Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/0gep-REqlULawvS-x4T-wK7S7GA.roa
File: 0gep-REqlULawvS-x4T-wK7S7GA.roa (raw, json)
Hash identifier: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=
Subject key identifier: D2:07:A9:F9:11:2A:95:42:DA:C2:F4:BE:C7:84:FE:C0:AE:D2:EC:60
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 019423690BDD0CAB2B0B2D1D19B2E7E65B10
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/0gep-REqlULawvS-x4T-wK7S7GA.roa
Signing time: Wed 01 Jan 2025 19:47:54 +0000
ROA not before: Wed 01 Jan 2025 19:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 89.38.52.0/24 maxlen: 24
89.38.53.0/24 maxlen: 24
89.38.54.0/24 maxlen: 24
185.69.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0b:dd:0c:ab:2b:0b:2d:1d:19:b2:e7:e6:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d207a9f9112a9542dac2f4bec784fec0aed2ec60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:9e:e7:b1:6e:e0:08:29:38:d0:18:04:92:
5d:7b:c6:b1:eb:76:82:d1:cd:5f:0b:24:8b:f4:82:
66:3a:3e:f5:7e:4c:9e:75:f8:8f:a9:c3:4f:3e:e8:
82:4d:0f:67:0f:95:f1:8f:08:35:74:5f:a7:f0:1c:
e9:f9:de:6f:2e:d7:1e:04:5f:5b:ed:13:7b:d8:cd:
f3:59:f9:d6:65:5c:bc:d6:2e:8e:96:98:f0:35:ef:
60:3d:5b:5e:f1:e6:f7:d7:3c:57:e8:5b:15:06:47:
3c:70:de:f4:c6:d2:c1:38:8d:38:06:56:80:3c:f8:
b1:d5:db:45:c7:70:7f:ee:91:1e:b4:ae:37:48:f1:
97:48:2f:48:f5:f6:5c:6d:31:b7:d8:f4:51:57:7f:
a3:62:2a:50:d0:cb:e5:27:5f:64:6c:b4:8a:bc:ea:
83:30:4a:68:4f:e9:20:29:ee:59:80:e7:dd:cf:ac:
c9:53:df:6e:7c:dd:eb:df:1f:d9:81:ca:3d:39:bd:
ba:f7:26:58:01:5e:03:e1:fe:99:fd:48:f1:31:a2:
4b:36:2f:9e:8c:b9:33:a2:9b:8a:ba:b8:c3:0e:7d:
2e:e7:0b:db:1b:24:8d:cf:9a:ef:72:c4:6f:94:40:
ac:ac:c2:e4:49:4c:34:49:68:c2:a5:8e:89:a2:b1:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:A9:F9:11:2A:95:42:DA:C2:F4:BE:C7:84:FE:C0:AE:D2:EC:60
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/0gep-REqlULawvS-x4T-wK7S7GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.52.0-89.38.54.255
185.69.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8b:ac:2d:60:a6:a3:6c:3b:c9:78:32:44:4e:ac:e6:b8:7e:
ff:d5:2e:73:3e:ff:7e:40:f3:ca:96:4a:7b:af:65:d7:53:7c:
94:17:7e:21:95:f7:c8:96:a2:3e:68:1f:c4:f5:48:5d:68:88:
71:1b:69:fd:dd:96:16:92:d4:3b:1d:aa:f8:ec:f7:15:d6:05:
86:70:34:c4:49:2c:d1:36:5c:fe:16:a3:86:6d:cd:5a:d6:65:
ed:56:10:8f:12:b9:e6:ae:cb:ec:66:f7:2a:b1:9e:1a:fb:2c:
0e:13:da:10:7e:d4:ff:a2:b7:9d:01:4f:27:a9:21:a6:24:31:
e9:b1:67:97:5a:6a:32:df:06:3d:7e:97:44:1f:c0:00:39:70:
a1:fe:06:55:18:ac:63:b4:29:55:c3:1b:3f:47:0d:bb:74:c0:
85:74:63:6d:52:14:56:3b:71:5d:71:20:95:b8:eb:0e:37:1f:
ac:c7:b5:5f:c8:b7:08:a3:48:d6:94:7d:95:fe:33:4e:b8:85:
0a:bf:d9:d9:09:75:4c:1c:1c:27:d2:91:a5:ca:22:35:15:7b:
a9:47:96:80:e4:4b:65:e2:5f:22:9a:bf:36:35:39:df:98:64:
47:f3:09:d0:e2:55:75:3f:6f:39:1e:37:58:99:9e:41:a2:c6:
b3:b1:5b:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:22 2025 by rpki-client