:
81:6f:3c:e7:3b:e1:74:cf:32:23:d5:82:a5:6f:ef:
32:ed:fa:8b:3c:2e:13:09:fa:07:a1:b0:aa:a2:82:
ed:4c:6b:17:67:a2:01:f1:a4:c5:8f:9c:cf:8d:77:
6c:c3:e7:c0:9a:f5:db:bd:62:2e:cf:79:d3:c8:69:
2e:8a:83:73:76:70:f5:73:b2:93:8d:58:6c:95:68:
7f:50:f2:3c:13:af:8e:50:97:bb:4d:80:e8:cc:7e:
ac:6f:5b:f4:99:b5:b5:99:1b:83:0d:2b:df:c8:4f:
70:cc:10:44:0c:9a:b3:cc:1d:80:9d:08:b8:36:06:
d9:86:4c:49:47:44:78:fc:5d:b0:3b:5e:ea:2d:dc:
bd:ed:22:53:21:a1:c1:cd:59:f8:70:61:cf:72:01:
5b:10:e4:9a:71:26:1c:7a:82:b1:00:a6:0a:07:00:
02:f8:72:c6:00:1a:66:f5:3f:32:4e:52:0e:be:2d:
3a:b0:75:d6:16:2d:7b:92:cb:b2:c4:4b:62:c5:39:
d9:80:c4:87:2c:f8:91:e1:d2:cd:66:ed:4b:c1:04:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:E5:BB:E5:9E:7C:28:49:01:42:6F:88:F5:B9:9E:7D:23:94:41
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AV3lu-WefChJAUJviPW5nn0jlEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:19:2b:c0:a9:46:ee:db:57:e1:08:43:91:2a:fe:d3:25:fe:
9a:cb:e7:1e:71:a7:69:57:dd:8c:5a:bd:b3:ea:28:f9:57:31:
cc:0d:a1:43:92:a4:8f:2c:8c:f6:e0:78:ea:1c:09:76:82:2d:
2e:2a:41:80:52:e2:c2:2b:69:84:ca:65:81:f0:7a:d6:5a:11:
3d:b8:aa:df:bb:6f:58:22:54:10:ed:f6:be:38:fb:13:bd:d2:
ed:0a:e1:6e:14:9b:f0:34:ea:cc:7e:60:24:8c:fc:4a:0e:45:
aa:8d:d6:e0:2b:cf:a3:50:93:25:af:ae:b5:87:18:55:bb:7b:
e0:f4:2c:05:3b:e4:c0:52:2f:a4:63:1d:01:02:0e:76:73:5c:
0c:9c:a5:8c:68:e0:9b:fd:12:96:5c:11:f9:d8:3b:34:4e:30:
17:8e:dd:13:d8:c1:e6:9d:3e:a7:65:f7:a0:3c:d6:3e:1e:df:
6c:e1:3b:c0:fd:de:5b:be:ec:da:8c:22:d6:31:32:07:31:b6:
d6:af:f1:cc:a2:b3:1d:4b:1e:6a:2d:e8:78:2c:92:c1:cb:06:
aa:91:c3:70:66:2b:b2:c6:c5:75:3e:1f:45:a7:d0:f5:b2:cd:
fd:00:c0:ff:85:57:75:a0:00:f4:d5:dd:ce:2a:eb:24:24:dc:
bd:e6:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:38:16 2025 by rpki-client