Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/i1CU3OfnjKON64QGCajnRU5gSS0.roa
File: i1CU3OfnjKON64QGCajnRU5gSS0.roa (raw, json)
Hash identifier: YY36Gemk4OiepX/UrPW7HzLvQewBOeW3gkIiItZgQz8=
Subject key identifier: 8B:50:94:DC:E7:E7:8C:A3:8D:EB:84:06:09:A8:E7:45:4E:60:49:2D
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 019425214360ED5C29F4B59059072FF0D892
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/i1CU3OfnjKON64QGCajnRU5gSS0.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 89.35.52.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:43:60:ed:5c:29:f4:b5:90:59:07:2f:f0:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5094dce7e78ca38deb840609a8e7454e60492d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:4a:6b:97:97:c4:8b:7a:08:d1:fb:c1:ab:
cd:b4:9a:98:17:a0:1c:5a:a6:99:98:74:71:57:b8:
00:dd:a0:f4:96:cd:55:f7:00:e8:cd:57:92:18:bf:
63:ae:40:71:bc:e1:e9:64:de:6d:a6:a8:6f:fd:ee:
4b:1e:45:71:77:90:6e:4f:de:4a:b4:46:dc:f6:71:
c1:dd:19:53:b4:12:50:8a:91:78:fe:be:69:84:fa:
1a:26:d8:ae:85:39:bf:70:2e:fa:01:7d:20:05:cf:
a7:ef:88:33:b8:c4:1a:40:8c:45:a9:61:15:ca:13:
32:ec:4c:69:99:c2:c5:a4:b1:c6:f9:4c:62:4f:b8:
e7:36:3f:03:be:fe:a1:b5:22:cb:0d:ca:7e:26:dd:
fb:25:1a:2a:aa:fd:8c:0a:5e:a6:92:e4:6a:c9:2c:
67:cc:20:24:df:8d:93:79:ce:9c:ce:a7:06:47:e8:
95:1a:10:3b:09:c4:db:f5:c3:c1:c7:4d:71:5a:ab:
20:bd:42:4f:01:f8:bb:c1:9a:c7:48:9b:e7:45:22:
8b:35:1c:d2:8f:b1:a6:c0:a7:09:1c:d6:aa:68:f2:
9f:6d:5b:a0:a6:f4:a3:56:c3:cd:fd:e1:d8:f8:87:
0e:44:24:4d:42:72:3b:66:73:40:ca:d2:bb:8e:81:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:94:DC:E7:E7:8C:A3:8D:EB:84:06:09:A8:E7:45:4E:60:49:2D
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/i1CU3OfnjKON64QGCajnRU5gSS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.52.0/24
193.164.5.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f3:f4:33:14:32:31:03:1e:ac:47:cf:3e:85:a5:db:1c:97:
ab:3b:fe:61:7d:d8:70:cd:87:bf:1d:39:d4:45:60:4b:9d:b6:
07:5e:2a:f2:ed:34:45:23:a3:52:4e:68:a8:7e:f2:ae:6a:dc:
29:eb:0d:de:48:df:ce:2a:49:1f:92:7c:59:c5:9e:1b:e7:38:
c2:06:fe:f1:bc:4b:37:06:fb:c7:ef:8c:4e:37:2d:fb:65:98:
8e:4d:e4:75:73:b7:b5:62:2e:ab:a0:58:e9:84:ea:3b:da:03:
e2:b2:b5:97:e0:4e:08:f2:7f:1b:78:39:23:d6:aa:b1:89:9e:
d5:2c:bd:4d:d2:d2:ce:cc:fe:1f:e9:f6:c3:cc:9b:df:c6:47:
62:c8:ab:bf:ad:e4:5d:e3:45:3b:03:94:f5:a8:38:71:cb:c0:
bb:61:f3:e4:95:7f:f7:fc:79:11:d4:46:af:bd:57:b6:17:b7:
12:86:ea:14:5d:bb:50:f2:5d:d6:28:92:c1:12:e2:d2:3e:30:
e1:06:07:e1:0b:0c:a4:32:f9:e9:a7:92:b5:8b:f1:71:18:dc:
d3:8a:ce:fc:63:83:c1:d0:9e:43:16:c1:1f:61:57:56:ae:13:
8e:da:11:81:21:4d:7d:d2:cb:64:9e:d3:06:5f:28:3e:3f:38:
fb:58:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:34 2025 by rpki-client