Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/8t23blmby7I_BMYol5IdpP47EaY.roa
File: 8t23blmby7I_BMYol5IdpP47EaY.roa (raw, json)
Hash identifier: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=
Subject key identifier: F2:DD:B7:6E:59:9B:CB:B2:3F:04:C6:28:97:92:1D:A4:FE:3B:11:A6
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 019423D6B4E8E1559CCD5B45D1B67E184606
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/8t23blmby7I_BMYol5IdpP47EaY.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41311
IP address blocks: 89.249.128.0/21 maxlen: 24
89.249.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b4:e8:e1:55:9c:cd:5b:45:d1:b6:7e:18:46:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2ddb76e599bcbb23f04c62897921da4fe3b11a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:59:89:8e:e2:6d:aa:29:f7:79:5b:2f:f3:
d7:25:68:d3:ee:9d:d0:90:65:ed:8a:9c:88:c4:8a:
e3:42:3b:40:54:c7:5a:17:97:c1:6f:26:eb:5d:06:
45:14:34:d2:1b:bb:80:b9:d4:aa:8b:6c:9a:23:43:
9c:63:8d:fc:6a:a1:6d:ac:cf:7c:09:72:8d:b4:45:
10:52:de:35:a2:45:dc:35:5a:c2:c5:63:9f:06:f2:
c0:21:62:98:a5:d9:6d:de:2f:df:43:09:00:53:cc:
25:2f:65:45:47:85:e8:1c:b0:3a:20:46:76:11:b1:
03:26:7d:39:70:fd:a4:9e:89:4c:12:f4:4e:88:63:
16:3a:77:b7:e9:32:33:65:76:bc:c6:7f:26:9b:87:
45:cf:b3:65:68:49:1e:df:94:9d:d8:af:06:d8:5d:
ed:1a:4b:51:c3:37:f7:39:e4:0a:72:0a:4e:c8:71:
21:ec:70:58:dc:db:e7:31:de:6f:e8:d1:31:11:b9:
ba:a0:17:c9:c6:f5:53:92:ae:f2:e1:00:58:dd:3e:
f2:cb:1c:a6:13:9a:40:4f:93:95:b9:84:f7:c4:32:
b4:38:db:ac:5e:db:df:e8:6d:f4:01:9c:42:21:ba:
06:22:b4:a8:24:15:d7:5f:37:56:24:04:6d:6a:19:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:B7:6E:59:9B:CB:B2:3F:04:C6:28:97:92:1D:A4:FE:3B:11:A6
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/8t23blmby7I_BMYol5IdpP47EaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.128.0-89.249.137.255
Signature Algorithm: sha256WithRSAEncryption
a1:34:79:5a:fc:ce:2e:ea:0b:c0:89:9a:63:a7:0e:72:ea:48:
c7:63:3d:ba:cb:96:3b:db:1e:cd:35:15:d0:b5:6e:4b:06:34:
32:41:94:35:64:12:71:f9:39:63:3f:79:6a:47:8a:1f:bc:43:
45:b1:8e:55:65:72:7a:93:43:6a:22:19:d0:22:14:ef:4a:35:
e9:1c:18:41:40:e6:db:e1:b8:0c:f8:db:3e:fb:ba:c2:96:af:
63:83:7f:35:bb:2c:88:53:91:54:90:28:6a:e0:e7:b6:32:b8:
15:8c:c2:fb:2e:d9:ee:fb:7f:12:c3:2f:e0:39:f0:0d:8b:fd:
ad:c9:d7:f2:52:00:dd:01:ba:58:34:1c:de:b5:84:50:a9:e4:
a2:bd:61:e7:51:bf:9c:e8:96:1b:f6:80:0f:0b:29:0e:71:34:
86:c1:53:95:05:fe:e2:19:9f:94:5f:e9:c8:30:59:07:2b:19:
84:96:6b:bc:fc:69:b2:97:d7:a8:f8:b9:34:c8:02:e2:6e:69:
45:a4:d9:56:56:67:a8:04:b2:c5:5b:e2:22:c6:8f:2e:23:fb:
f7:15:58:0f:70:9f:aa:69:e8:b9:09:54:d5:13:6a:3c:85:1e:
b2:1a:bd:37:fe:02:13:7a:01:6b:cb:05:a8:75:db:6a:9b:5e:
1e:08:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:47 2025 by rpki-client