Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yWBk0ZYV_5Y3iD0657fbOLiYqj8.roa
File: yWBk0ZYV_5Y3iD0657fbOLiYqj8.roa (raw, json)
Hash identifier: PHRiZEwmYUbiZmuyaDst/S2LfX/8Hvr1iR9dHn6A49A=
Subject key identifier: C9:60:64:D1:96:15:FF:96:37:88:3D:3A:E7:B7:DB:38:B8:98:AA:3F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01958953DE08662B19CA7A565FC837CE0A4D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yWBk0ZYV_5Y3iD0657fbOLiYqj8.roa
Signing time: Wed 12 Mar 2025 07:48:49 +0000
ROA not before: Wed 12 Mar 2025 07:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 89.33.194.0/24 maxlen: 24
93.114.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:53:de:08:66:2b:19:ca:7a:56:5f:c8:37:ce:0a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 12 07:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c96064d19615ff9637883d3ae7b7db38b898aa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:91:fc:51:35:09:a5:25:b5:47:2a:b4:c5:
62:75:94:59:9c:c3:fe:e7:ce:33:75:b3:cf:0f:0f:
43:8b:86:31:c5:29:0f:0e:c0:6a:36:af:58:47:56:
f1:39:0a:5a:35:11:c3:d2:69:d5:84:1e:b4:91:94:
b4:82:10:ea:52:7f:52:c9:80:45:7e:7a:3b:14:76:
a4:ee:fb:8a:e9:be:36:e6:a2:38:90:11:36:b0:d0:
e4:8e:98:2f:90:1f:04:89:5f:0e:a7:d1:09:18:cc:
79:ee:0f:b1:c3:0d:95:2b:9f:09:8a:7f:e5:78:37:
69:cc:02:ea:e9:0c:88:7f:9c:92:7b:e3:2b:c6:e9:
de:c3:f4:53:e4:c1:34:4d:da:1e:7e:43:8f:ee:21:
5b:fd:5a:e9:66:8a:0a:48:07:f9:d9:b4:79:08:8e:
fc:bf:85:62:f4:a6:b6:ca:17:65:e4:05:15:5b:e5:
bb:fd:61:46:81:b6:b4:c6:e7:3f:08:59:90:bf:30:
1f:24:9d:10:3b:91:88:fe:bc:f1:3d:f9:98:55:6e:
36:fc:19:51:b9:06:ff:60:8e:a3:01:e3:d5:ef:76:
36:67:0c:8a:07:11:7c:5d:7d:75:cc:7b:76:9c:45:
5a:27:7a:db:8d:d5:6b:bc:96:66:32:e8:62:ea:1d:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:64:D1:96:15:FF:96:37:88:3D:3A:E7:B7:DB:38:B8:98:AA:3F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yWBk0ZYV_5Y3iD0657fbOLiYqj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
93.114.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c5:43:d3:5f:a7:34:90:a0:39:23:c3:f4:b8:f0:86:57:b8:
1f:0e:1b:39:ee:c4:67:a1:e8:f0:24:9a:7e:42:bb:a6:52:79:
4a:31:c9:e9:9a:24:de:cb:24:71:20:33:f9:fc:cc:36:bb:bb:
17:33:02:16:90:20:72:f9:90:91:0b:8d:af:26:93:b0:b3:57:
5c:cb:5a:39:73:b2:fc:07:02:54:13:d2:e8:e6:0d:bd:9e:ed:
1a:39:81:47:e1:47:7d:fe:62:78:c9:45:3c:ed:9a:12:c6:bc:
e5:8d:06:5d:eb:5e:ec:c7:ff:77:d7:20:4d:43:bf:69:01:a7:
4a:98:fe:2e:e3:4b:29:95:19:66:ce:75:53:cd:f6:f5:05:97:
ad:df:4f:c4:73:ca:e2:88:f3:fc:cd:f0:8d:7a:56:cc:73:d6:
24:9d:12:41:02:44:32:61:48:f5:a9:e2:72:d0:2d:48:08:9d:
06:16:e7:97:08:98:e1:25:d9:fb:e7:e6:85:d7:6d:24:9f:a8:
37:c9:18:88:a4:98:44:46:30:4f:18:12:74:83:a4:ba:ab:d1:
ce:30:85:35:3e:2a:60:15:2e:3b:1f:7b:b4:2a:07:69:e2:f4:
60:30:dc:fe:90:5d:6d:56:20:da:9a:ab:ae:3c:ef:14:15:21:
1f:56:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:56:46 2025 by rpki-client