Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AKCl3JP8lIc1PdaSr3MvxW9XNH8.roa
File: AKCl3JP8lIc1PdaSr3MvxW9XNH8.roa (raw, json)
Hash identifier: FdVllvohtYgsOgy8SnOqcCdCOcPvjBThTpFNb4fzoTQ=
Subject key identifier: 00:A0:A5:DC:93:FC:94:87:35:3D:D6:92:AF:73:2F:C5:6F:57:34:7F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195C8DFDFFB2FCB48DF956B6C41379757DB
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AKCl3JP8lIc1PdaSr3MvxW9XNH8.roa
Signing time: Mon 24 Mar 2025 15:57:49 +0000
ROA not before: Mon 24 Mar 2025 15:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:df:df:fb:2f:cb:48:df:95:6b:6c:41:37:97:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 24 15:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00a0a5dc93fc9487353dd692af732fc56f57347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:45:3f:e9:a1:a4:69:24:02:d5:31:8d:05:
a8:f8:c7:98:76:55:c2:86:6e:cd:09:b5:da:37:80:
90:28:a7:2b:1c:09:b6:ea:d3:16:7d:54:ec:a7:b1:
53:65:16:95:7d:4a:70:4e:9c:7d:d4:2c:bf:56:67:
8b:a9:43:fe:17:cf:ef:ea:11:20:a5:5b:7a:bb:fc:
6c:d1:65:65:bc:b9:f2:4e:d0:ef:b3:17:2c:c8:8d:
f3:41:8e:8e:94:f4:86:0c:e7:65:f9:ce:bb:80:51:
5a:c4:e0:3f:f4:f0:7b:e9:b6:3e:4d:a5:5a:2b:fa:
11:fb:75:c9:fe:77:64:5b:22:68:c7:15:7f:b4:a2:
eb:c9:13:52:70:8e:bf:f9:ef:cf:6c:90:ec:5e:96:
fa:54:7c:c6:a3:e1:ee:6c:df:c2:bc:52:e3:c5:54:
e0:d1:14:14:62:8f:68:16:a5:63:c7:f2:80:f9:cb:
78:19:3d:b1:08:f7:49:6a:ca:74:2d:29:ea:89:19:
fe:6c:85:09:e2:f6:fe:82:db:38:74:50:e6:b0:f6:
09:50:d5:8b:3f:80:55:a4:ae:51:ab:f8:e0:a7:76:
20:65:e8:a6:80:98:9f:02:04:ce:fe:d1:52:0d:1e:
ce:a4:4b:ea:c4:83:b9:9f:7d:43:79:4f:dc:b4:da:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:A5:DC:93:FC:94:87:35:3D:D6:92:AF:73:2F:C5:6F:57:34:7F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AKCl3JP8lIc1PdaSr3MvxW9XNH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
4f:2a:70:61:e3:43:ef:3a:67:04:f4:96:2c:84:aa:1e:7e:ec:
23:3c:28:67:33:97:f1:f6:d6:b9:44:c0:77:0f:06:55:81:16:
4a:33:3d:b4:d2:61:10:a9:62:4f:10:b0:14:40:d5:a2:8e:5e:
29:e7:63:70:8c:a7:30:ac:f8:62:8d:9d:ce:c2:36:77:9c:fe:
4e:40:c2:24:a8:d6:05:a8:f5:75:39:c6:a9:25:9f:04:61:6d:
98:6f:30:8c:b3:61:04:17:f4:43:45:1c:5e:05:8c:d1:90:c0:
f4:f9:dd:14:d2:c2:3e:98:30:ec:5c:61:02:05:8e:fc:fb:10:
6a:24:ac:3d:6d:7e:84:58:6c:63:dd:db:c1:1c:b5:21:3e:fa:
e4:76:de:9d:c9:86:a8:79:64:cf:e1:46:fa:46:02:73:f1:ba:
47:1a:68:c4:35:e8:57:47:d3:cb:4b:d1:20:5f:e3:fc:97:51:
8f:d3:27:e6:a8:26:17:32:81:47:bd:de:56:02:aa:da:73:5e:
55:87:05:09:9e:98:58:eb:15:b7:c2:af:37:cd:ab:ee:3c:f4:
0e:b3:1b:04:3f:a4:5b:7e:bf:79:30:59:26:1e:cb:9b:7e:ed:
21:29:be:fa:6f:74:06:c9:62:5b:08:b7:65:80:96:19:3a:7f:
99:47:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:09 2025 by rpki-client