Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/s7p4j9URn2D7wbUlKxsLHirYGx8.roa
File: s7p4j9URn2D7wbUlKxsLHirYGx8.roa (raw, json)
Hash identifier: DBs/FkHFiHhJS9lahQklwyy7rNMLV87rpIdKTKuvgz8=
Subject key identifier: B3:BA:78:8F:D5:11:9F:60:FB:C1:B5:25:2B:1B:0B:1E:2A:D8:1B:1F
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 01941FFA9B3DE5085A89F87A4A1A9D03EC24
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/s7p4j9URn2D7wbUlKxsLHirYGx8.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12437
IP address blocks: 81.89.224.0/23 maxlen: 24
84.201.96.0/24 maxlen: 24
212.62.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9b:3d:e5:08:5a:89:f8:7a:4a:1a:9d:03:ec:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3ba788fd5119f60fbc1b5252b1b0b1e2ad81b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:9a:3c:da:f8:7f:f2:6e:86:df:50:10:08:
c1:b2:42:ac:69:41:26:ef:24:78:9c:10:c0:a5:7c:
fb:fb:47:2c:3e:32:17:05:12:21:4d:45:a2:88:af:
10:20:63:d1:b8:8b:69:9c:ad:39:1a:b1:af:8b:17:
53:00:50:da:31:55:62:1b:92:28:df:6b:16:d2:d1:
29:cd:e7:67:2f:92:ac:a0:01:18:40:56:86:4c:88:
29:86:69:a0:94:a2:9e:66:d5:39:a6:40:33:d3:15:
03:28:21:02:34:5a:30:2d:26:4b:14:bf:47:5d:68:
cd:a8:63:df:64:4e:14:0d:20:dd:37:8a:2c:1a:29:
e6:e3:a2:43:58:10:65:b2:3d:4c:48:8e:e2:41:07:
23:9c:33:30:ec:a4:7d:ba:e1:c4:1a:ea:d4:6a:05:
3a:a4:7a:67:79:f1:45:f4:51:1c:f8:51:ab:20:4d:
43:eb:07:b8:b0:64:46:0b:fa:cc:93:f2:13:9d:1a:
46:fb:a4:dc:f1:61:2f:33:3a:6c:f7:e8:9a:7a:46:
74:6e:08:7b:bd:c9:bb:92:a0:2d:63:91:09:6a:bd:
bd:3c:d3:be:88:6a:a0:9f:f0:ac:90:d7:98:75:76:
ba:3e:58:60:9e:1b:fa:bd:6c:47:ab:18:64:d9:03:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:78:8F:D5:11:9F:60:FB:C1:B5:25:2B:1B:0B:1E:2A:D8:1B:1F
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/s7p4j9URn2D7wbUlKxsLHirYGx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.224.0/23
84.201.96.0/24
212.62.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:24:25:b6:55:00:bb:ec:e9:e6:f9:2b:7e:38:e0:58:60:45:
52:b2:6e:30:fd:bf:ad:51:9c:20:40:b8:13:db:fb:39:1f:4d:
35:e2:93:42:bf:10:7f:74:da:2a:57:a0:45:a0:f6:94:46:05:
75:33:13:92:7d:9a:61:aa:ef:d4:d4:58:fc:c7:36:c2:dc:4a:
cc:4c:fd:71:db:a5:6b:ee:03:a2:a0:10:2f:fb:dd:12:f7:b2:
b5:4a:7b:d5:bd:54:e4:de:cf:f2:f7:fa:4b:06:54:08:2d:24:
57:ed:0a:a9:e5:ef:6b:94:ee:55:2d:67:48:27:52:41:fc:52:
cc:50:cb:0f:8b:0c:14:91:c0:0e:5b:ac:bb:95:5e:ea:e4:0c:
5b:e8:74:f1:df:49:e7:24:cf:20:b1:d8:a6:6d:44:a9:37:dd:
d6:20:7c:94:7f:a9:cb:96:a1:5c:31:f9:43:6f:16:e4:a7:ee:
f3:4f:bb:c5:17:f5:75:08:8d:7a:ca:e8:94:d1:3c:dd:e6:da:
47:41:14:bd:4e:f8:4b:8f:94:45:b3:ef:8a:9d:ab:f9:8d:d7:
40:d5:e9:9c:1a:82:86:fc:b7:6e:96:89:3f:f9:57:9f:61:ab:
fb:f1:a7:cc:c5:02:bc:7d:23:23:d9:aa:a2:7b:50:6b:9c:e6:
f8:ec:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:55 2025 by rpki-client