Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/r2bH3RW1pqu-dgHjG7sTWnwOKJ0.roa
File: r2bH3RW1pqu-dgHjG7sTWnwOKJ0.roa (raw, json)
Hash identifier: 4HPE1larbSQzQUKt1kUqXWzX62e4c8Z115LQGmn1cYA=
Subject key identifier: AF:66:C7:DD:15:B5:A6:AB:BE:76:01:E3:1B:BB:13:5A:7C:0E:28:9D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09B4714C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/r2bH3RW1pqu-dgHjG7sTWnwOKJ0.roa
Signing time: Tue 22 Feb 2022 05:52:46 +0000
ROA not before: Tue 22 Feb 2022 05:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 89.116.169.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162820428 (0x9b4714c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 22 05:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af66c7dd15b5a6abbe7601e31bbb135a7c0e289d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:f6:a1:b1:e2:77:72:b9:bd:a2:91:57:c7:
19:f5:12:21:25:49:bc:88:de:6e:66:5c:27:e3:43:
44:36:f9:18:8f:83:3d:51:0a:5a:1f:ae:81:d1:82:
03:5a:27:76:48:fe:67:c3:3a:2d:5c:fa:34:d8:dd:
c9:a0:44:a4:ec:5a:e8:a7:a1:2e:6e:4a:bf:23:37:
59:6f:8c:80:3d:b3:42:a4:25:c6:3c:56:48:4a:a3:
b6:90:0f:13:aa:54:39:fe:34:62:9c:e9:a1:6a:cc:
9c:82:01:ba:ef:e4:7c:c1:d6:17:ea:c2:ea:80:f3:
57:85:69:f9:17:42:c2:f4:d9:12:40:8d:10:53:f9:
ce:f4:3a:59:6f:e8:53:73:5c:b0:fe:ff:b1:9e:93:
d5:ba:76:49:0d:f4:75:e4:48:cb:39:f4:b5:af:a2:
5d:b7:26:07:a9:2c:2f:ed:b7:06:d1:68:4d:84:27:
e6:09:68:62:5d:c1:d2:f8:4d:0f:db:2e:0d:fc:5e:
9a:06:95:32:77:2b:4b:a5:e6:3a:ee:eb:3c:5d:c2:
ff:6a:0f:90:48:ba:31:50:9b:33:aa:e3:d6:ef:42:
d2:22:f5:c1:4d:69:2f:3b:04:74:f6:cd:b6:ef:6b:
2e:ef:ee:17:33:7e:d5:84:c2:e9:59:42:30:f4:15:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:C7:DD:15:B5:A6:AB:BE:76:01:E3:1B:BB:13:5A:7C:0E:28:9D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/r2bH3RW1pqu-dgHjG7sTWnwOKJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.169.0/24
89.117.27.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0a:2a:f3:1f:12:61:03:4c:01:6e:4e:4f:57:54:4c:b5:dc:
d7:3a:3e:fc:f6:9e:cb:60:0a:64:dc:a4:15:50:bd:aa:ca:82:
da:35:62:dc:cb:5b:ce:ce:cc:ab:4c:1e:3c:5b:90:b3:79:6e:
37:91:c4:39:da:9a:47:e4:c5:16:99:5b:7f:b6:69:07:47:a0:
79:52:55:a2:5a:68:25:0d:1b:39:c3:51:38:7b:2d:8a:66:1a:
9f:57:95:2f:13:b8:31:b6:5e:d6:46:68:58:a4:e8:f5:8e:0a:
fa:5b:9e:05:a9:4b:eb:1d:06:68:da:c8:4a:6d:b6:87:ca:34:
50:46:e7:c4:ea:f1:33:bc:14:fb:a5:ba:3f:c1:a3:f5:e9:ed:
44:4b:9d:a3:37:d5:5b:a9:8a:e6:9b:6a:5b:6d:87:10:dd:80:
1e:c9:cb:09:d7:09:49:78:59:39:75:b0:0f:76:0e:f3:9b:dc:
98:3b:74:7f:91:30:e6:bd:24:1f:14:ac:2c:5f:d1:65:e3:cc:
28:12:e5:8f:64:e8:01:7b:e0:7f:5c:54:47:be:61:b5:b4:3f:
27:87:4d:e0:f3:a0:5f:a2:fa:23:38:2f:3a:fd:f9:65:3c:fd:
d3:ca:f0:a9:eb:6e:06:e9:94:dc:cb:4e:ef:f2:36:cd:23:fa:
2e:8c:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:08 2025 by rpki-client