Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/8wvKaNZPMB6fonw1NrYfUg2gnbk.roa
File: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (raw, json)
Hash identifier: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=
Subject key identifier: F3:0B:CA:68:D6:4F:30:1E:9F:A2:7C:35:36:B6:1F:52:0D:A0:9D:B9
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 0194244561CEBC0F985C1EE963AE46CE628C
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/8wvKaNZPMB6fonw1NrYfUg2gnbk.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 89.47.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:61:ce:bc:0f:98:5c:1e:e9:63:ae:46:ce:62:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30bca68d64f301e9fa27c3536b61f520da09db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:9f:66:fc:2d:36:9d:e8:8d:07:41:56:b6:
9b:16:53:f7:e0:41:fa:eb:05:f1:53:8b:9a:74:e0:
87:2a:00:89:cb:a4:c4:de:40:69:6c:b6:10:68:56:
0e:56:e9:53:d8:72:4a:87:da:e2:37:a5:a7:4f:43:
1f:93:3a:4a:0a:6b:9e:9b:03:94:fa:14:6f:04:46:
70:08:31:53:6c:1a:d7:32:6a:c5:f3:15:12:51:31:
9a:41:a7:85:41:c8:b7:d4:3a:9f:5d:0e:18:66:79:
14:8b:61:10:cf:a5:2e:5e:69:32:08:f3:f9:a8:c0:
3a:74:5e:98:ef:77:d2:05:cb:94:c4:0d:fb:50:d5:
62:64:bd:92:fa:27:75:d2:e2:e6:ca:50:4e:14:fe:
87:49:0e:df:9b:30:00:60:e3:96:69:aa:79:4d:fb:
35:c2:03:ca:bc:cb:aa:af:c2:47:a9:97:0e:18:d3:
42:5a:ce:15:f8:c5:e6:88:08:8f:ea:7c:bc:3a:56:
68:e4:81:66:cc:65:64:0b:6d:cd:25:ab:d0:26:7f:
50:27:57:b2:e9:aa:02:38:c6:e9:23:99:05:f8:da:
c1:39:cf:9b:b5:31:c8:e4:c4:a0:93:d6:ff:bf:1b:
30:a1:fe:b6:a3:69:db:88:26:76:13:e5:6c:12:ee:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:CA:68:D6:4F:30:1E:9F:A2:7C:35:36:B6:1F:52:0D:A0:9D:B9
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/8wvKaNZPMB6fonw1NrYfUg2gnbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.37.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:bc:b9:b8:93:33:db:b4:8e:e8:87:33:34:32:31:4c:ee:f8:
27:34:e1:e1:c6:99:55:bf:9e:8f:69:e8:c5:e5:b4:22:2a:3f:
ca:c8:a4:e1:7d:64:58:98:ad:fa:27:dd:9b:40:a9:c1:c8:27:
72:5e:18:f6:c5:ab:f2:3d:4c:19:3f:70:f1:f5:c7:24:cc:d5:
72:af:27:cb:bc:85:05:37:61:9d:88:19:cb:37:28:62:28:79:
89:25:58:91:a2:ec:71:c9:34:74:b0:76:52:ff:2f:c6:3e:fe:
50:de:05:10:34:95:f6:2a:92:65:e5:07:87:42:02:64:1f:77:
66:cc:94:18:c1:a8:4a:a6:51:43:6b:ef:e4:23:16:46:53:74:
1d:4c:fa:79:f5:54:d4:bb:1d:f1:1f:ba:5f:75:1a:55:bd:e0:
04:64:ff:40:be:6f:6d:eb:f3:ff:e1:d7:c1:a6:5b:16:42:d5:
6e:39:be:96:f4:5c:06:0a:54:54:3c:7e:6d:61:80:d4:c3:03:
1b:6c:f8:c6:32:3b:6c:6a:58:37:d7:ab:38:d3:db:9c:79:13:
67:57:15:5c:7c:2f:30:e5:3a:57:ca:40:14:de:d7:25:d4:5d:
ba:73:f7:b1:39:8a:bb:87:6f:06:48:7b:8f:66:9f:35:60:00:
1b:fb:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:52 2025 by rpki-client