Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/cUVtfwqVquwHXe5I4JNbQrYcgVo.roa
File: cUVtfwqVquwHXe5I4JNbQrYcgVo.roa (raw, json)
Hash identifier: ZmxylQruETwLENAliG0u8KxPCeGHw/j08XgSWsYOkt0=
Subject key identifier: 71:45:6D:7F:0A:95:AA:EC:07:5D:EE:48:E0:93:5B:42:B6:1C:81:5A
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 018722A6E8177CD0397C15241E876EECE931
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/cUVtfwqVquwHXe5I4JNbQrYcgVo.roa
Signing time: Mon 27 Mar 2023 10:39:36 +0000
ROA not before: Mon 27 Mar 2023 10:39:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:a6:e8:17:7c:d0:39:7c:15:24:1e:87:6e:ec:e9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: Mar 27 10:39:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71456d7f0a95aaec075dee48e0935b42b61c815a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:bb:44:63:b6:0b:d2:b3:c4:53:bd:e4:fb:
7c:ab:7c:8f:51:50:5c:1b:a5:01:1a:6a:85:36:60:
41:c7:89:ab:54:49:4c:fd:9b:2c:80:a8:a3:00:41:
de:67:7d:37:ad:9f:7c:58:49:96:83:0f:87:57:34:
83:4d:05:da:46:ff:bc:98:28:57:c9:fd:5f:3a:ed:
59:c5:bd:8b:26:a4:55:42:07:93:bb:84:7c:fa:d4:
ee:55:a6:d3:22:89:e7:f7:69:44:6d:62:81:1c:83:
6a:f2:ff:17:89:0e:a7:fb:fe:1d:42:dc:e2:e9:d9:
bc:55:82:de:03:1d:70:92:e1:02:6f:1c:2d:87:7a:
64:c9:18:2f:28:c5:d3:1f:15:f4:d3:ec:16:31:ab:
79:50:91:cf:13:1a:57:6c:a2:a0:3e:b6:cd:c5:c0:
7d:32:7a:7c:50:08:ca:d2:15:52:8d:64:23:02:fe:
4a:c9:a1:8a:90:48:96:f0:64:80:d0:75:44:e6:8b:
81:cc:0f:8b:a5:4a:4f:fc:96:db:bb:bc:bd:ac:5f:
d1:2e:b5:71:80:d6:1a:1a:35:2c:51:3f:1b:3e:b5:
0f:d5:f3:ec:6a:ca:e1:d0:e6:71:ab:3d:29:a1:6c:
4f:f8:a6:04:ea:c2:be:94:58:45:ab:2a:63:6d:43:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:6D:7F:0A:95:AA:EC:07:5D:EE:48:E0:93:5B:42:B6:1C:81:5A
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/cUVtfwqVquwHXe5I4JNbQrYcgVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fd:89:e6:36:27:2f:fc:3d:73:98:35:52:b6:48:47:ef:03:
07:96:b9:ea:71:70:00:a2:4f:01:a7:e9:13:14:d6:77:0e:d1:
6c:dc:b9:b2:bb:a7:59:a2:6a:bd:7a:3a:f2:5d:54:6e:44:9d:
ab:36:77:da:8c:c2:bb:e0:30:cf:ad:1b:15:85:f8:82:78:dd:
3d:e5:2a:03:35:fa:a6:7e:7a:92:8e:97:31:68:e3:6c:57:08:
63:2a:3c:4b:20:6f:f9:a8:82:32:81:5d:15:7a:c2:f0:1a:db:
2d:97:4f:40:20:4e:c6:7f:9f:3a:5a:fe:d0:71:3b:98:52:64:
5f:82:dd:2f:88:57:9c:e3:63:61:fb:44:f5:b2:e5:30:ae:3e:
33:89:10:dd:cd:ec:fc:e2:0f:24:39:75:5f:a7:87:67:0b:69:
83:fa:20:40:44:80:14:c9:6b:e7:0a:47:48:1e:70:aa:85:82:
cf:e8:52:e3:f6:a3:72:ef:4b:95:75:bd:c5:a6:dd:1b:97:60:
be:af:27:57:0a:bb:26:6a:95:22:79:2e:4f:d9:fa:c6:13:07:
d1:24:bb:bb:09:ef:0a:1b:42:7a:49:e4:ce:1f:a6:88:5f:60:
9a:cf:1d:43:05:38:92:3c:aa:a8:4d:38:d9:f2:fd:3b:d6:ad:
45:4e:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:21:28 2025 by rpki-client