Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vldnkq3yL5okCL9S7sBu9HnBRpQ.roa
File: vldnkq3yL5okCL9S7sBu9HnBRpQ.roa (raw, json)
Hash identifier: fsvwV3nEqtMtFTrmiJnua+3++8ZG3vp+faHA9p+lJ2c=
Subject key identifier: BE:57:67:92:AD:F2:2F:9A:24:08:BF:52:EE:C0:6E:F4:79:C1:46:94
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C5E30DE5A6CF5BE816F368240C15
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vldnkq3yL5okCL9S7sBu9HnBRpQ.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199058
IP address blocks: 89.42.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c5:e3:0d:e5:a6:cf:5b:e8:16:f3:68:24:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be576792adf22f9a2408bf52eec06ef479c14694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:78:a9:25:61:c9:03:73:0f:09:9b:e2:25:
df:62:24:e7:53:8b:40:46:8b:96:8f:af:1f:67:3a:
6d:75:1e:bc:c7:84:f0:d7:b5:de:2d:7c:c3:38:e0:
3a:71:b5:60:ff:6d:25:08:50:d0:86:d5:d7:96:b4:
18:3c:cc:17:89:47:3e:d6:c7:b4:6d:f6:6f:b4:1a:
75:7e:4e:5d:4d:6c:8b:66:bb:40:d4:3c:ca:88:82:
8b:f9:11:3c:6e:fb:a9:86:a2:7d:a5:0f:0a:aa:6f:
8f:58:13:6a:df:11:84:17:31:ab:ec:d9:68:65:4a:
50:f8:cd:e9:7e:12:42:49:54:07:ca:ac:05:d0:10:
5f:a3:41:9a:67:a0:19:f9:b9:51:c3:43:47:b2:25:
91:de:ee:79:d3:b4:6d:a3:7b:b3:cc:81:79:f1:b3:
ab:d1:c4:a3:e9:e5:bc:e0:df:87:de:34:98:3a:d6:
93:75:6b:bd:62:1e:35:1e:b9:5b:c3:c7:d5:3b:12:
0f:94:20:30:7e:9c:5d:40:e3:ec:97:17:b8:95:19:
33:2e:7f:58:88:e3:3a:bf:07:b4:6d:94:25:5c:e2:
33:d5:8d:d8:5b:22:34:89:98:2d:3d:4f:d4:3e:93:
3b:86:ca:ae:51:52:63:31:de:94:fe:bb:39:48:3a:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:67:92:AD:F2:2F:9A:24:08:BF:52:EE:C0:6E:F4:79:C1:46:94
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vldnkq3yL5okCL9S7sBu9HnBRpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.142.0/24
Signature Algorithm: sha256WithRSAEncryption
83:17:ea:bc:77:e3:93:2c:e7:54:d8:46:b6:bf:93:87:64:1d:
69:36:ad:21:ba:4c:18:ec:85:86:0e:9e:83:73:ee:39:4e:9f:
b3:9f:8e:97:a6:7a:ca:76:18:80:73:65:8d:77:72:b6:8c:c3:
36:b8:43:db:53:be:1e:e0:e9:80:bc:7e:9f:6a:78:00:3c:7c:
aa:ed:88:41:92:14:2c:4d:95:40:d5:77:c3:ae:5d:92:a1:a2:
82:38:45:cf:1e:0c:5a:2d:43:aa:48:5c:77:7a:03:57:ad:28:
9a:87:f1:a8:f3:ef:ee:f0:24:32:60:3c:20:31:9c:88:fd:1d:
10:5e:22:92:53:6b:97:38:d1:df:ba:97:44:e1:e3:a6:24:57:
cf:9a:86:75:96:f3:70:ea:aa:36:ba:68:3b:9b:b6:74:69:2d:
7d:f6:35:8f:6e:96:d0:91:b5:24:b3:85:e4:38:6b:0f:37:49:
62:28:29:e2:f1:f6:9f:aa:ff:a9:d3:15:a0:47:b0:8b:13:01:
49:fb:4b:1c:e3:01:35:88:54:03:3d:fc:9a:67:09:ca:5b:db:
b6:53:a7:ce:68:74:46:d3:4e:01:da:ce:77:b7:c8:50:22:a9:
70:f1:9c:83:1f:c9:25:ef:18:2e:0e:51:38:36:e8:ed:e8:30:
be:01:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:05 2025 by rpki-client