Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/1-rQwqNKly6aenIYeWSDOecvE9Dg.roa
File: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (raw, json)
Hash identifier: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=
Subject key identifier: FA:B4:30:A8:D2:A5:CB:A6:9E:9C:86:1E:59:20:CE:79:CB:C4:F4:38
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 019426D8BEB8CDD9CCE97F6D259EE198556F
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/1-rQwqNKly6aenIYeWSDOecvE9Dg.roa
Signing time: Thu 02 Jan 2025 11:48:46 +0000
ROA not before: Thu 02 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61353
IP address blocks: 89.34.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:be:b8:cd:d9:cc:e9:7f:6d:25:9e:e1:98:55:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Jan 2 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab430a8d2a5cba69e9c861e5920ce79cbc4f438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:06:aa:cb:6b:d4:67:4c:62:1c:11:90:75:
82:0f:56:ce:ea:53:30:74:df:6d:8c:7e:49:f4:88:
11:05:c8:f0:6b:70:0c:eb:a7:39:2f:32:20:ef:24:
7c:02:91:a9:38:5d:48:2f:d4:b2:a5:85:ff:52:93:
aa:9d:de:ed:90:e7:d3:fb:ff:8a:b8:a2:d4:3e:08:
e7:d1:a4:8f:e1:61:dd:37:83:8f:ab:28:3a:ec:d4:
df:44:1f:8d:b1:20:b7:ed:2d:d8:ce:0e:fe:79:f4:
60:d6:38:04:d7:3a:fe:81:d4:d1:51:dd:ee:88:5e:
2a:ea:9d:f9:2d:3f:5b:67:c4:70:f3:ac:72:43:f1:
b7:a9:a2:6b:6d:d3:19:c4:2d:99:f7:1c:e3:45:35:
39:b2:00:21:74:2c:f1:6c:9c:02:82:3b:00:73:13:
8b:2f:cc:66:cf:aa:9e:d1:cd:76:8d:d1:5e:d5:47:
36:3b:22:0f:27:1e:af:96:81:ac:9e:2e:dc:a3:ac:
c9:25:07:b5:3a:73:18:57:63:4a:53:da:f4:b4:bc:
e0:12:0e:e3:7e:9e:c5:79:52:dd:8e:12:f8:9d:f2:
3b:3d:23:84:8a:ad:3c:c0:5b:51:6a:f6:55:88:07:
8a:7e:60:2c:aa:49:fc:58:48:04:e1:51:6a:16:a8:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:30:A8:D2:A5:CB:A6:9E:9C:86:1E:59:20:CE:79:CB:C4:F4:38
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/1-rQwqNKly6aenIYeWSDOecvE9Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.160.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b5:10:e9:61:6f:a5:88:4e:27:70:28:5e:9b:69:06:ba:c6:
bc:a0:ac:c8:15:54:92:e4:c7:8c:6e:cc:19:5e:97:30:fa:ab:
b8:d6:17:c4:27:fb:7d:8c:25:99:98:07:95:b8:95:52:5f:a2:
da:33:06:58:9b:de:8c:cc:ed:11:f6:fa:71:c1:af:88:bf:1d:
5a:69:cc:37:ca:e8:d6:68:e5:be:83:6d:4a:d3:31:70:47:09:
4b:90:b8:f5:74:d6:99:19:65:73:75:f2:c7:9a:48:4c:1c:93:
da:3d:1a:a6:05:4d:4c:44:bb:10:e6:ed:c9:d8:bc:84:5a:b5:
5b:e7:ec:ab:fa:f6:7e:87:e9:14:b4:86:b3:c6:c9:fe:38:22:
1b:5f:4d:28:50:2d:74:4d:35:71:c7:00:1e:93:ec:55:03:b1:
7d:95:0c:ea:15:b5:8c:32:91:55:d2:55:78:d1:a3:f3:85:e7:
e7:84:af:a6:a8:b7:a0:93:d1:eb:c5:58:29:ac:fa:d2:a5:68:
6e:eb:a1:73:0c:57:3b:c7:42:75:2c:4b:65:6a:a2:37:5e:28:
66:07:7b:8f:85:49:4d:55:13:9c:e4:ab:54:61:69:85:b3:93:
13:51:06:a5:f4:50:fa:fa:d8:b9:c9:63:e7:1f:7e:af:e3:d7:
88:2a:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:31 2025 by rpki-client