Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/A54dZBRajvWdjzk68RfHGNnZs0w.roa
File: A54dZBRajvWdjzk68RfHGNnZs0w.roa (raw, json)
Hash identifier: 9Za5FIhcJm7XHHSztqLtmB8wGVECNk64wF9j4AgxUok=
Subject key identifier: 03:9E:1D:64:14:5A:8E:F5:9D:8F:39:3A:F1:17:C7:18:D9:D9:B3:4C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0193675120049C2F0BD63650D987D4DCF85F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/A54dZBRajvWdjzk68RfHGNnZs0w.roa
Signing time: Tue 26 Nov 2024 07:13:09 +0000
ROA not before: Tue 26 Nov 2024 07:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.83.0/24 maxlen: 24
89.43.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:51:20:04:9c:2f:0b:d6:36:50:d9:87:d4:dc:f8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 26 07:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=039e1d64145a8ef59d8f393af117c718d9d9b34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:cb:2d:e5:a2:3a:47:16:01:71:58:5e:78:
42:cc:b7:1b:6f:45:69:28:5b:98:83:44:50:09:74:
82:3d:b0:08:9e:ef:5e:1d:1a:44:30:2a:5b:2b:c2:
86:59:08:bb:e9:70:d8:a8:37:bd:6f:bd:54:5b:42:
34:63:9e:56:6e:1b:7b:8a:14:51:8f:63:8a:93:56:
51:7e:2e:c9:74:d0:7b:a8:7d:fb:fa:d8:04:39:be:
4d:8b:ab:11:f1:c0:b5:4a:33:6b:e5:0a:de:93:34:
4f:b5:c0:b8:d0:26:1d:11:d3:51:f8:d6:90:9f:51:
6f:d6:1a:3e:1f:4c:a5:34:c8:58:8e:35:20:a9:4c:
0d:fc:3f:b1:f6:0a:03:8e:15:62:5f:33:d2:d4:d3:
4f:13:92:42:e1:98:29:26:a3:af:e1:a6:72:45:bf:
e4:25:4b:7a:86:4a:12:92:c0:51:4d:d3:7b:46:6b:
af:62:fe:70:e8:a8:84:4c:b9:83:ee:fb:62:37:ce:
01:fd:02:81:02:49:af:64:1c:6f:b3:e5:6b:1c:82:
18:8a:fa:3a:c1:a8:6f:c2:e8:7f:64:e9:39:15:0e:
ba:a5:23:45:05:32:bb:f3:6f:a5:b3:04:99:36:7f:
18:0f:8b:7f:4a:61:9e:d9:ae:b3:d0:1a:cd:d5:bb:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:1D:64:14:5A:8E:F5:9D:8F:39:3A:F1:17:C7:18:D9:D9:B3:4C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/A54dZBRajvWdjzk68RfHGNnZs0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.43.141.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b1:22:d2:ad:3f:b5:d6:e2:cc:16:0e:55:79:e6:0d:44:c9:
39:13:4f:3c:44:32:11:34:16:83:22:7f:61:d4:55:30:d2:15:
88:ee:56:4a:9e:80:ce:8d:9a:ff:33:40:a5:ce:54:c0:4a:25:
0e:c0:f6:b6:09:f3:f2:37:e8:a8:67:64:b4:45:8f:5d:cd:65:
9f:18:ef:02:6a:30:53:c5:b4:de:4b:67:92:fb:47:92:db:d9:
36:ab:39:11:33:ef:10:7f:99:a4:14:71:bf:05:68:0d:d4:bb:
ce:6f:d0:9d:b2:9f:a0:d4:ee:ab:08:c8:86:52:92:10:a6:3a:
6d:9f:05:33:3b:1d:37:92:e8:8d:34:d1:8e:af:f9:b7:dd:96:
f5:d7:e8:4c:49:3c:fb:e9:cb:1a:57:06:0d:6e:61:28:dc:25:
ce:b0:02:dd:83:e8:e1:94:09:0c:f7:b5:c0:53:a2:d4:d9:bc:
74:ab:98:54:a3:b1:4f:ea:34:33:48:a7:5d:4f:8c:1c:5f:d6:
b8:20:b0:6f:b3:89:a5:24:c2:fc:60:fc:e8:1b:36:90:2a:0a:
a9:63:64:14:c0:b7:8b:2b:28:dc:39:34:5f:53:cd:04:4a:9f:
71:98:1d:9e:05:51:51:c9:8d:45:83:b1:c2:64:e9:36:42:c7:
97:a7:ed:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:32 2025 by rpki-client