Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0A7V9_WPUp51Evqb_0WVVSS9ks4.roa
File: 0A7V9_WPUp51Evqb_0WVVSS9ks4.roa (raw, json)
Hash identifier: X3f6TqG9mU6oCdFuw+Ivk5yIzocBdwqg2qXMSr28dYA=
Subject key identifier: D0:0E:D5:F7:F5:8F:52:9E:75:12:FA:9B:FF:45:95:55:24:BD:92:CE
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A25B341
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0A7V9_WPUp51Evqb_0WVVSS9ks4.roa
Signing time: Wed 06 Apr 2022 05:21:03 +0000
ROA not before: Wed 06 Apr 2022 05:21:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 89.117.254.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170242881 (0xa25b341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 6 05:21:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d00ed5f7f58f529e7512fa9bff45955524bd92ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:90:a4:dd:ea:e9:1e:83:22:72:d4:e5:b5:
a1:2b:f4:57:2f:78:2c:9d:74:b2:8f:6a:fc:9a:2c:
ee:25:3d:d9:07:08:bc:e6:eb:ff:b6:76:96:b1:c1:
c7:51:76:9d:b3:ff:4f:9d:3f:7a:18:47:20:6c:e5:
70:a0:49:fc:71:51:c1:2e:43:91:8d:c6:f6:9a:9f:
21:9a:86:bb:3b:5b:90:7f:db:d6:ca:7e:3d:71:65:
33:b0:72:94:cf:32:10:2a:be:14:dc:24:4f:ab:f6:
d4:62:71:f2:e8:67:48:5a:97:36:65:a5:09:fd:4b:
d3:36:03:95:df:f9:5d:55:1a:7d:ff:53:c7:0d:7f:
1e:f7:b5:f8:19:13:4e:66:16:91:66:3a:7e:c6:60:
04:e7:e8:53:44:4a:33:0e:b5:69:9d:4a:23:a7:28:
20:20:a6:96:69:1b:d1:24:8d:9c:7f:3d:80:47:cc:
b6:10:96:ba:a2:52:1d:4f:9e:8a:1d:8b:f3:fe:cc:
b2:98:86:db:d2:da:50:16:6f:4b:49:98:ab:b3:f3:
2e:cd:b0:f7:37:63:09:90:be:4d:5e:00:37:51:71:
3b:6b:63:2c:97:13:ae:6e:fc:06:ad:99:c4:39:86:
75:93:2c:10:b0:71:ab:a0:17:d3:7a:2a:01:40:17:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0E:D5:F7:F5:8F:52:9E:75:12:FA:9B:FF:45:95:55:24:BD:92:CE
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0A7V9_WPUp51Evqb_0WVVSS9ks4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.100.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f2:6c:e2:97:09:14:86:fc:00:51:4d:f1:79:87:c2:65:3b:
ad:59:83:17:21:d9:dc:5b:27:ab:da:9b:29:1a:97:33:ef:1f:
6f:e0:d6:48:dd:d3:55:6d:27:0c:25:37:71:7d:b7:04:49:0a:
1f:01:44:75:90:98:cc:3b:f7:32:b6:ba:5a:b4:b2:36:0f:aa:
68:ff:25:56:9f:98:5a:d8:66:61:a7:32:c9:b4:12:b6:fb:2d:
56:cf:de:30:55:c2:d6:84:d1:14:cb:24:63:b9:65:2b:b8:b8:
ec:ac:f6:46:9d:a9:f6:2d:20:a0:34:68:93:04:41:b8:b9:8c:
83:1a:86:ff:cf:50:23:5c:9d:74:e7:81:2a:c7:4b:61:32:4e:
35:bc:39:6d:bd:aa:80:07:c4:67:49:9a:0e:70:1a:19:13:0c:
b1:b3:04:bf:d9:d5:67:39:f3:f0:e4:4b:ec:c2:2e:41:9a:a0:
3c:6d:25:22:98:c4:71:8c:a0:c1:5b:b3:4e:c4:91:1e:6c:79:
3e:2a:14:a4:30:6a:fa:d1:b3:3b:86:5e:96:1d:a0:2e:6c:56:
3d:7f:39:b4:b8:53:2d:45:a5:a2:eb:53:c9:28:41:89:55:7e:
04:20:cc:01:d6:71:1c:43:a7:bc:b4:42:b0:91:53:6d:ce:53:
d1:f9:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:22 2025 by rpki-client