
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/usf8ZMLpyYZ1UnCqaN1Tebo7k70.roa
File: usf8ZMLpyYZ1UnCqaN1Tebo7k70.roa (raw, json)
Hash identifier: nBSB5RDpyx7n6eomDBKMgvqCwGgLFM4e6RkY3P3I7jg=
Subject key identifier: BA:C7:FC:64:C2:E9:C9:86:75:52:70:AA:68:DD:53:79:BA:3B:93:BD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421440B5E09EA0B6E4A0954C7A8933F52
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/usf8ZMLpyYZ1UnCqaN1Tebo7k70.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 89.213.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0b:5e:09:ea:0b:6e:4a:09:54:c7:a8:93:3f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bac7fc64c2e9c986755270aa68dd5379ba3b93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:19:2c:3f:c4:75:26:a5:03:a0:f0:6a:29:
89:4b:43:25:d2:8f:59:fb:ef:bb:98:35:fd:66:6d:
0c:85:ee:dd:09:a0:92:39:fc:70:5b:e8:89:c4:1a:
33:5e:90:c5:83:e9:82:a6:e5:49:b2:47:45:2d:88:
29:55:23:2d:1e:6c:d8:ee:39:d0:e7:ca:6c:58:81:
08:ee:80:ba:80:a9:36:86:43:a7:2b:3d:b1:42:00:
27:2c:b8:fb:7d:f3:2c:9b:3d:6d:c0:6f:d3:1a:d5:
be:f9:4f:1a:48:09:af:5d:4f:c8:c4:1a:d7:b6:73:
10:f9:6b:16:ae:d1:db:f8:4d:74:d2:f1:97:08:bc:
6b:fa:f0:b9:14:4e:38:74:52:53:81:56:50:f9:b2:
04:fd:6a:1d:7c:bf:c3:b4:98:85:61:38:82:82:74:
68:92:75:18:c3:e1:b1:3a:3e:cb:48:69:43:25:dd:
70:d2:60:ea:28:4d:a7:5e:8a:23:1f:ef:f1:83:9f:
8e:fb:99:6a:0f:c7:63:e2:a2:b1:4d:ab:df:95:a8:
89:6c:68:c2:00:be:86:da:63:e0:b1:18:d0:7d:18:
bc:47:84:cf:ee:3d:dd:92:5a:95:33:6a:1e:7c:9f:
02:d9:28:e9:a6:ad:1d:5b:3a:fe:c6:39:73:5b:2e:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C7:FC:64:C2:E9:C9:86:75:52:70:AA:68:DD:53:79:BA:3B:93:BD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/usf8ZMLpyYZ1UnCqaN1Tebo7k70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
05:84:78:40:f4:b6:1e:08:82:10:20:28:87:ce:24:2d:75:a6:
da:6c:f5:d4:0b:0d:c8:35:0e:fa:a3:bf:e3:c8:ba:d1:fa:95:
9d:c1:86:76:ed:de:09:c8:ec:b5:5b:1a:d8:0b:12:cb:5d:8c:
fb:0c:74:9b:6f:52:8a:13:92:a8:56:5f:d6:aa:15:b4:fb:1c:
bc:93:0e:4a:1d:c4:47:2b:13:44:1c:46:26:e5:25:2f:20:4e:
cf:08:5b:30:4c:f8:da:55:2b:2a:7b:da:98:b7:15:f0:0d:76:
37:a5:dd:fe:ad:b1:a5:44:8e:53:46:b0:e0:ca:68:00:64:a1:
b3:fa:1a:d1:29:8f:a3:ad:b9:c4:99:b4:be:27:1c:49:99:30:
e6:62:2e:1e:d6:8d:0c:12:60:ca:89:82:00:aa:2e:e4:26:ab:
36:4e:a4:4f:6a:cc:6a:50:6e:67:75:9d:f9:d6:18:84:69:04:
9e:a3:8c:b7:f1:a4:3b:05:d1:b0:5f:98:ff:3b:53:90:64:7c:
62:b9:9d:b3:60:09:26:61:68:dd:ec:27:7c:5f:59:9e:de:73:
52:10:dc:85:0c:a4:90:ec:c9:4a:3c:a7:e0:41:09:26:58:03:
2d:8a:2c:1d:9e:03:62:48:b1:71:e2:b4:a6:cc:5d:2d:8b:8a:
89:01:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 16:08:37 2025 by rpki-client