Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/0m_FCYLNpCepQvgGxnt5Etr0-7E.roa
File: 0m_FCYLNpCepQvgGxnt5Etr0-7E.roa (raw, json)
Hash identifier: KPGMzAKskMiHXfK0deJxIO7QjTi1yyfKU8relBE7uzY=
Subject key identifier: D2:6F:C5:09:82:CD:A4:27:A9:42:F8:06:C6:7B:79:12:DA:F4:FB:B1
Certificate issuer: /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial: 019427485BE051068119EF39B9C48E227FD9
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/0m_FCYLNpCepQvgGxnt5Etr0-7E.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206173
IP address blocks: 89.31.214.0/23 maxlen: 24
185.145.246.0/24 maxlen: 24
2a10:1e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5b:e0:51:06:81:19:ef:39:b9:c4:8e:22:7f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d26fc50982cda427a942f806c67b7912daf4fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:c0:b2:e6:2b:70:c1:a8:bf:4b:3e:2c:de:
fa:63:c9:f7:ed:eb:52:f8:ba:48:e6:58:78:4d:9e:
75:b1:e7:9c:b3:83:48:73:ed:2b:e0:54:34:d2:68:
bb:4f:dd:30:53:5d:af:99:c6:5f:3e:54:cc:56:be:
65:5c:d1:db:6d:ca:32:c8:70:8b:9d:56:08:e1:88:
6b:d0:0d:12:e6:9e:5e:12:07:d7:65:b7:cd:2f:78:
3d:66:08:5a:03:6d:7c:13:03:e6:ce:a0:be:15:b7:
20:fb:45:74:f5:37:c3:09:15:87:46:4a:c7:63:a0:
5e:69:9e:b0:ff:cf:67:ab:71:a7:0b:c5:ef:09:3b:
f4:d8:d3:fb:c7:70:81:a0:d2:af:04:9a:9b:bd:ea:
85:0b:b5:75:3c:4c:48:3c:57:79:05:dc:bb:69:c4:
40:65:55:3f:21:3b:9c:fb:14:76:47:69:c5:f8:8f:
62:fe:0c:61:d9:bd:80:87:db:b4:da:37:b5:80:7b:
0b:70:25:d5:23:bb:3e:fc:a9:b6:08:32:be:53:1f:
38:04:fe:5d:c9:2d:99:9c:f7:4e:a2:cd:44:18:8f:
0f:4d:13:32:3b:4f:a5:69:4c:5a:23:49:93:b9:c4:
b3:eb:c3:69:08:a9:6b:ea:c0:ad:49:a9:bd:4a:93:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:C5:09:82:CD:A4:27:A9:42:F8:06:C6:7B:79:12:DA:F4:FB:B1
X509v3 Authority Key Identifier:
keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/0m_FCYLNpCepQvgGxnt5Etr0-7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.214.0/23
185.145.246.0/24
IPv6:
2a10:1e40::/29
Signature Algorithm: sha256WithRSAEncryption
68:bc:4f:d1:32:27:0c:ec:b0:b8:e1:83:5b:ee:ff:2e:61:05:
06:de:6e:58:6d:d8:42:ca:12:77:5b:72:e1:41:85:1b:64:58:
22:ea:69:0c:f3:20:0a:75:89:f0:43:23:03:cf:8d:e4:26:b3:
23:df:8f:b5:c3:0e:9c:ee:43:31:86:b1:d1:d5:cf:a6:45:e4:
f2:75:f7:1d:42:98:9c:e4:53:d2:53:c4:8a:db:aa:16:68:aa:
06:b7:2b:1f:37:fc:96:74:c9:57:e0:88:33:26:13:ca:c4:47:
d7:e2:69:2d:45:f2:07:02:d7:9a:76:8c:96:93:5f:62:99:25:
bb:a1:95:78:c3:2a:b3:7a:54:71:4f:68:ab:f8:0d:c9:e2:44:
4e:ba:74:1e:82:71:3d:09:fc:54:ab:5a:72:38:3f:d9:f9:bc:
15:e2:65:db:8c:08:ec:2f:0b:58:26:35:e8:7d:5f:03:af:56:
f5:ed:c6:0d:ac:37:fc:96:96:41:59:82:0f:8b:4c:64:cb:4d:
fd:27:2a:1f:8e:30:82:b5:6b:19:ef:eb:5a:db:5f:68:7d:fb:
2b:4d:84:71:35:24:49:21:5d:e5:cd:88:bb:82:15:ec:b9:a5:
36:24:6c:d2:78:82:a0:1c:a8:74:68:a1:e6:ef:66:f5:77:69:
a4:9a:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:17 2025 by rpki-client