Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/E7N6ScJFS8t-ZmcQbt1cUdSfapI.roa
File: E7N6ScJFS8t-ZmcQbt1cUdSfapI.roa (raw, json)
Hash identifier: 0R6HTLGt98GLsiUue1IVPyfTAXS9I5V5eLFdAyR71lE=
Subject key identifier: 13:B3:7A:49:C2:45:4B:CB:7E:66:67:10:6E:DD:5C:51:D4:9F:6A:92
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01948E59560EA63756993FAC097A53C66AD2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/E7N6ScJFS8t-ZmcQbt1cUdSfapI.roa
Signing time: Wed 22 Jan 2025 14:10:06 +0000
ROA not before: Wed 22 Jan 2025 14:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 89.34.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:59:56:0e:a6:37:56:99:3f:ac:09:7a:53:c6:6a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 22 14:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13b37a49c2454bcb7e6667106edd5c51d49f6a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:c6:64:e4:7b:c6:c1:6e:07:94:ba:c7:8e:
a2:03:e0:53:79:dc:8a:02:19:42:e8:8f:40:08:16:
72:09:de:8b:7b:f0:7e:8e:35:4c:2e:8f:a6:64:b9:
84:7a:d2:6d:fc:7c:33:fc:69:22:b9:ec:d5:f3:32:
fb:fb:ad:e2:b9:41:e9:d4:5a:20:ab:e4:d7:02:24:
38:54:bd:d4:bc:10:d3:5d:47:f8:67:ab:6e:0a:d3:
be:12:42:d6:ef:1a:21:93:44:1b:99:cd:b4:48:d1:
aa:ee:ed:74:42:e8:aa:83:ee:25:fc:a1:96:c4:3f:
fd:b8:4b:2f:1d:0a:d6:35:25:ed:6c:b3:c8:8a:1b:
7a:91:a1:61:81:3e:21:a9:47:e9:7e:da:e9:7c:79:
29:ce:56:6c:52:54:b7:6c:45:6f:36:ce:ba:92:da:
4f:38:0f:1d:89:61:8a:a3:92:5f:a8:29:c8:ae:15:
22:42:8a:f3:48:db:2e:db:3f:72:81:92:43:30:cf:
12:25:0a:44:79:20:56:5d:4f:ff:0f:73:c7:8f:4c:
98:56:b8:e2:36:56:e6:1a:59:c0:57:77:95:12:aa:
e5:ef:36:3d:1c:80:38:6f:dc:a8:c6:03:67:80:34:
95:41:4f:ee:58:2b:c8:d1:fa:db:d5:1f:9b:1b:f1:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:7A:49:C2:45:4B:CB:7E:66:67:10:6E:DD:5C:51:D4:9F:6A:92
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/E7N6ScJFS8t-ZmcQbt1cUdSfapI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:91:6c:56:3b:10:d0:a6:da:25:74:76:6c:6d:95:51:46:f7:
38:24:2e:b3:cd:52:a7:0f:b3:4e:76:83:97:e6:8f:97:af:cd:
17:1f:ee:67:cf:34:ba:df:af:8b:f6:2c:52:10:c8:e9:50:4c:
5c:fa:57:67:85:79:c8:f0:7d:57:b5:2a:57:86:68:a4:c7:ac:
9c:e9:e0:43:58:7c:9a:74:4f:4f:ba:9d:d5:17:c4:c3:e6:1c:
a6:b3:22:a0:26:2f:6e:00:63:10:3b:91:6a:5e:03:d5:f4:85:
63:90:ea:01:e2:f2:99:d3:00:e9:87:92:48:de:77:f5:16:d6:
10:6e:84:c3:32:ad:33:51:f6:d8:8f:62:be:1d:97:2d:bf:d6:
c3:db:ab:a5:d4:0f:43:c3:1e:5d:20:c4:77:bf:a0:90:50:03:
df:19:1e:01:89:68:7f:e0:64:3d:a3:c8:92:34:ac:01:c6:27:
b4:9e:8d:72:c4:b0:83:1c:5c:54:3a:68:a7:ad:3c:d9:e4:45:
4d:4e:8d:ec:6c:13:4d:be:05:ae:8a:00:cd:9e:65:14:56:b3:
84:1c:39:1e:57:e4:df:2a:4a:bb:7d:b2:2e:fe:4b:15:ec:c8:
dc:ff:ea:67:a0:7c:d9:12:21:73:57:c9:8a:ba:8e:fc:03:6a:
13:91:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:00 2025 by rpki-client