Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa
File: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (raw, json)
Hash identifier: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=
Subject key identifier: C2:C2:7D:CD:51:31:3B:A2:9F:EA:23:9D:03:F9:C4:24:ED:DC:2C:B4
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 0195CC509C46AB26FB9621762B3BBD2C3D17
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa
Signing time: Tue 25 Mar 2025 07:59:49 +0000
ROA not before: Tue 25 Mar 2025 07:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 89.200.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:50:9c:46:ab:26:fb:96:21:76:2b:3b:bd:2c:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Mar 25 07:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c27dcd51313ba29fea239d03f9c424eddc2cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:fb:19:5a:f3:1d:f1:7e:15:b8:ab:53:ce:
37:49:b8:cc:83:44:e6:3e:25:1e:db:81:ce:4d:18:
be:ed:26:f8:74:91:9f:c9:0d:55:e0:d2:a1:3e:6a:
83:ce:8a:7f:b0:39:d2:66:ff:ff:24:c1:36:91:5b:
92:54:03:4f:a2:06:63:07:80:73:00:0b:d6:1f:42:
2d:12:cd:8f:d6:ea:42:14:dd:45:2e:3c:54:ac:19:
10:d0:7d:70:52:80:22:88:93:2e:be:61:06:2b:fb:
e5:39:f3:58:e3:1a:46:b2:01:89:7b:6f:d7:58:67:
20:ef:c4:c7:29:21:c7:d2:8d:5b:0d:58:07:a4:4c:
1a:d6:dc:62:c4:c5:8e:50:57:32:06:d1:e3:02:f5:
f1:cd:1f:13:0d:fa:3a:1a:47:4a:0b:03:ff:21:22:
77:6a:86:d6:76:04:86:76:8e:f6:cf:2e:15:fc:34:
a2:81:19:45:1c:ff:1b:8a:73:b0:20:88:1f:48:2f:
6e:bb:a9:e8:ef:a8:a2:5e:79:cd:c8:dc:1b:1e:50:
1f:92:c1:5b:36:c4:80:4c:cb:d8:48:69:d4:4e:28:
ba:f8:07:1d:26:b7:35:25:fb:b0:ae:6e:1c:0a:57:
41:69:8b:b1:da:e7:1f:4c:e6:2e:1a:c8:9b:58:64:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:7D:CD:51:31:3B:A2:9F:EA:23:9D:03:F9:C4:24:ED:DC:2C:B4
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.200.192.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:60:52:70:89:44:e2:c9:81:14:19:a4:fe:d5:0b:47:ca:e0:
02:0b:0a:eb:c0:05:4f:d9:7c:31:55:88:d7:fe:e8:21:49:3e:
c2:99:d1:64:ce:7b:09:6f:4b:79:1c:4d:0a:1f:90:1d:a4:fe:
bf:7a:71:2d:53:55:be:91:a4:47:80:2f:d0:d8:31:93:49:2d:
be:37:0c:18:bf:36:a4:fc:3f:d0:3b:dc:b9:06:d6:13:dc:d8:
f4:95:e1:10:b0:23:79:58:33:b4:50:36:45:e0:c2:6e:ca:42:
70:87:9e:af:3b:a0:68:94:ce:69:c9:b4:c2:f6:31:a7:95:e7:
5c:2f:02:f4:cf:0b:18:d0:1f:7d:f8:25:28:11:1d:2c:53:f1:
32:3a:c7:2b:e3:8b:8f:6a:22:c2:b0:09:c5:c1:56:6d:36:a0:
e9:53:9c:70:be:0b:65:86:63:f7:98:5a:da:a6:04:21:d8:3c:
ab:29:f9:be:39:65:7d:06:9a:a1:7a:00:09:d3:59:6c:ef:e0:
5b:f8:e2:c9:b7:ae:11:7d:69:a1:77:2d:d0:8d:64:fe:67:8e:
54:1c:38:ca:c6:c2:b0:6a:a3:d2:21:38:f5:e4:8e:d0:35:54:
56:d6:c1:bc:cf:c2:89:b2:7e:6c:0a:2c:cd:c2:70:8c:e6:28:
64:d4:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:09 2025 by rpki-client