Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/TqHiNLl5mrjOhHbAFYixfR0hyKw.roa
File: TqHiNLl5mrjOhHbAFYixfR0hyKw.roa (raw, json)
Hash identifier: tKiuSdrZ18K8HL6wtj4abrvFTNBZIcj3M0BhwfBqXJw=
Subject key identifier: 4E:A1:E2:34:B9:79:9A:B8:CE:84:76:C0:15:88:B1:7D:1D:21:C8:AC
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01958E9DEEDC71F08219522FA9E1CC0792F1
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/TqHiNLl5mrjOhHbAFYixfR0hyKw.roa
Signing time: Thu 13 Mar 2025 08:27:49 +0000
ROA not before: Thu 13 Mar 2025 08:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 89.190.150.0/24 maxlen: 24
139.28.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:9d:ee:dc:71:f0:82:19:52:2f:a9:e1:cc:07:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Mar 13 08:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ea1e234b9799ab8ce8476c01588b17d1d21c8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:f8:16:f2:3e:28:44:cb:e3:4c:1f:31:da:
54:64:ef:e2:a5:bd:19:ca:80:fd:fa:fd:b7:23:c3:
86:6b:45:b3:34:c9:22:c3:76:8e:5e:69:89:77:fd:
4a:cb:37:3e:5e:ba:51:2c:1c:39:e9:53:60:c8:a8:
84:63:3a:d9:bc:91:d5:ec:17:26:41:8d:27:3b:6d:
d1:74:bd:c2:9b:89:3d:d9:ea:b1:b8:c4:0c:38:48:
ce:5f:8d:9e:8a:00:c7:2f:4a:c0:35:55:c8:45:ef:
43:11:d3:ae:f5:58:62:c8:64:31:94:7a:96:66:31:
32:f2:d5:ac:3c:63:03:ce:10:a2:68:26:36:75:7d:
c0:c5:6a:b3:a9:a8:b7:71:53:01:7d:59:04:62:18:
fb:57:3f:db:fe:27:c4:a0:7c:91:07:02:11:cf:71:
a8:1a:98:ff:b2:e2:39:43:99:e1:cc:6e:d3:ae:82:
00:08:64:97:9c:2b:5d:90:2c:80:da:6a:f0:62:0a:
3d:2f:f4:18:47:50:66:bd:6b:9a:ba:75:cc:58:68:
c8:63:b2:ab:9c:1e:55:4c:16:d9:e9:64:9d:2a:9f:
5c:a4:29:8b:86:0e:6d:28:95:3e:c4:4a:f8:5a:e7:
f9:fa:c8:f5:df:c8:a0:f8:6f:75:51:aa:2e:02:57:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A1:E2:34:B9:79:9A:B8:CE:84:76:C0:15:88:B1:7D:1D:21:C8:AC
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/TqHiNLl5mrjOhHbAFYixfR0hyKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.150.0/24
139.28.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:27:f2:71:91:8a:46:fa:13:17:6c:13:1f:1f:c0:1f:5d:ae:
bb:85:87:17:b6:51:61:f4:3c:dd:77:31:4d:77:5e:0d:61:10:
ab:e8:a9:29:a6:de:c6:d0:9b:3a:13:e8:62:2b:4d:bd:22:f2:
4b:48:09:7f:a2:e6:95:7d:d4:70:60:2b:9d:d8:88:57:cb:83:
ef:73:4c:71:f1:35:f1:c9:a1:1d:54:81:c0:81:f0:6c:17:08:
40:f7:b2:b6:14:8f:7b:95:5f:9e:cb:ef:68:03:5b:44:c3:8e:
a9:7e:9a:d3:5a:dc:63:72:31:c7:57:64:c6:98:23:ad:f7:cd:
89:a0:f4:b9:91:b4:5f:95:e2:47:a2:c2:94:24:39:ca:a3:94:
22:ce:66:a4:2e:a0:ac:9c:84:b6:f1:49:c6:21:c2:3b:60:3a:
f7:08:a1:8f:99:22:b6:9d:17:c2:85:c1:ea:65:ee:ab:f5:e7:
79:56:81:92:e4:d6:c7:88:18:05:86:12:28:bc:04:ef:18:0f:
cf:41:d9:64:ef:8f:01:15:08:98:df:6f:0e:56:44:26:d5:4d:
9b:d7:91:7a:d9:c6:b6:9c:30:8d:78:a7:90:a5:80:45:87:da:
07:0e:9c:f2:85:64:43:9f:a7:11:71:3a:55:19:87:a8:52:09:
08:6f:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:51 2025 by rpki-client