Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa
File: 1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa (raw, json)
Hash identifier: xMXmg6U7dk2I47UFlru0YwTYb2PTB2hNFflS+Hs5NZA=
Subject key identifier: D4:20:AF:CE:C1:29:47:61:F3:59:F0:2D:08:F7:F3:FA:9A:CB:E1:7C
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019420D61ED90DD86E20B4A388C79486A9CB
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8860
IP address blocks: 89.187.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1e:d9:0d:d8:6e:20:b4:a3:88:c7:94:86:a9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d420afcec1294761f359f02d08f7f3fa9acbe17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:3c:6c:e6:4d:ee:a7:38:de:66:40:7d:8f:
37:d9:ec:a2:f0:c3:2a:43:12:bf:d8:fb:f6:6c:22:
db:99:b0:6c:be:ab:27:0a:4f:4c:17:ed:40:7f:2c:
b0:aa:d6:6d:e9:06:11:e8:1b:da:d1:f8:c0:ab:92:
2f:ae:c9:d2:28:5e:d3:e8:b7:06:c5:c2:b9:c8:13:
97:0d:7a:ea:82:57:7f:89:21:9d:36:ca:6c:27:c6:
f2:3a:9b:ff:40:a8:68:8c:98:05:13:fd:13:f2:ab:
1a:5c:d7:50:26:0f:b3:4d:b1:35:fb:32:97:43:3a:
29:a3:b9:52:5a:45:e6:c7:69:6d:b2:4a:24:b8:91:
ef:cc:13:e5:a3:f5:e1:88:eb:09:53:c6:12:25:e4:
35:ed:1f:49:74:01:8a:02:be:6d:9b:84:b7:fc:eb:
8a:9f:8f:71:c4:60:a0:70:05:63:8e:9a:1a:68:6d:
8f:80:73:ea:be:58:9e:7b:fd:d8:41:c3:1f:b7:1b:
17:09:e1:00:d2:3b:12:af:0a:69:15:c2:c2:80:9e:
45:3b:95:39:70:4e:42:4d:2f:2f:71:64:77:26:b6:
3e:a7:17:97:b7:3e:3c:82:c8:6f:ea:77:4c:80:c2:
b0:34:9b:e6:da:44:5f:16:07:7e:5c:4a:46:f5:ce:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:AF:CE:C1:29:47:61:F3:59:F0:2D:08:F7:F3:FA:9A:CB:E1:7C
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ff:21:0f:db:6a:d1:cd:e5:b8:9a:a5:a2:3e:14:60:40:68:
16:19:91:ca:ba:3f:42:61:a9:dc:4c:57:38:7b:ba:a6:ea:d9:
49:8b:1c:a3:ef:6d:bd:42:f2:9c:53:63:b0:27:36:6c:e7:d4:
33:cc:dd:94:90:eb:a9:02:27:eb:fa:f9:27:ba:60:a7:d5:75:
3a:0d:d9:ad:b2:9f:da:e2:5a:df:f7:fe:92:3b:cf:33:ea:9b:
cc:2d:d2:34:a0:7a:63:e9:f0:d1:b5:26:89:c0:dd:d3:c5:10:
96:14:26:d8:8f:8b:fa:6d:c2:65:ae:ed:c7:d9:2e:a9:57:be:
a7:d5:79:f4:25:13:a5:21:ac:0c:fa:c3:2e:54:e7:dc:a9:5c:
18:25:d7:cf:b7:4a:f2:04:aa:7b:dc:1a:55:de:0f:bd:2c:66:
bf:53:cb:b2:32:4f:9c:69:fa:94:c1:35:4a:c4:7a:21:9c:ee:
e1:9f:9e:49:e1:f3:22:33:f3:32:d0:05:4f:e9:16:ff:d4:61:
54:3c:75:ef:f5:b0:92:78:7f:8b:ed:bf:3f:ed:e1:06:5d:f3:
7e:aa:6c:e7:55:b5:bc:7c:3b:33:2e:6b:26:4f:ca:e2:94:ad:
fc:1b:aa:0d:be:90:27:ce:d5:98:17:2a:2b:89:ea:5f:0b:93:
f4:f5:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:58 2025 by rpki-client