Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/47T-_h4yrwTkNISxK8J3mV88Fh0.roa
File: 47T-_h4yrwTkNISxK8J3mV88Fh0.roa (raw, json)
Hash identifier: BQum24aWy9VPt+BVB7kWULFG+ntEIPlMGrK1sM76ojQ=
Subject key identifier: E3:B4:FE:FE:1E:32:AF:04:E4:34:84:B1:2B:C2:77:99:5F:3C:16:1D
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019420D61F5EB853E1ABC41CA2652B3CA3D8
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/47T-_h4yrwTkNISxK8J3mV88Fh0.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31083
IP address blocks: 89.187.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1f:5e:b8:53:e1:ab:c4:1c:a2:65:2b:3c:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b4fefe1e32af04e43484b12bc277995f3c161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:52:2f:85:42:f6:be:36:38:b6:64:a2:2a:
6c:e7:a5:fe:87:a5:5f:53:3a:5d:a5:5d:f6:44:d3:
27:35:14:15:96:72:a2:d8:9c:a2:30:7c:f2:35:ba:
c5:95:36:30:a5:d8:0c:f3:30:6d:3f:f1:0d:37:1d:
5e:fc:0e:7d:d0:5f:23:cf:f2:00:94:77:4e:87:dd:
3b:9f:cc:aa:13:20:5e:8e:7a:23:1b:f7:a4:4f:cc:
d0:f6:e2:8d:90:2d:0a:37:98:d5:95:b8:68:b1:5c:
ae:36:f2:af:b4:c7:9a:5b:b0:72:33:5f:f9:df:ea:
71:7c:60:cd:07:36:43:aa:94:4f:a5:35:7f:10:c5:
66:3e:fa:2d:e0:77:1e:b5:cf:ff:ff:56:e1:22:5d:
52:37:0e:c8:04:b7:8d:52:d6:a0:c8:42:0e:8b:cb:
d9:c6:a3:24:a1:df:3d:81:d8:93:83:9d:f9:2a:54:
33:ff:a4:23:d3:c7:ac:5b:27:ff:27:e4:f0:07:6f:
81:08:2a:94:c2:5e:7e:7a:53:72:61:3e:f2:f6:19:
41:24:eb:13:67:64:87:c9:bd:dd:8d:be:d4:c2:ca:
d3:d6:e0:2d:a9:cc:8d:ff:7e:6b:e7:27:1a:df:b0:
07:2f:ed:5f:04:66:dc:92:89:3e:9c:45:b3:a3:76:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:FE:FE:1E:32:AF:04:E4:34:84:B1:2B:C2:77:99:5F:3C:16:1D
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/47T-_h4yrwTkNISxK8J3mV88Fh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8f:2e:6d:b1:8d:10:4d:03:ef:f8:95:60:2f:b1:4b:7c:e7:
ea:1b:97:95:ac:9d:3f:74:15:0a:61:c4:88:ac:b7:c3:ad:2c:
20:3e:28:c3:e4:89:59:9a:20:1b:22:45:3a:91:c9:24:02:5a:
eb:a1:df:36:2e:84:7b:20:a1:16:c8:66:38:a4:2d:4d:11:51:
5d:c1:a8:fc:75:f7:41:f4:ce:e2:32:07:eb:5d:98:f2:b2:7f:
5f:c8:67:a1:0e:7e:29:33:5e:78:27:10:e3:35:eb:fb:29:c8:
a0:e4:83:cb:4b:af:10:f8:3c:22:18:6c:ba:2f:eb:86:d9:8e:
9b:97:77:8b:47:2c:c7:10:b9:55:b4:51:97:db:eb:ee:b8:6c:
f1:f5:8c:bf:04:ad:1c:cd:0e:3a:ea:fd:c5:7b:f3:9b:8f:cf:
92:70:f7:bf:26:cc:93:11:26:a0:b1:1b:eb:e7:2c:00:5c:7b:
83:9c:75:8f:2a:e9:25:ae:3d:56:71:b7:61:a3:7b:87:c1:64:
7e:37:97:5e:f1:c0:8f:a3:b7:3d:61:4b:2d:38:f8:c5:1f:f2:
fb:ec:f1:7a:bd:97:ff:23:cf:8d:1e:d3:86:6c:70:b7:ff:8b:
97:10:38:bb:50:ff:6d:a2:03:a5:4c:a8:fd:7f:e5:c7:d6:bb:
98:9b:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:16:50 2025 by rpki-client