Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JPOFEknEaR4w7bSGyONdU3xzNAI.roa
File: JPOFEknEaR4w7bSGyONdU3xzNAI.roa (raw, json)
Hash identifier: yLQwwqO2NjhiX5+oRGOlDJypKQAHRP+Y45JNGzDC8dk=
Subject key identifier: 24:F3:85:12:49:C4:69:1E:30:ED:B4:86:C8:E3:5D:53:7C:73:34:02
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C9CC3AAEFE5E59EC8827640CA890
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JPOFEknEaR4w7bSGyONdU3xzNAI.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205275
IP address blocks: 89.37.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c9:cc:3a:ae:fe:5e:59:ec:88:27:64:0c:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f3851249c4691e30edb486c8e35d537c733402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:9c:81:7a:31:f7:ee:7c:f0:ac:2b:42:3b:
ca:24:9f:15:70:24:80:1f:1e:02:c0:ce:7d:55:3b:
d7:dd:37:cd:9f:4b:59:1e:99:b0:16:c0:38:34:7b:
41:d3:6d:ef:e9:47:86:b4:ff:0f:6c:2a:7d:ef:a9:
09:74:77:96:d5:fa:91:93:72:fc:0a:95:d0:ea:62:
8a:90:7b:a8:0f:62:05:51:1b:2b:61:1d:de:e5:bf:
fb:12:77:02:21:78:4f:4c:b0:90:a3:7c:7e:38:63:
3f:c5:8c:22:53:4f:f8:a9:01:91:16:66:48:9f:11:
74:a4:77:81:23:64:f0:d9:9d:00:9e:16:83:d4:da:
34:b0:c9:68:70:c9:63:c3:12:d0:1c:0d:fc:56:96:
e4:e9:b1:e8:67:fc:f2:cd:65:68:4f:bc:75:3a:3c:
6b:d3:b2:8e:b4:8e:01:aa:63:80:60:25:e6:01:cc:
34:91:53:b0:c4:d9:d5:e7:b2:05:b5:52:0d:6a:7f:
fa:a4:ea:66:20:7b:cf:8f:da:06:08:9f:c3:fb:91:
a6:a3:7d:b0:35:9b:d9:76:55:08:de:ec:73:d3:b7:
57:e2:5c:99:6f:e1:1d:a9:f6:b8:6e:3d:82:ae:30:
45:af:e1:36:cc:02:c6:e4:c0:b5:37:6f:e4:18:29:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F3:85:12:49:C4:69:1E:30:ED:B4:86:C8:E3:5D:53:7C:73:34:02
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JPOFEknEaR4w7bSGyONdU3xzNAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:12:97:9e:18:80:97:ca:33:ed:0c:6d:29:b8:6e:95:ba:ed:
8b:22:5c:24:3d:fa:a6:8f:3b:a7:a5:4d:e2:ef:03:9d:aa:40:
a8:30:ca:ab:04:22:74:db:73:bf:7e:d3:5c:cb:3f:a9:81:94:
ad:96:85:2a:10:11:29:d3:e0:d6:b5:a1:9d:cf:a0:f1:2e:e6:
61:3a:12:77:f2:93:8e:36:0a:d9:60:64:e9:b8:31:a3:3f:dc:
c6:a9:54:8a:59:7a:f2:42:bb:c6:c1:cf:cd:4d:17:4a:60:c5:
cc:cd:ad:a3:d5:6a:21:fc:42:f8:0c:6e:b7:9c:90:1b:ec:9f:
7e:48:65:5d:f7:07:3a:0b:fd:62:57:d7:02:75:94:b0:fe:02:
0d:c0:2f:dd:8b:8d:3c:f1:bf:66:c8:55:af:3c:89:f6:46:ef:
b1:51:4b:eb:54:f6:a8:12:fe:48:a9:14:2b:bc:b0:42:27:51:
d3:6d:bc:9b:4c:8d:fa:e5:bf:e8:68:c3:b6:5c:1c:4f:de:b3:
bd:26:1b:85:7c:e9:55:7e:72:25:88:8f:78:13:67:bf:b4:a6:
c0:69:ba:ec:f8:3c:af:76:12:26:d2:9b:5f:00:be:11:47:e1:
24:06:cc:ab:c9:45:2a:50:0f:59:9e:91:ac:92:a2:d9:54:21:
17:a8:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:14 2025 by rpki-client