Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1OgDZNR6ExIU0d87CEj4ms29-xw.roa
File: 1OgDZNR6ExIU0d87CEj4ms29-xw.roa (raw, json)
Hash identifier: FLSztUi/oDYrF+35wwg0d/y9kmEQbtvGHF+EW8TqYZE=
Subject key identifier: D4:E8:03:64:D4:7A:13:12:14:D1:DF:3B:08:48:F8:9A:CD:BD:FB:1C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195856692D3A690B7C7DB36F0C141581BCA
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1OgDZNR6ExIU0d87CEj4ms29-xw.roa
Signing time: Tue 11 Mar 2025 13:30:46 +0000
ROA not before: Tue 11 Mar 2025 13:30:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 89.33.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:66:92:d3:a6:90:b7:c7:db:36:f0:c1:41:58:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 11 13:30:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4e80364d47a131214d1df3b0848f89acdbdfb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:4e:d5:c7:25:d2:4a:4a:43:1a:c7:a1:18:
cd:76:37:10:0a:f2:4d:9a:1a:91:4a:75:97:f2:b9:
ad:27:64:7b:3a:c3:a4:97:de:66:56:fa:eb:bf:bd:
39:9c:58:ca:3b:1d:27:d7:66:34:3b:b9:cb:0d:59:
93:dd:5e:e9:1e:57:bb:06:ad:d4:3f:a0:f6:37:46:
a7:06:36:ef:b7:6c:66:be:23:93:7a:a9:78:5b:6b:
02:ad:d9:ca:5b:60:63:f4:e4:b6:f2:47:19:9b:8c:
a5:48:67:96:0e:90:4c:d3:9d:cc:17:fb:9d:85:3d:
ed:9b:c4:75:51:f9:5c:dc:ee:1b:0d:46:3f:c4:04:
a4:de:c8:11:80:1e:27:37:ca:61:81:fe:d7:87:1f:
b2:09:de:1c:c7:29:f1:07:ee:12:df:fd:8e:68:c2:
c6:fb:c9:86:d4:4b:3a:48:de:d6:1f:8e:ea:d0:91:
15:79:8e:4f:b8:3b:87:f7:1f:96:8a:be:04:3b:a1:
61:47:7f:b8:40:21:d4:07:ff:20:f5:7e:8c:8d:fc:
93:7d:ee:03:e9:a0:d2:f5:96:40:f8:85:8a:fe:16:
71:c8:f8:4e:dc:16:aa:88:2e:6a:cb:a2:9d:eb:cc:
f3:74:8c:50:92:fc:17:5b:fd:7f:82:3a:50:62:a1:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:03:64:D4:7A:13:12:14:D1:DF:3B:08:48:F8:9A:CD:BD:FB:1C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1OgDZNR6ExIU0d87CEj4ms29-xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c6:a8:9d:36:72:63:98:d7:27:d7:26:9d:36:c5:5a:97:10:
4d:79:64:29:a1:e1:f1:17:2f:98:4e:07:04:9b:d1:13:67:da:
79:94:7e:49:8e:4b:44:d9:2a:85:10:3d:eb:53:0a:d2:20:16:
7a:a5:54:35:31:c8:1e:99:72:55:eb:5e:ef:dc:7d:d5:81:47:
6a:3a:89:00:4a:b4:f4:e8:dc:69:cd:56:37:df:9b:9e:d8:f1:
82:ad:a1:38:99:14:45:59:04:5d:ae:14:21:3b:f5:82:b8:63:
a8:88:ea:f3:8f:8e:2a:cd:e1:c8:38:46:11:a2:59:c6:ec:bb:
15:6b:2c:c8:aa:b7:53:7e:15:df:ed:75:77:b8:2c:62:8a:3f:
1a:58:21:d7:14:6b:ce:26:b1:a6:4d:d9:95:64:1b:2f:a4:7b:
d8:15:5f:54:0c:94:62:26:08:8b:27:63:1b:38:ed:95:67:5b:
90:36:fc:58:35:42:a7:96:84:0d:d6:6d:c5:95:0b:99:a5:50:
af:1e:6e:0f:2f:a3:12:14:03:01:b9:8b:45:78:97:13:f3:57:
d4:89:b4:c4:c8:f5:4e:cf:04:14:11:40:09:5e:2f:f0:64:a8:
7d:93:9a:63:78:de:1c:43:3e:18:24:bb:3d:d7:3c:24:42:b6:
ae:3a:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:56:37 2025 by rpki-client