Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa
File: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (raw, json)
Hash identifier: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=
Subject key identifier: DC:AC:3D:D0:8B:4E:ED:35:0E:AD:5D:9E:13:9C:AF:C7:D8:EA:A6:E7
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019435A786F9F88030D6D105F13DD184D61F
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa
Signing time: Sun 05 Jan 2025 08:49:19 +0000
ROA not before: Sun 05 Jan 2025 08:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212221
IP address blocks: 89.45.200.0/21 maxlen: 21
89.45.200.0/23 maxlen: 23
89.45.202.0/23 maxlen: 23
89.45.203.0/24 maxlen: 24
89.45.204.0/23 maxlen: 23
89.45.206.0/23 maxlen: 23
91.132.4.0/23 maxlen: 23
91.132.6.0/24 maxlen: 24
212.102.106.0/24 maxlen: 24
2a09:b780::/48 maxlen: 48
2a09:b780:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:35:a7:86:f9:f8:80:30:d6:d1:05:f1:3d:d1:84:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jan 5 08:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcac3dd08b4eed350ead5d9e139cafc7d8eaa6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:01:d9:1a:4f:94:43:ce:29:ff:01:35:4e:
4b:0d:4a:3b:c5:98:14:7d:ff:6d:28:24:39:e3:58:
47:6d:63:5a:ed:b3:91:47:08:ae:b3:54:8f:79:5f:
ad:22:f8:22:59:30:22:c8:f2:db:5a:f6:8f:b6:f0:
40:b3:6a:f7:a0:16:28:91:3c:a8:a9:71:92:03:ec:
52:38:43:f1:d1:6d:cc:15:84:a0:b4:85:61:79:6f:
6a:74:a3:e4:32:80:a0:99:6b:cf:71:ad:e7:27:98:
24:4a:28:e6:46:15:b5:a1:84:80:12:6f:52:30:c2:
89:a2:ac:45:79:52:3a:27:42:70:22:88:56:3d:00:
27:66:6f:8a:e7:31:18:8b:99:09:db:4b:1e:0a:99:
e9:c8:7b:2d:b2:da:a8:8a:6d:28:a5:04:df:8e:f8:
e9:68:c8:54:df:67:2f:9f:35:a4:25:19:e0:cd:e9:
b8:ab:25:b9:a5:25:39:eb:ca:c9:0d:7c:98:76:2d:
0c:07:22:29:bb:90:a6:43:98:42:fd:e7:7a:39:df:
6a:6d:2c:87:e6:9f:87:9c:e3:6a:74:ce:6f:d4:c9:
07:df:04:52:98:9c:ed:a2:ce:a5:77:0c:ad:c8:12:
62:c6:de:a9:9e:44:5f:88:a6:55:ab:01:5f:99:fc:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:3D:D0:8B:4E:ED:35:0E:AD:5D:9E:13:9C:AF:C7:D8:EA:A6:E7
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.200.0/21
91.132.4.0-91.132.6.255
212.102.106.0/24
IPv6:
2a09:b780::/47
Signature Algorithm: sha256WithRSAEncryption
95:02:ef:35:db:d3:d7:0d:c0:f4:66:89:9e:c6:2a:df:af:24:
cc:29:72:3f:4a:3c:92:36:59:ee:96:3e:2b:99:e3:12:3c:f2:
e1:3c:21:01:a7:b8:37:24:56:62:1b:51:7c:b2:18:ec:f0:b4:
1b:ab:72:8b:10:a3:91:d1:0a:62:5e:d9:ad:33:69:f9:d2:14:
40:c8:bf:52:52:27:dd:1b:69:54:0d:dc:d3:8a:ec:44:f0:4a:
43:af:98:d6:17:52:43:f6:bf:4e:ac:ba:dc:a7:1e:83:94:c4:
ed:5c:49:0d:99:0a:1e:90:6f:df:10:27:a8:7a:26:28:34:e4:
ac:74:60:bb:dd:2f:52:0c:b5:65:b3:13:e9:09:72:a1:ce:3f:
86:e1:5d:cd:80:01:ae:a4:33:81:d8:42:d3:f8:9a:d1:e2:22:
ca:35:97:b7:43:b9:e6:50:6a:64:45:60:d4:08:38:ea:30:ff:
5d:cb:b5:2c:eb:eb:a8:7e:f2:20:d2:c0:b4:f3:e4:38:b6:ba:
1b:87:dd:6f:23:86:7c:6e:dd:91:97:31:f5:f4:d6:15:f2:09:
09:de:11:3a:09:12:8a:31:4f:e9:2b:6f:90:63:e1:0c:c7:21:
48:c3:13:2f:b7:7b:6e:02:04:80:06:d5:2e:00:9d:9c:ae:ce:
cf:0d:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:53:50 2025 by rpki-client