Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/F4XljW-T3jJTwpVhMI32ZtDkPjc.roa
File: F4XljW-T3jJTwpVhMI32ZtDkPjc.roa (raw, json)
Hash identifier: 2rKRz7MfMqc7pmEXNPOTeA1fB9qm7Sp59u504ovwJCg=
Subject key identifier: 17:85:E5:8D:6F:93:DE:32:53:C2:95:61:30:8D:F6:66:D0:E4:3E:37
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01942B295EAB334D7C6E4964CFE1E5FF48E6
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/F4XljW-T3jJTwpVhMI32ZtDkPjc.roa
Signing time: Fri 03 Jan 2025 07:55:18 +0000
ROA not before: Fri 03 Jan 2025 07:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.187.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:29:5e:ab:33:4d:7c:6e:49:64:cf:e1:e5:ff:48:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 3 07:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1785e58d6f93de3253c29561308df666d0e43e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:30:d3:83:16:33:7c:fc:54:06:21:02:f0:
c5:56:bf:56:c3:6a:6f:e6:a8:5b:4e:61:12:95:68:
63:50:45:23:e0:01:0d:8d:23:15:c6:96:e1:3e:47:
7a:30:6b:fa:37:06:c9:f5:ad:3b:a7:d3:19:64:85:
42:1f:a9:ff:2d:d7:d6:cd:6d:e0:6a:ea:30:ac:1a:
46:e3:99:f8:df:ca:3a:7e:95:1e:e7:fa:b6:cd:97:
f7:12:51:3e:80:b0:50:a6:69:f5:9c:af:58:c5:9b:
e9:42:46:d1:7a:a9:e1:c0:c9:af:49:2a:01:ba:ce:
b4:11:d7:fa:8c:62:64:32:bd:b4:32:03:f4:7f:3d:
97:13:e3:d6:27:91:74:f8:90:d7:49:d3:4a:c8:1d:
8b:97:d3:18:84:10:75:dc:c1:dd:09:b0:0f:28:20:
01:d1:96:d1:07:d8:0e:ad:ac:19:95:9e:e7:10:5c:
8b:5e:5d:c5:65:25:3d:6a:35:7b:28:be:a5:f8:64:
0b:77:2e:35:6a:d4:52:f4:42:ed:c7:d8:9c:fa:6d:
83:6a:9b:a7:f9:0c:b8:fd:1f:40:1c:53:fd:13:79:
09:0f:f5:fb:55:2f:5e:c9:b2:6e:bf:25:a0:66:ec:
8a:5a:47:eb:0f:c8:f6:70:01:de:86:04:c3:ac:13:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:85:E5:8D:6F:93:DE:32:53:C2:95:61:30:8D:F6:66:D0:E4:3E:37
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/F4XljW-T3jJTwpVhMI32ZtDkPjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ff:b6:d9:32:1c:55:93:7d:ab:f2:65:eb:66:57:83:c1:ba:
63:ec:e0:24:c9:52:b2:28:1b:82:03:ba:5b:11:85:fc:15:8c:
ec:58:3c:cb:a3:0a:c7:bd:9c:d6:f7:1d:f6:77:0b:c0:1f:ce:
37:19:28:b8:e2:35:e2:45:d2:c2:f4:60:40:e5:12:89:13:78:
f0:26:6b:b8:e6:fc:17:60:10:7d:b9:8e:63:05:53:c3:80:7a:
1e:22:1b:b4:43:9e:74:f4:f0:39:f3:af:28:ad:b7:a2:43:1f:
28:c1:c5:4b:7f:87:e1:76:b4:36:0a:7c:e2:e2:9e:5d:ad:93:
be:2a:14:82:c0:d8:01:3f:35:e5:b1:ad:3b:f2:b7:d8:13:38:
72:e0:67:6d:4a:60:40:7a:cf:22:78:52:dc:6c:2b:2e:2c:32:
18:50:b1:cd:db:53:24:84:c4:02:fc:d6:d6:5c:a9:51:3a:73:
b1:ce:8f:48:08:7e:19:65:51:a5:96:f2:c5:fa:ec:62:0e:34:
b7:4d:b9:a8:40:4e:db:5d:ab:4d:95:9f:3c:ac:37:f9:1f:d8:
d3:e0:72:1f:25:be:d9:c4:8e:c8:05:5a:4e:1c:63:84:7d:dc:
cf:64:9b:b0:04:a6:1f:be:ee:aa:15:cd:d1:80:44:ad:a3:af:
40:27:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:36 2025 by rpki-client