Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/o0hwcO53lvqXNSjqzSvwtuyLzrs.roa
File: o0hwcO53lvqXNSjqzSvwtuyLzrs.roa (raw, json)
Hash identifier: GS3EWp7lDCFjVdm82/Ueak3soXu3Tqg2iDxmVZFUJZQ=
Subject key identifier: A3:48:70:70:EE:77:96:FA:97:35:28:EA:CD:2B:F0:B6:EC:8B:CE:BB
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019427B5CBE4625411777B7BF584D7012F54
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/o0hwcO53lvqXNSjqzSvwtuyLzrs.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cb:e4:62:54:11:77:7b:7b:f5:84:d7:01:2f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3487070ee7796fa973528eacd2bf0b6ec8bcebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:08:a0:5e:f9:c2:9d:e5:79:b4:43:1f:9c:
8b:5c:8e:0c:5d:b5:65:8e:cb:7d:cf:f2:57:8b:cb:
14:d6:2c:5f:95:e5:08:f3:3c:95:ac:b2:ba:b3:6e:
eb:fe:fd:73:4b:c2:3f:13:0a:3b:8e:a0:c0:7b:da:
a4:ef:86:ea:97:43:17:0c:78:da:98:e7:ac:e2:f3:
48:5b:52:98:ca:b6:95:81:bd:99:cd:d2:0e:9f:ed:
b2:7c:14:04:32:2d:bc:02:19:df:78:41:4f:31:10:
d2:63:3a:7c:8d:fd:c8:0f:14:46:f6:0c:78:76:e6:
0a:32:2b:a1:c2:4a:d5:b5:a2:5a:a9:c7:21:02:b9:
ba:3e:20:72:c7:df:d4:7e:12:a1:1d:d3:ba:d9:66:
b8:c6:78:05:a7:51:0d:51:69:0c:32:10:8d:5a:cb:
ab:63:b0:c6:55:a9:37:ea:db:6f:a3:ca:33:a0:9d:
31:40:ec:50:37:c9:26:55:7e:6d:d5:b0:20:21:63:
0e:04:e0:44:a7:2c:f7:65:07:ae:86:ea:5a:84:c6:
65:1d:00:ae:bb:8d:ab:30:44:70:9f:2d:ba:cc:23:
99:78:d4:18:96:79:05:92:87:44:3d:7d:38:84:06:
73:46:00:42:c1:e7:2a:f8:fa:2b:ce:9a:ae:cd:f5:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:48:70:70:EE:77:96:FA:97:35:28:EA:CD:2B:F0:B6:EC:8B:CE:BB
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/o0hwcO53lvqXNSjqzSvwtuyLzrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:2f:7c:c0:37:7d:31:2a:ad:da:5f:0f:a6:f6:d0:33:0a:9b:
85:7f:1d:f1:f8:b9:83:6b:04:17:73:d9:1c:1b:f0:15:73:3d:
39:cf:62:07:13:7c:5f:50:f4:70:12:48:91:f6:a7:a3:31:15:
d5:46:a6:1b:f3:fa:ed:97:51:d3:23:31:51:0b:63:b1:83:37:
bb:8b:ab:0d:9a:62:e3:a4:26:99:d2:81:60:f6:18:59:b3:87:
48:41:76:ba:25:ff:19:69:7f:c1:7f:37:af:f0:b7:d5:1a:8f:
b6:2e:69:a7:58:e4:a3:83:42:e1:70:4d:54:f8:dd:e6:c1:96:
eb:d9:66:4c:f4:43:40:15:3d:42:3d:09:bb:cb:3d:f7:fc:fc:
c2:67:2d:5f:01:06:47:9d:c8:48:4c:03:0d:53:82:d1:a7:13:
c6:a6:dc:f8:d5:92:62:32:3b:9c:e0:b5:bc:c0:a4:51:53:b8:
4f:c7:6d:3e:77:a7:5e:6f:c2:3d:af:66:cd:ea:df:94:15:5b:
89:59:33:ea:a7:49:e8:a0:6e:95:45:f9:bd:e6:e6:d8:c2:a6:
5a:d6:23:50:9c:e3:f2:b9:9d:55:9e:a9:89:5e:91:19:98:1b:
9e:2e:d7:49:65:0b:07:13:6c:5f:47:01:14:df:66:40:e8:e1:
a8:95:5b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:32 2025 by rpki-client