Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZQ1f04YdLF-1bWHFn9cUgtCPnW8.roa
File: ZQ1f04YdLF-1bWHFn9cUgtCPnW8.roa (raw, json)
Hash identifier: R8T9T7qBh7+cp9zIW8eTujOnzrwsyBa9acD8Gm9Jm8Y=
Subject key identifier: 65:0D:5F:D3:86:1D:2C:5F:B5:6D:61:C5:9F:D7:14:82:D0:8F:9D:6F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01949921A5913A200D752B982AD27B2A570A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZQ1f04YdLF-1bWHFn9cUgtCPnW8.roa
Signing time: Fri 24 Jan 2025 16:25:06 +0000
ROA not before: Fri 24 Jan 2025 16:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 89.43.141.0/24 maxlen: 24
93.114.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:21:a5:91:3a:20:0d:75:2b:98:2a:d2:7b:2a:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 24 16:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=650d5fd3861d2c5fb56d61c59fd71482d08f9d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:25:ac:5f:29:80:ee:54:6c:9b:e6:09:b7:
a1:4d:9a:7c:5e:21:db:f8:6b:b5:74:be:d2:27:e9:
92:14:9f:2f:2e:c5:75:2f:50:d0:8f:2d:93:18:7c:
d1:d5:f8:b9:a5:fa:13:37:3f:fd:51:55:7b:60:d2:
ef:9b:12:15:7b:79:b2:7e:31:52:d1:a4:8d:26:5f:
08:99:a5:82:5d:cb:71:e3:3e:f0:db:d0:89:f6:de:
ac:46:de:d8:9d:3f:bb:51:d5:36:31:37:1a:de:63:
d4:eb:ed:80:9c:61:91:a7:14:e0:60:c7:80:88:20:
d6:c4:f0:89:a9:23:65:4a:30:44:62:3a:46:25:44:
44:b3:8c:bc:c2:fc:60:60:0c:20:3e:06:05:1b:45:
42:72:22:ad:25:06:ab:cd:d1:53:22:2e:f4:9a:c1:
b1:37:22:3c:41:54:55:90:f0:da:13:3d:3a:be:a8:
fd:04:d5:74:94:f8:71:e0:42:c6:ca:5b:58:af:15:
a1:71:ca:d4:e7:50:df:3e:6d:d9:b4:f5:61:d3:29:
19:f1:c4:24:21:bb:05:8d:5f:6a:b3:34:62:47:8b:
7c:af:8c:79:df:60:56:1f:0e:d8:80:9a:04:ee:bb:
e1:5a:2f:76:fd:23:b4:76:5d:ed:58:96:fd:1c:32:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:5F:D3:86:1D:2C:5F:B5:6D:61:C5:9F:D7:14:82:D0:8F:9D:6F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZQ1f04YdLF-1bWHFn9cUgtCPnW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.141.0/24
93.114.88.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cd:5d:c5:d2:66:b6:79:ea:33:45:2d:96:8f:07:4e:c8:b6:
95:2b:7b:b5:b8:4b:7e:af:e1:a7:76:9a:99:ae:70:b6:96:9e:
69:be:cb:7f:5f:f8:bd:34:db:1b:ae:70:5d:de:a3:4d:a7:0c:
c4:ff:19:c1:c2:a2:31:e2:6a:dc:39:c5:be:84:43:78:fc:31:
50:c3:1a:d5:ca:15:31:51:e3:a6:36:27:29:57:7a:83:d9:50:
36:5b:38:a4:f5:f1:ea:49:a5:04:c0:10:59:aa:6e:ae:aa:e0:
5e:e5:01:86:d0:cb:18:58:0b:50:07:aa:f9:4c:24:74:5e:9f:
d8:2d:f5:fa:e9:80:91:2d:95:cd:3c:8f:25:31:19:80:8a:04:
0c:12:e2:07:5d:47:0b:39:e9:87:a5:26:48:95:a8:3a:76:45:
40:e1:e7:50:36:1b:6d:6c:22:e5:95:56:78:4e:a0:dd:62:a7:
55:40:4d:ca:5a:f8:00:d8:28:cc:d4:6d:1d:e2:75:19:5f:41:
f5:c4:af:78:53:0a:63:5f:c1:ea:ab:35:6e:fd:28:d0:d6:03:
b0:ba:2d:e2:db:bf:52:81:4e:b9:64:df:d8:dc:fe:77:ad:eb:
73:27:5d:e3:ef:36:c1:22:8a:40:ef:37:d2:05:cc:ea:42:8e:
c0:f9:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:00 2025 by rpki-client