Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/84fRK7OwW7YBpBtUSGSy4bB1f8A.roa
File: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (raw, json)
Hash identifier: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=
Subject key identifier: F3:87:D1:2B:B3:B0:5B:B6:01:A4:1B:54:48:64:B2:E1:B0:75:7F:C0
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D6314C570E29E127BE2963FA4FBA2F
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/84fRK7OwW7YBpBtUSGSy4bB1f8A.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213094
IP address blocks: 89.22.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:31:4c:57:0e:29:e1:27:be:29:63:fa:4f:ba:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f387d12bb3b05bb601a41b544864b2e1b0757fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:75:8f:41:d1:76:f4:df:6a:39:0e:a9:e9:
2e:60:35:87:36:4d:db:7a:16:52:5c:c6:4f:e5:0e:
31:e0:b1:92:84:77:ae:89:0a:40:77:5d:6f:99:06:
8d:e0:21:97:86:6a:30:52:68:e0:4c:67:22:e9:2c:
9f:22:c4:ac:6c:80:2a:bb:b7:c6:b4:6a:69:c8:ce:
63:04:75:d1:5e:47:e9:33:e4:0a:34:b2:13:1a:62:
75:e0:ea:14:07:64:0f:bb:54:de:a2:6e:95:08:59:
30:69:bb:03:c1:a4:8e:86:81:71:f8:aa:e9:ca:41:
87:6f:41:d5:2a:65:5a:0e:4b:b5:6e:5b:08:35:2b:
78:29:80:1e:09:c9:ac:bd:a5:24:d8:cd:86:37:29:
34:b4:ac:ac:72:70:d7:3e:69:60:01:4e:45:15:aa:
9b:d4:87:03:e1:69:a0:31:7e:f0:77:ff:29:64:ee:
39:a9:e1:95:f9:79:07:a3:a9:ab:79:36:68:ac:72:
c6:0c:c6:0f:2d:c7:9b:d1:9f:11:a5:4b:84:7e:7b:
86:dc:4e:96:c7:46:e3:56:8f:bd:48:5b:a3:65:75:
35:7b:5e:a3:4c:28:a9:fd:5d:d7:8a:bc:1f:fe:82:
16:7c:21:46:ac:fa:1c:51:9e:a9:f3:48:f8:3c:30:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:D1:2B:B3:B0:5B:B6:01:A4:1B:54:48:64:B2:E1:B0:75:7F:C0
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/84fRK7OwW7YBpBtUSGSy4bB1f8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:61:5d:52:f3:f4:f9:9e:b3:3e:20:54:e4:cb:c2:92:c8:12:
05:77:be:52:d1:8a:13:d9:c8:bd:7a:d6:dc:7a:ac:02:64:e1:
e5:a7:d4:ee:59:f5:17:01:42:1f:4f:3d:b4:1f:7f:9c:0b:1d:
dd:75:13:ac:22:88:75:26:65:a9:5d:bb:ff:67:4e:65:6f:c9:
fa:ba:04:f9:01:32:c8:bb:6f:65:1d:1a:43:11:77:8e:9d:ed:
82:05:78:68:ec:23:31:6d:fc:73:da:e0:2c:8a:ab:de:03:79:
0c:d3:b2:70:d9:d3:c7:a5:f2:b4:0f:e5:f1:b0:89:2a:96:0e:
e8:aa:72:60:65:73:1a:22:a7:de:6a:01:17:86:18:68:eb:3f:
55:18:06:58:5a:a8:fb:26:e5:09:76:68:ff:6d:88:67:a2:ff:
49:03:a7:85:5d:5d:1c:48:af:c2:7a:90:27:db:2d:8f:8d:12:
b1:04:36:99:38:21:94:01:75:79:7f:a2:8c:1a:66:ae:73:47:
82:f7:0f:f2:c5:af:0c:bc:9f:f4:8e:31:bb:ac:7e:7a:68:e5:
f8:ef:d8:bd:de:86:0f:9a:4a:58:15:23:6a:73:ee:1f:cf:b9:
8d:e4:dc:3f:ef:c9:95:20:47:e5:36:b4:d4:62:77:dd:bb:50:
43:2e:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:55 2025 by rpki-client