Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DlzxolNqO3OV7PKPhEHEJZbogXA.roa
File: DlzxolNqO3OV7PKPhEHEJZbogXA.roa (raw, json)
Hash identifier: evnMZWT7ddKHaQeXKJ4oCzDGfjIqjgAwRK/pukHIZMI=
Subject key identifier: 0E:5C:F1:A2:53:6A:3B:73:95:EC:F2:8F:84:41:C4:25:96:E8:81:70
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195856691AA40CA985BDA681F3E900162A1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DlzxolNqO3OV7PKPhEHEJZbogXA.roa
Signing time: Tue 11 Mar 2025 13:30:46 +0000
ROA not before: Tue 11 Mar 2025 13:30:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:66:91:aa:40:ca:98:5b:da:68:1f:3e:90:01:62:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 11 13:30:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e5cf1a2536a3b7395ecf28f8441c42596e88170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:0f:20:6e:dd:80:13:37:d8:04:b9:65:80:
ea:e5:fd:78:87:bf:80:43:5d:c3:80:a8:c9:09:a0:
2c:f4:a9:95:6a:c4:10:22:b3:7c:1a:bd:7c:a8:81:
15:f2:8b:46:49:16:de:53:c6:19:c1:4e:7c:c0:8d:
90:4d:e8:31:19:2a:18:53:66:b6:3d:4c:fb:21:c3:
14:1d:99:fc:64:8b:7b:cc:02:78:bb:20:45:6c:8c:
54:9d:f7:7a:7a:9e:35:ee:f1:94:7a:a8:06:36:78:
9f:7b:48:04:5e:cc:fa:b6:74:4c:3a:34:ca:22:fc:
fd:cf:ca:d2:a0:00:d0:e1:bc:81:de:cb:96:c4:f4:
e6:a8:6a:e5:03:ab:ab:51:24:ed:ce:0d:aa:3f:6f:
e4:93:fe:eb:56:1a:8a:f1:3d:b3:31:ee:07:ca:7c:
37:b0:29:ea:28:57:78:69:49:36:47:0d:32:75:09:
5c:10:65:19:6b:e5:8b:7f:e3:e1:02:2f:0e:6d:d3:
14:5f:87:c7:c3:33:c0:88:dc:66:59:6c:77:a6:bd:
de:d3:37:4a:1a:d4:16:a3:85:c0:f3:95:7c:17:c9:
db:b9:3f:66:2a:e3:ca:0d:39:c6:7f:75:95:43:13:
38:55:c9:3d:af:f6:07:b1:c8:c6:42:c0:dc:b7:f3:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:F1:A2:53:6A:3B:73:95:EC:F2:8F:84:41:C4:25:96:E8:81:70
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DlzxolNqO3OV7PKPhEHEJZbogXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
08:74:2c:77:f0:7e:d8:3c:dc:0d:a7:43:1f:1d:4c:bc:d8:69:
6b:94:33:a4:7c:a7:3f:4e:45:e3:a0:ee:60:0e:a5:d3:8c:81:
de:97:bd:84:79:d2:6c:bc:ff:bd:77:57:0e:d8:b3:04:47:44:
e8:c3:20:7e:b5:31:6a:b5:ca:a6:c6:f0:c1:64:57:13:32:c3:
cf:dc:62:3f:86:3b:aa:a5:75:0d:09:6e:64:2c:1a:84:a8:dc:
47:49:0b:b6:7f:65:33:e1:1d:ed:9e:90:99:5b:33:be:f9:5a:
30:ac:8f:07:fc:e2:d2:27:03:68:4d:cb:1d:27:c0:28:6b:ee:
2b:1d:43:bf:07:c5:f2:bd:e9:00:85:38:c7:47:62:48:11:7a:
1b:58:0b:fb:9a:7e:42:66:14:c4:60:8a:2f:b6:90:b3:72:dc:
f9:05:18:5f:d3:8a:49:5c:69:cb:f0:a7:a6:60:a2:fb:2c:36:
34:f7:e7:5a:eb:c0:db:f2:fe:5c:9b:e2:a7:d6:87:b5:c8:b9:
68:ee:48:88:81:6f:8e:13:30:a5:aa:48:ff:48:22:76:5f:76:
fd:03:7e:22:19:21:44:9c:fc:83:05:da:b6:39:08:85:1b:c8:
85:09:af:f9:57:50:ae:2e:c0:7d:2c:2c:fa:0f:05:7a:19:10:
a4:a3:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:24 2025 by rpki-client