Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J3RarCOklVsoe-LAJ8s9096Ck8U.roa
File: J3RarCOklVsoe-LAJ8s9096Ck8U.roa (raw, json)
Hash identifier: AxjsWGXSB2gh1HXbcYj8WSAXPQ3VTxHoXrTmyM3djkk=
Subject key identifier: 27:74:5A:AC:23:A4:95:5B:28:7B:E2:C0:27:CB:3D:D3:DE:82:93:C5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6B49FA9BFB7E9CDAA9350CF6E1B70
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J3RarCOklVsoe-LAJ8s9096Ck8U.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 89.33.192.0/24 maxlen: 24
89.37.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b4:9f:a9:bf:b7:e9:cd:aa:93:50:cf:6e:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27745aac23a4955b287be2c027cb3dd3de8293c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:2b:97:86:76:ab:e5:7a:b5:8d:44:c7:28:
09:35:6c:6d:98:a6:69:78:ea:dc:74:f3:8b:b5:8f:
ab:6a:40:d7:bf:ad:e1:c1:6c:4b:51:b6:07:81:2b:
67:df:47:b6:1d:03:24:f4:3e:d0:85:73:2a:7d:a6:
6d:11:e6:25:f2:39:0b:c7:36:72:01:e4:ef:db:fa:
ac:6b:30:13:10:f7:83:06:1a:94:3e:11:a6:ef:03:
39:6f:80:30:d9:f5:93:4b:74:b5:84:53:61:fd:e8:
6e:69:8a:57:2f:60:6e:dc:8c:56:45:11:4a:8a:2c:
f6:32:f0:db:46:e6:5e:dd:aa:4a:88:81:0a:52:39:
f6:fc:ce:49:9b:23:c7:8b:79:d7:52:35:11:f4:65:
a3:3c:cd:96:27:08:ac:26:73:5e:00:df:43:21:55:
be:0d:3d:20:3c:0f:0f:e7:27:9f:ca:51:e4:bf:46:
26:70:dc:14:2e:4d:2c:03:c3:b4:ab:08:7d:dc:f7:
d0:62:d9:9f:da:7b:41:83:a9:22:ed:3d:a7:e3:8a:
b8:18:2a:ee:28:58:80:df:28:1c:62:e7:d7:22:51:
4d:78:a0:9f:ee:05:6b:3f:92:04:cc:91:b0:70:4e:
e9:66:fc:ea:7e:0d:38:70:04:5c:4e:8a:d8:a6:9a:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:5A:AC:23:A4:95:5B:28:7B:E2:C0:27:CB:3D:D3:DE:82:93:C5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J3RarCOklVsoe-LAJ8s9096Ck8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.192.0/24
89.37.197.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5c:3c:ed:d6:84:0a:42:f5:1a:b4:38:cd:74:29:be:aa:66:
8c:2f:29:d0:41:cf:81:bd:02:bb:c1:1f:ac:c2:3f:57:32:34:
f1:09:ba:91:f1:d1:03:f1:4c:b1:3d:43:d2:af:9e:f1:e7:6d:
1b:d8:58:5f:c7:36:bc:65:99:e9:15:63:d0:c7:df:b2:db:13:
43:4a:5e:c2:32:25:d3:b2:73:b5:e5:1e:97:94:47:ef:67:39:
ee:3b:51:de:bb:37:8e:8b:24:ea:01:f8:69:13:42:41:7c:a7:
04:d0:36:1f:b8:16:85:09:92:72:69:1e:84:e5:51:d3:45:89:
e7:80:6b:c7:a4:13:7c:14:0f:f8:12:3b:55:a0:7e:49:16:c6:
ae:3d:49:22:cd:90:a6:f6:34:8f:96:e6:39:96:12:56:bf:ed:
4b:54:c2:45:46:37:6c:9d:3a:72:03:86:80:f1:02:d4:e7:d2:
21:e4:b3:0e:f3:1a:89:05:a4:97:b9:24:a4:60:08:59:de:4e:
aa:11:34:21:b1:fd:18:02:b8:c7:3d:ad:3b:1e:45:35:9e:c5:
eb:db:d1:a4:e7:ac:0c:71:8a:fa:ba:5f:a7:fc:f9:09:63:14:
18:b6:37:59:15:37:87:0b:68:92:5f:da:7f:64:f5:fd:6a:49:
72:15:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:14:35 2025 by rpki-client