Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J0hX2yiIrti4puU4rVjVwZUZpVg.roa
File: J0hX2yiIrti4puU4rVjVwZUZpVg.roa (raw, json)
Hash identifier: sLhOKUbCzwGgjaa85VwoT8YL7hqAP+awkjRHN/b9T+s=
Subject key identifier: 27:48:57:DB:28:88:AE:D8:B8:A6:E5:38:AD:58:D5:C1:95:19:A5:58
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0194B29DB1624A7709E2468603AEA5B19088
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J0hX2yiIrti4puU4rVjVwZUZpVg.roa
Signing time: Wed 29 Jan 2025 15:11:06 +0000
ROA not before: Wed 29 Jan 2025 15:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.43.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:9d:b1:62:4a:77:09:e2:46:86:03:ae:a5:b1:90:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 29 15:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=274857db2888aed8b8a6e538ad58d5c19519a558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:d7:d5:29:0b:96:2e:80:08:c5:f3:b7:ec:
32:4d:94:ef:68:a4:8c:96:96:07:65:71:2f:00:cf:
01:f1:7d:a4:58:eb:78:11:1f:e3:5b:e2:e2:4b:c2:
37:97:1f:ff:37:47:32:a7:f5:1e:50:90:2a:08:5e:
4d:1c:21:23:fa:7f:f6:58:53:24:70:42:eb:a9:4d:
92:6d:bb:eb:78:07:e1:10:6b:b4:73:dc:d9:79:34:
36:63:ba:7a:88:b6:d3:dd:80:9f:0e:2e:c8:8b:d8:
9f:69:0d:05:71:09:05:07:8b:13:1e:41:4f:cb:d5:
48:d6:1e:a1:b8:db:e8:2f:19:97:f7:3d:91:ad:d4:
96:e4:bc:48:c6:5a:87:b5:f3:bf:b7:de:fc:50:54:
7e:95:a0:95:89:33:25:bc:18:e2:1f:ee:b1:ca:7c:
21:ff:30:c9:8c:bf:f4:d0:b8:10:dd:20:97:df:e0:
24:48:f8:62:89:49:bf:ee:1c:9c:19:5c:2c:4c:97:
b1:e1:3a:85:26:cd:58:66:9f:ed:0f:3d:b8:5b:85:
5b:39:d7:26:cd:53:b1:e4:2f:f4:98:8d:74:0c:e9:
23:b7:b3:6a:b9:40:ea:ef:82:28:12:e2:b1:29:61:
34:88:d0:65:51:c4:7d:0f:d5:d7:48:45:87:ce:e3:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:57:DB:28:88:AE:D8:B8:A6:E5:38:AD:58:D5:C1:95:19:A5:58
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J0hX2yiIrti4puU4rVjVwZUZpVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.43.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4a:47:ff:7c:32:89:81:27:a8:57:bf:93:4b:e7:f2:65:5b:
71:3a:8e:69:de:40:c8:d1:a5:b7:b3:f3:7e:80:93:72:57:b1:
d7:bf:ce:0d:9e:8a:73:b0:e9:de:4a:56:16:cf:f3:e9:24:1c:
7a:db:e4:f4:2e:85:9b:86:b8:44:25:af:ee:ca:c4:3e:34:39:
f2:9e:7e:e3:5e:e8:14:27:5b:de:be:43:3a:0b:a1:32:67:bb:
4c:b9:9a:a0:b7:ee:13:57:67:6c:72:e6:85:0b:52:a0:1b:c0:
92:e0:13:36:ca:63:66:dc:64:ae:74:37:23:96:70:c5:6a:c9:
9b:f7:d3:a9:65:8e:cf:2e:cf:33:e8:1d:4b:e7:82:9b:e8:44:
95:f1:91:79:7a:f1:27:9a:8a:e5:a4:7c:cc:c4:37:af:5f:e3:
a4:c6:81:f5:c1:7f:d6:7c:7f:72:4f:23:dc:e2:7d:92:c8:a7:
5d:47:4c:3d:84:35:a4:89:62:c0:d3:83:58:0d:3b:66:09:b6:
88:76:21:53:90:71:61:eb:cf:45:9f:09:d7:1e:db:60:6c:1a:
44:85:5b:c5:df:d9:ce:3e:a9:f4:c5:89:63:c1:0c:77:50:e2:
2f:09:40:52:49:d1:8b:16:4b:91:0e:61:9e:2c:9b:0f:6c:3d:
5d:5a:13:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:03:25 2025 by rpki-client