Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/xBZNSEvhDpAM1D0pY3qScT-0BUc.roa
File: xBZNSEvhDpAM1D0pY3qScT-0BUc.roa (raw, json)
Hash identifier: DvZnOP9131lTN6eFpOmfx2mnihzdQJETBW3zsjhHDtU=
Subject key identifier: C4:16:4D:48:4B:E1:0E:90:0C:D4:3D:29:63:7A:92:71:3F:B4:05:47
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019427B5CC35E5030F348DBDCA33810350C8
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/xBZNSEvhDpAM1D0pY3qScT-0BUc.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.6.0/24 maxlen: 24
89.187.7.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cc:35:e5:03:0f:34:8d:bd:ca:33:81:03:50:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4164d484be10e900cd43d29637a92713fb40547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:be:ce:26:f7:d5:00:e1:b3:1d:2f:ca:ab:
7f:d1:1c:a3:48:eb:4a:70:ea:7c:c7:c3:da:55:47:
d6:26:64:cc:3a:0e:4f:f4:ef:67:72:d5:2e:ab:40:
fc:dc:00:5b:6f:10:78:e2:55:47:4c:55:5a:db:79:
99:07:05:32:47:3b:5a:f9:02:cc:ea:a4:ae:8e:bc:
be:18:18:6c:fb:60:63:11:c7:49:8c:11:d8:a1:95:
b3:ed:d3:ba:cc:31:36:66:8c:a0:2c:60:d8:98:9d:
b1:84:7b:e6:62:3c:72:0f:ae:8f:36:d1:9c:48:6f:
7f:05:39:4a:f2:81:6c:8c:67:cc:c8:a5:2d:80:a5:
4f:e5:5c:68:35:aa:5b:8c:54:5e:4a:2e:05:9c:3a:
17:63:73:7f:60:c1:0d:a0:60:b5:19:4b:c2:d3:28:
d9:35:8f:bb:88:e4:47:15:9f:4f:07:f2:05:73:3a:
12:e2:62:60:90:39:b6:c0:a9:1b:aa:f7:92:4a:95:
83:b3:1b:80:e8:be:97:d2:1f:53:7c:dc:86:9f:39:
f6:53:63:0e:98:41:8f:0c:d9:eb:10:43:7d:0a:4c:
6f:c8:47:03:fa:fc:cd:80:8b:a3:ae:7c:a7:7e:a6:
ea:d1:ae:02:06:f0:1f:5c:95:f9:c2:c2:8b:bc:19:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:4D:48:4B:E1:0E:90:0C:D4:3D:29:63:7A:92:71:3F:B4:05:47
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/xBZNSEvhDpAM1D0pY3qScT-0BUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0-89.187.8.255
89.187.10.0/24
89.187.12.0/22
89.187.17.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ff:0a:f5:a2:21:8e:13:e3:90:34:43:c1:c3:9e:14:0b:67:
db:74:72:18:15:87:1e:53:11:31:f1:13:8c:87:5b:44:27:5f:
9e:db:1a:64:b6:fc:fe:da:a3:41:7d:2f:e8:e3:89:2c:78:42:
bc:da:43:9d:92:33:df:6f:73:ab:2e:f1:a4:a4:1c:63:46:f8:
58:f1:e0:a7:b2:22:3f:1e:38:52:c4:3a:80:e0:0c:3b:49:e8:
a9:a1:e3:7a:29:ec:c4:bb:37:7e:85:b5:05:ef:f8:5c:d1:40:
e1:ff:e9:e6:d9:c4:16:d7:20:69:ef:c6:8b:3c:d4:48:55:3c:
94:33:28:f8:ab:0b:e6:eb:ea:9f:85:b9:a4:0d:4f:58:3e:ac:
0a:21:82:d9:49:96:64:4d:6a:be:be:94:3c:57:9c:e1:e3:ac:
16:65:79:38:0b:b3:15:c6:b9:cc:58:c3:8e:cf:6d:d4:30:19:
a9:a6:26:35:6f:26:4c:17:ec:cf:15:9e:f3:1c:41:7f:2a:79:
7a:3e:c6:7f:66:a3:1a:75:aa:af:82:77:1d:66:6e:c6:0f:21:
0d:c2:db:2e:5e:93:5e:7d:92:55:e9:d6:54:ce:49:17:e8:ea:
42:b2:75:1e:96:14:b2:71:5c:13:5b:db:ba:95:8e:39:6e:9c:
c8:80:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:21 2025 by rpki-client