Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa
File: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (raw, json)
Hash identifier: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=
Subject key identifier: C1:05:D4:79:19:CE:2A:9C:AD:F9:44:FD:63:9C:12:05:7B:D0:30:26
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 019420D5E5776984FB7F4F6BAAA431893805
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204810
IP address blocks: 89.150.46.0/24 maxlen: 24
89.150.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e5:77:69:84:fb:7f:4f:6b:aa:a4:31:89:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c105d47919ce2a9cadf944fd639c12057bd03026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:1f:59:48:0a:1e:d7:b0:48:b9:e9:a5:bc:
43:68:14:b2:7e:f9:4d:ff:4a:e3:f5:fa:65:d9:ac:
31:58:aa:35:f0:09:e3:de:eb:62:47:46:6b:c3:30:
17:b2:fc:ba:e4:ab:41:34:d2:ad:98:da:76:a9:dc:
df:ce:85:cc:a5:f2:57:48:e9:63:ac:d2:e7:c1:ef:
c0:fd:65:1a:67:eb:d6:94:17:16:52:c6:54:84:14:
ec:c8:da:2f:c6:25:56:8c:93:b9:b3:f5:b2:4b:ec:
3c:81:f2:c6:51:1f:84:cf:47:e0:14:3c:2c:f1:d1:
9c:37:34:81:6d:b0:09:b3:79:24:be:52:55:1f:c4:
b5:99:d7:a8:85:7f:ac:7d:b3:20:bb:c6:13:8c:ea:
8f:f7:f6:de:f4:ed:04:71:8e:ae:82:95:18:a3:74:
de:fc:6f:7c:05:d6:ce:3e:c3:b7:57:1d:95:f2:9f:
84:99:96:ea:c2:21:0e:00:93:81:ea:dd:d7:29:57:
f9:09:9b:e2:06:d3:2f:83:76:e5:7e:dc:3f:36:44:
82:36:c1:a3:ef:68:70:e7:1d:1e:90:a2:63:e9:c6:
73:a5:4e:b8:ab:26:52:dd:2a:e8:6b:0e:c0:28:e9:
93:10:fe:3c:f1:9b:74:e1:f4:e2:ab:57:22:7d:d9:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:D4:79:19:CE:2A:9C:AD:F9:44:FD:63:9C:12:05:7B:D0:30:26
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.46.0/23
Signature Algorithm: sha256WithRSAEncryption
36:6b:4c:f0:54:ef:ae:b9:aa:55:3f:90:b2:4d:9c:14:71:a4:
73:2a:d9:e9:6a:62:e0:ea:e1:b2:15:e0:8f:ed:11:32:d4:6e:
a6:fa:40:5d:76:08:7b:69:a5:19:e5:e7:04:ac:da:e9:ee:0c:
7b:35:b2:6f:c6:ae:da:46:ea:f1:8d:ce:3a:5d:8f:fe:e8:09:
5c:75:b1:dd:01:b3:b2:57:4c:16:cf:d9:47:69:91:af:f4:41:
ae:7f:7d:67:23:9b:54:71:93:cf:9f:3d:ee:1a:05:84:7e:e5:
30:eb:3c:3f:af:84:76:19:22:b6:e0:f5:e2:5d:0f:b7:52:90:
27:a3:28:26:cc:e2:37:e8:65:ac:1a:e3:8d:89:63:96:6c:11:
09:f6:be:51:58:70:d5:69:30:b8:86:f3:2e:0c:aa:bf:9b:c5:
72:69:62:36:e0:35:11:48:fb:1e:3d:d5:d8:35:15:54:33:b5:
c0:4b:89:1d:cd:8b:66:2c:43:f5:71:f2:2f:cf:ab:eb:3f:46:
d3:78:0f:18:c1:7f:73:fb:b3:4f:b6:ae:59:88:27:4a:ac:fe:
3c:47:d7:12:30:32:11:39:c7:d9:cc:f8:c4:9b:49:5e:13:fd:
03:4c:aa:87:59:f5:cd:64:55:54:75:d4:ce:09:5e:08:6f:16:
78:e3:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:34 2025 by rpki-client