Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/2N8gZN2ykI3l3tKSA62dFVM9O2U.roa
File: 2N8gZN2ykI3l3tKSA62dFVM9O2U.roa (raw, json)
Hash identifier: AteVWqg5H4gzcCQ8HtWNuulDdNJrbS4Omlln9p7E0Uc=
Subject key identifier: D8:DF:20:64:DD:B2:90:8D:E5:DE:D2:92:03:AD:9D:15:53:3D:3B:65
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA424C189F150761BADCF6D4BD3B3B
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/2N8gZN2ykI3l3tKSA62dFVM9O2U.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214402
IP address blocks: 89.36.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:4c:18:9f:15:07:61:ba:dc:f6:d4:bd:3b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8df2064ddb2908de5ded29203ad9d15533d3b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:d9:1e:e7:6f:48:36:3c:7c:a0:4f:ae:fa:
e9:7d:d3:7d:76:6d:75:92:85:ef:d1:10:d0:27:9e:
41:23:e0:74:3a:53:56:08:5a:98:a5:84:94:63:91:
0d:85:a5:ea:39:cf:71:e6:a8:47:aa:b6:7c:85:f3:
2f:0d:71:1c:f1:30:0e:68:99:b5:85:94:48:78:d8:
c0:6a:b8:1e:26:12:9d:6b:a6:e3:18:5d:68:2e:0d:
90:e9:05:4c:7d:a7:fe:a0:2c:19:4c:29:e4:7e:4d:
d3:1c:70:57:47:d4:51:2c:a2:2e:e1:52:b5:5b:0d:
16:7c:3f:bb:46:39:78:16:f8:4f:4d:e9:17:b6:c2:
d4:c1:d2:50:70:c6:6d:7e:13:be:59:fb:ca:b1:b4:
69:e7:4f:c2:42:1c:91:76:c2:68:98:c8:2e:96:ed:
ac:d0:4e:36:38:1d:0d:97:db:eb:c1:60:63:db:28:
29:2d:5f:dc:3b:8e:ed:8b:2e:c6:65:55:a2:78:b9:
77:fb:b4:fd:94:2f:8a:4a:2e:b6:52:4b:18:a4:2b:
75:43:c7:ec:78:8f:6e:52:63:4a:39:c5:7a:7c:24:
1e:6f:8f:da:a2:8d:74:fb:ea:59:1d:11:5e:67:70:
50:37:84:27:c5:40:82:e7:61:6a:51:a0:4e:7f:91:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:20:64:DD:B2:90:8D:E5:DE:D2:92:03:AD:9D:15:53:3D:3B:65
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/2N8gZN2ykI3l3tKSA62dFVM9O2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b7:c0:03:53:d6:ed:1c:9a:ca:b6:34:77:45:71:4d:a6:65:
1b:90:b4:62:01:a3:b9:41:ae:5f:c2:c1:31:b3:40:97:4a:f6:
8e:de:a9:03:c8:c4:5c:85:6a:ff:5b:0f:94:bc:85:83:39:18:
86:ab:17:c9:ad:40:1e:80:95:f0:e2:71:76:12:b1:47:3e:80:
90:b7:42:16:11:da:36:9c:61:e5:40:f1:70:b8:6a:e1:5d:7d:
09:94:11:60:0b:35:71:11:27:75:ea:45:7d:a5:e5:f9:19:d5:
f8:96:c3:8c:f6:50:c1:b0:be:52:e7:94:ff:f7:5d:12:8e:46:
e3:da:7f:69:5e:0e:57:49:a9:75:41:5b:b5:38:22:f1:d4:41:
87:f0:55:74:46:c4:f8:0f:cf:ef:21:36:89:84:ff:13:c1:47:
79:11:aa:78:27:ee:13:88:16:03:8f:35:7a:67:02:d6:e6:67:
78:96:3b:8a:86:5a:15:83:fd:ab:42:19:dd:87:55:86:73:01:
99:62:4c:50:f6:33:36:83:69:c2:f2:69:aa:4e:34:26:16:71:
ef:07:0c:16:dc:ab:86:67:ab:11:11:db:f0:82:b4:d2:82:69:
78:83:3a:54:6c:fd:14:26:c2:66:0a:20:6f:28:23:a4:e8:46:
04:0d:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:38 2025 by rpki-client