Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/mNn5LpVTCSjn9tD6DcUxUYANi8s.roa
File: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (raw, json)
Hash identifier: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=
Subject key identifier: 98:D9:F9:2E:95:53:09:28:E7:F6:D0:FA:0D:C5:31:51:80:0D:8B:CB
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0194228DF129B97C9A5EF079FFE7B7E7B9DD
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/mNn5LpVTCSjn9tD6DcUxUYANi8s.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205624
IP address blocks: 89.39.154.0/24 maxlen: 24
91.151.101.0/24 maxlen: 24
171.33.235.0/24 maxlen: 24
212.225.227.0/24 maxlen: 24
212.225.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f1:29:b9:7c:9a:5e:f0:79:ff:e7:b7:e7:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98d9f92e95530928e7f6d0fa0dc53151800d8bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:bd:ac:d3:a5:b8:88:8c:81:c0:2e:fd:4e:
d3:35:ba:10:df:30:0a:4c:36:29:18:36:bf:ab:79:
85:a7:31:40:dc:47:e3:9d:b4:7d:6c:d3:2e:f8:d0:
40:fd:d9:d1:9c:95:e6:b5:aa:4d:3b:1d:7a:34:30:
ba:a2:a3:a2:dd:db:b9:37:ff:9a:8c:37:8a:03:76:
3a:ca:03:99:27:c1:0d:ec:74:7d:88:40:b6:b6:54:
12:fc:0d:c0:78:42:ef:41:6a:fe:43:7e:0c:c0:3c:
b0:df:eb:75:8e:cf:8d:4d:b6:e1:d1:46:69:b2:cf:
bb:68:ef:c9:1f:2c:da:8a:00:bc:8b:10:bb:80:2f:
de:91:ae:3a:ba:7e:d9:71:cf:08:4d:3c:47:b8:04:
d5:de:0b:bb:72:b9:ee:6b:5b:3d:9a:12:66:e5:d0:
68:be:96:f0:15:db:51:39:26:ce:5c:b6:52:89:8d:
56:5b:19:dd:dd:0b:b6:dc:7b:33:aa:b7:a7:6e:89:
3f:06:7d:4e:db:5d:94:5a:ca:97:4d:ad:0e:53:ca:
2d:1f:7b:15:10:0f:ef:2c:be:ad:e0:54:32:2b:2f:
2d:db:76:a8:c3:c0:8e:35:59:3c:69:b7:6d:23:38:
3a:b1:f4:be:9f:52:f7:fe:c2:19:d2:c6:4d:75:9a:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D9:F9:2E:95:53:09:28:E7:F6:D0:FA:0D:C5:31:51:80:0D:8B:CB
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/mNn5LpVTCSjn9tD6DcUxUYANi8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.154.0/24
91.151.101.0/24
171.33.235.0/24
212.225.227.0/24
212.225.244.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6b:0c:27:47:16:8a:a3:46:af:6d:83:82:eb:98:1b:a4:10:
9f:41:cd:fc:04:eb:c5:e5:07:6c:5b:dd:11:1d:1d:63:09:c7:
a0:05:f5:13:96:b2:4f:2a:bd:78:a6:13:d4:09:71:31:7b:b3:
57:12:a5:d3:44:f7:35:fe:74:9d:30:9b:1c:9b:8b:cb:ea:2d:
da:92:4d:12:20:e2:d4:36:c2:47:01:a0:be:1c:dd:18:49:2c:
07:fa:c4:9e:cd:99:1b:63:a9:5e:15:0c:09:54:6b:73:87:e0:
20:b9:55:9f:5c:f0:22:0c:10:b2:d1:a1:2a:9e:ef:d9:64:3f:
59:43:67:4d:cc:44:c8:61:15:1b:b6:87:30:b6:e9:c4:2d:46:
cf:05:8f:0d:bd:e4:e0:fb:8d:a5:b1:82:ed:94:97:d2:b5:4e:
45:a0:dc:d0:b7:73:51:80:94:17:39:4d:8c:ec:ad:f8:16:f4:
41:90:b5:63:93:e1:2c:2c:9d:41:3c:10:46:74:3c:6e:1c:4b:
db:6e:b0:cf:38:e1:38:99:ac:aa:cc:a3:38:02:0c:99:f1:7c:
6d:a1:ed:df:1e:34:d2:0a:06:45:a4:38:71:38:43:4a:1d:c3:
38:9d:ec:4d:f6:01:27:77:7f:79:3b:3c:8a:24:84:ac:60:3b:
55:5f:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:42 2025 by rpki-client