Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/rR0SERsMGDSydzb64mNSDxlyLE8.roa
File: rR0SERsMGDSydzb64mNSDxlyLE8.roa (raw, json)
Hash identifier: 6ZClDcjrsNqVAgQQBrBIJkzVcVqoxyWa5g+YbuwTQVA=
Subject key identifier: AD:1D:12:11:1B:0C:18:34:B2:77:36:FA:E2:63:52:0F:19:72:2C:4F
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 03D9C933
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/rR0SERsMGDSydzb64mNSDxlyLE8.roa
Signing time: Wed 13 Apr 2022 09:00:12 +0000
ROA not before: Wed 13 Apr 2022 09:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 89.47.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64604467 (0x3d9c933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Apr 13 09:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad1d12111b0c1834b27736fae263520f19722c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:9d:a4:c0:1e:9a:6f:e1:00:46:6a:29:e6:
44:bc:e3:ac:d2:14:8f:d4:19:ad:5d:52:f8:03:82:
11:79:a6:68:e4:e1:c1:d3:05:72:bd:9a:22:45:04:
4d:b9:b2:5c:5e:db:5d:56:c5:5f:85:43:9d:92:7e:
e2:fb:91:ea:b2:a8:e4:51:03:33:25:4a:eb:62:34:
4e:43:89:b6:89:93:f8:c7:09:97:89:20:25:9e:ec:
bf:9f:7d:c5:76:cf:56:c0:a4:99:0a:bf:a4:85:f6:
b4:3b:c8:5d:f2:7c:18:82:26:43:61:d3:16:11:9b:
14:82:27:ee:72:88:8d:87:60:61:8c:0c:80:9b:c9:
ef:de:ff:ce:6d:f8:bd:7a:51:ba:a9:61:d6:27:9e:
5a:74:aa:6d:e4:86:f4:9d:2f:f5:03:ab:23:f9:f9:
d3:4c:b6:7b:12:a6:12:a8:d1:86:96:1d:01:be:89:
8d:ea:de:cc:ab:65:06:1d:2b:25:cc:3d:9f:93:03:
f3:08:6a:08:95:ec:fd:1d:26:ba:28:27:fc:9b:4b:
67:53:c4:7f:31:ad:7b:1c:92:a1:40:36:91:09:7e:
1d:24:b8:c3:a8:a2:b7:94:d2:53:71:65:88:85:cd:
ee:50:d7:4a:58:b4:2b:e1:c2:68:e3:c2:15:d5:94:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:12:11:1B:0C:18:34:B2:77:36:FA:E2:63:52:0F:19:72:2C:4F
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/rR0SERsMGDSydzb64mNSDxlyLE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.8.0/23
Signature Algorithm: sha256WithRSAEncryption
76:dd:49:a0:ba:32:46:62:41:14:e2:9e:60:f4:0c:5f:a5:50:
f5:b0:7b:1d:28:c5:aa:56:e0:40:b6:95:b4:3c:9a:04:fc:37:
a5:2c:5d:28:9d:89:6a:34:95:5a:3e:97:b3:72:f8:a9:23:93:
a9:31:91:db:b0:2d:c2:d5:a1:2d:43:72:6f:6c:de:37:0b:32:
cd:1a:f2:f5:b0:25:a9:f1:52:6c:ec:42:1a:7f:bf:08:1f:0f:
f5:75:a4:20:25:2c:4f:e2:9e:92:6d:85:4f:e7:98:72:13:b1:
c5:51:aa:bb:e2:c0:57:b2:06:93:81:30:fa:ab:cf:07:b7:f0:
07:46:2c:9b:37:46:43:61:43:f6:ae:18:d8:88:d2:ac:0c:df:
f5:cd:ed:99:a6:e1:b7:25:f8:e2:47:67:51:8f:61:f8:ae:24:
0d:84:f2:48:af:29:db:08:bc:27:3d:2d:87:42:4e:81:04:31:
fb:fa:2a:5e:b8:c5:38:e3:9e:fe:62:cf:bc:be:82:8d:d7:d2:
75:e3:3e:87:b5:60:50:46:20:ae:35:bb:54:05:84:93:e9:74:
4a:82:be:50:5f:1d:ae:9c:2a:7e:49:8e:a8:75:d2:16:01:25:
cf:81:1b:a2:36:f9:89:a8:cb:96:fe:61:dd:e5:17:52:40:78:
8f:9e:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:09 2025 by rpki-client