Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/j_yYkQUO90yA3V9Mj2lbrZGpOKI.roa
File: j_yYkQUO90yA3V9Mj2lbrZGpOKI.roa (raw, json)
Hash identifier: QycgVzFwoVMoij/+gAWiZRGU8RnhKfqdcjR8MgH+zJ0=
Subject key identifier: 8F:FC:98:91:05:0E:F7:4C:80:DD:5F:4C:8F:69:5B:AD:91:A9:38:A2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01948850D623394976FEE61722A1831F8431
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/j_yYkQUO90yA3V9Mj2lbrZGpOKI.roa
Signing time: Tue 21 Jan 2025 10:03:06 +0000
ROA not before: Tue 21 Jan 2025 10:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.34.226.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:50:d6:23:39:49:76:fe:e6:17:22:a1:83:1f:84:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 21 10:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ffc9891050ef74c80dd5f4c8f695bad91a938a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:b1:9b:a1:58:f8:e5:36:b9:7e:54:19:bc:
23:97:16:a8:a1:2b:ae:dc:84:54:fe:7f:24:17:45:
80:44:01:b5:71:d1:24:4a:b1:1a:c6:16:e3:26:96:
c7:21:9f:f2:ab:6e:90:d5:a3:54:e2:82:20:d0:91:
20:93:5d:a5:d3:a1:80:c7:e4:05:59:8b:a5:84:8f:
49:48:53:f1:d2:14:27:df:dc:e7:67:65:62:84:0e:
79:e5:f4:b4:80:7e:c9:11:82:ef:f0:44:82:41:c1:
02:02:a5:52:aa:77:92:37:37:8d:4e:13:66:37:50:
19:03:dc:7f:fd:97:f6:12:54:b8:3a:55:4b:c4:61:
94:3b:ab:c8:0d:a3:1b:86:42:cd:df:d1:8e:93:01:
9f:59:1f:ce:d0:b3:ae:66:ab:71:1b:6c:5a:06:5f:
17:1b:bb:aa:67:90:32:2a:00:37:2f:10:df:cb:ba:
b7:a1:5d:40:50:fd:b1:d8:59:5d:9e:c1:f7:7f:b7:
15:61:0c:fb:ab:bc:e9:5f:58:36:6f:93:62:d0:b1:
23:4b:25:a2:c7:5a:b5:e1:49:f8:1b:56:58:dd:01:
71:cf:d5:fd:25:18:3f:46:aa:92:6e:b0:d5:ce:98:
f9:01:7a:11:13:c6:b7:3b:e5:6a:cf:21:89:d2:7e:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:98:91:05:0E:F7:4C:80:DD:5F:4C:8F:69:5B:AD:91:A9:38:A2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/j_yYkQUO90yA3V9Mj2lbrZGpOKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.226.0/24
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
27:16:de:86:f2:8e:40:f8:64:1e:55:1f:ef:6d:7e:03:6f:10:
7b:13:ac:32:b8:b8:21:49:53:08:be:ff:5e:ef:0a:45:3b:74:
d7:e9:08:4e:28:2a:f1:b6:85:cf:af:33:21:48:74:0f:7d:e6:
b5:98:4a:03:44:a6:81:92:7a:4e:cb:f6:1c:f4:6b:36:f3:b9:
4d:f3:08:2e:3d:3d:4d:b4:b8:47:13:14:de:56:17:66:f6:3f:
bb:3d:f2:60:fe:60:8f:14:e9:11:2c:26:05:f9:3f:fd:99:9f:
a6:21:77:24:a0:7e:98:1c:93:f4:80:86:f0:1f:1b:22:fd:37:
7e:92:a4:8a:a4:84:14:d2:30:a3:6b:99:48:85:b2:2d:f1:19:
4a:24:93:33:33:9b:4d:30:b6:f2:60:06:44:cf:91:0c:50:21:
36:bc:30:e6:ba:77:9d:8f:27:23:f0:82:a0:a9:40:43:c6:70:
dd:aa:37:20:ad:c4:ba:ce:83:ed:55:cb:e2:95:57:cf:58:48:
ea:a7:1a:14:d4:a6:a6:2c:eb:e3:ce:0a:99:3b:f0:bd:b9:1e:
fc:90:5b:e7:25:7c:b0:8a:59:ea:7a:c3:85:06:31:a1:92:d4:
01:6a:28:59:1e:1e:82:1b:b4:3f:a4:1d:56:74:7c:08:20:ba:
8d:2e:3e:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:42 2025 by rpki-client