Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lg3xSX8RJQMjayrx4Y2tPkZb6BU.roa
File: lg3xSX8RJQMjayrx4Y2tPkZb6BU.roa (raw, json)
Hash identifier: 17woEsfHNHcY7dGYTAn7UqYFyBohEIiGj+Qk7LlrgYU=
Subject key identifier: 96:0D:F1:49:7F:11:25:03:23:6B:2A:F1:E1:8D:AD:3E:46:5B:E8:15
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195AF928496CDA8BB64333B7CB00CD91222
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lg3xSX8RJQMjayrx4Y2tPkZb6BU.roa
Signing time: Wed 19 Mar 2025 18:02:49 +0000
ROA not before: Wed 19 Mar 2025 18:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 89.38.229.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
93.113.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:92:84:96:cd:a8:bb:64:33:3b:7c:b0:0c:d9:12:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 19 18:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=960df1497f112503236b2af1e18dad3e465be815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:99:9d:4a:66:1c:11:7b:66:fe:75:ef:a1:
a8:d2:df:7e:d7:50:6e:52:02:2d:b6:7c:11:e6:31:
d9:45:96:b8:d0:57:18:64:06:43:31:30:f9:a9:6e:
99:c5:fb:92:cc:e5:bc:ef:cd:cd:a2:91:d3:0f:59:
88:01:96:89:18:16:7e:f5:02:0b:87:a6:a8:ed:7e:
2a:8f:27:2d:d7:30:e5:f2:35:22:45:f3:77:43:8b:
96:76:91:d5:97:52:80:d7:bb:48:f5:10:eb:5d:7b:
d5:cd:f0:aa:05:31:33:e6:b9:38:ba:b0:46:88:10:
d6:79:3d:cb:db:82:17:be:43:26:90:c3:92:d5:08:
e4:b9:08:e6:46:79:b1:74:b6:59:8c:3b:b5:30:dc:
55:bb:35:b6:23:7d:bd:2d:a5:eb:89:cc:ed:38:73:
34:3f:0e:40:34:dc:25:a7:1b:4f:b6:6e:27:64:56:
49:48:d3:b7:85:ae:bf:65:67:32:1f:14:1a:64:31:
41:5b:57:72:66:3a:94:80:80:38:2a:fa:e0:31:8e:
4f:e8:0d:2c:3e:1b:9e:58:b7:3a:47:ff:1c:7b:af:
91:fc:ae:3b:24:f7:d8:00:e7:0a:bc:ea:06:bb:62:
2c:2e:a5:9d:d6:f8:6c:5e:9d:b7:12:4a:f5:4c:91:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:F1:49:7F:11:25:03:23:6B:2A:F1:E1:8D:AD:3E:46:5B:E8:15
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lg3xSX8RJQMjayrx4Y2tPkZb6BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.229.0/24
89.42.89.0/24
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
93.113.176.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6e:a8:35:ad:00:68:d0:cf:a6:2e:be:7a:d7:56:55:0f:ab:
95:53:39:bb:ee:65:de:c9:26:04:75:1c:83:81:fa:70:48:ea:
fa:e7:7e:6d:bc:54:58:86:25:09:43:67:a4:91:42:02:30:df:
57:dc:82:4f:e2:85:c9:e4:77:da:a4:ee:76:b2:08:33:60:77:
cc:bb:25:3e:53:37:90:ca:ef:d7:7e:30:be:62:ed:b7:6f:19:
ad:cc:2f:c0:1a:c8:4c:bb:c1:da:32:6d:8f:54:59:11:95:15:
de:11:1a:9d:1d:32:5c:7d:6f:b1:bf:62:3c:0c:97:7c:27:e3:
2b:f2:ac:80:c0:6e:0c:f9:73:98:34:02:35:25:05:e1:40:37:
10:a7:8c:8a:e7:28:63:2c:ff:8f:93:f9:d8:0a:06:69:34:fb:
49:cd:b1:61:20:12:6d:44:ef:d6:36:3d:25:cf:0e:c9:10:d7:
b9:c5:9e:6d:bd:04:70:be:b7:36:91:34:cd:28:8f:f9:a2:ca:
d8:b1:36:b6:e3:78:81:1b:79:7f:bc:dd:6c:54:0e:40:b6:86:
f4:4f:2c:3f:f8:5d:2a:e9:be:3e:aa:bb:9f:5f:18:13:10:17:
9c:98:bb:df:05:a4:54:49:89:8b:5d:66:c6:18:4a:0b:e2:fd:
b4:76:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:14 2025 by rpki-client