Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa
File: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (raw, json)
Hash identifier: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=
Subject key identifier: AC:49:CA:A3:8B:85:4C:93:05:60:DE:82:9F:61:6D:D3:8E:7D:02:F8
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0194282319766B2C62D6D4B8C1AEA304AB5F
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28745
IP address blocks: 89.237.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:19:76:6b:2c:62:d6:d4:b8:c1:ae:a3:04:ab:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac49caa38b854c930560de829f616dd38e7d02f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:29:73:92:2c:1d:26:b6:75:59:0f:fb:42:
ec:de:ac:94:47:cf:74:5c:48:29:b3:f0:5f:03:6f:
f8:5c:27:b0:94:3a:75:1b:1e:ca:7b:8a:0f:e7:10:
0c:c4:7f:6a:98:35:43:3c:f5:42:bf:2e:fe:16:62:
32:22:80:fd:82:71:bd:da:bf:a0:ca:1d:1d:6e:89:
36:21:d1:d2:20:38:df:b1:42:69:40:1c:23:ed:dc:
a0:4e:a4:52:3a:33:ab:3e:9f:eb:38:dc:93:e0:73:
fd:f5:71:bd:0a:2e:5f:a1:12:66:a5:4d:22:9e:1f:
36:9a:69:d3:e4:b6:8d:f3:66:77:39:5b:4b:f0:fb:
3c:64:87:3a:c0:9e:30:77:d6:5b:bc:7c:4d:d3:9f:
79:45:8b:c1:99:2a:f6:53:8a:fd:33:af:52:f2:03:
cd:9f:bf:90:18:30:e8:c6:a5:29:3f:c3:2e:73:7f:
a7:a4:b9:0b:fb:f9:70:73:a4:e2:42:c8:b6:7c:4a:
be:11:ba:c6:17:89:c7:57:e4:7e:3c:1b:08:30:3d:
6a:0d:2a:28:51:ca:ee:ec:4f:4a:5e:8d:e1:db:df:
94:6e:f6:14:00:1b:7c:ba:e5:4b:5d:97:36:37:3c:
35:ad:dc:ae:23:11:e7:87:3f:54:bd:e2:a1:18:13:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:49:CA:A3:8B:85:4C:93:05:60:DE:82:9F:61:6D:D3:8E:7D:02:F8
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.237.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:1e:e5:a5:5f:1d:d8:15:8c:e1:66:09:c9:2b:39:33:ad:ae:
11:f8:ba:9a:2c:70:e6:b2:d5:b7:f1:b6:23:d2:62:44:b7:3c:
54:97:7f:cc:13:d2:75:05:ae:e1:2e:2a:56:00:fa:18:70:05:
28:55:d3:ca:de:1d:8f:8b:93:4c:14:36:85:04:38:dd:1e:d2:
be:e4:75:e0:d1:25:03:f9:3d:e9:65:66:71:71:ed:da:1f:30:
d7:85:3c:e3:c2:7e:54:2a:0f:71:38:e3:2a:70:60:a3:3b:16:
11:c6:48:74:28:a5:2d:f8:65:9c:31:43:49:cc:14:ba:4f:02:
d4:46:31:05:8f:33:c6:ac:74:3d:40:68:91:bc:10:ec:57:55:
72:4a:2e:ff:93:22:28:f0:89:aa:c0:6b:bd:9e:81:27:1e:b9:
e6:37:f4:8a:b3:df:18:9b:f2:c3:64:67:ac:a7:56:ba:8b:c9:
cf:f3:15:e4:28:70:fd:6b:66:27:cc:f8:ab:d5:e1:38:d0:44:
21:6c:df:3c:c8:ff:b4:9b:ff:84:62:cd:3f:44:ab:02:8d:3a:
56:83:bd:e1:47:b3:f2:25:43:aa:b9:09:1b:95:e3:cd:e5:76:
64:3f:49:a9:34:95:85:eb:a9:c0:b1:bf:f9:12:58:69:87:2d:
cf:9f:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:24 2025 by rpki-client