Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/eR9oU2rOG_yKHQW35eOlH_oJDN4.roa
File: eR9oU2rOG_yKHQW35eOlH_oJDN4.roa (raw, json)
Hash identifier: R4QzhZKqMnbn0rIV1xjQBYpUNkuK7wXKZmWHhE2mIrs=
Subject key identifier: 79:1F:68:53:6A:CE:1B:FC:8A:1D:05:B7:E5:E3:A5:1F:FA:09:0C:DE
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 018CC7952EC937C3107CBB7CAF241E8CECA9
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/eR9oU2rOG_yKHQW35eOlH_oJDN4.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4323
IP address blocks: 89.191.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2e:c9:37:c3:10:7c:bb:7c:af:24:1e:8c:ec:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=791f68536ace1bfc8a1d05b7e5e3a51ffa090cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:86:f3:aa:bb:ff:48:85:b5:a4:54:b5:a2:
b6:6c:59:e0:f4:fc:0a:92:c0:b2:36:03:87:23:fc:
ba:a9:ac:bc:eb:5b:be:65:63:95:de:16:c8:09:8b:
66:f1:fd:cd:9d:ea:33:e6:2d:ec:72:59:b2:98:d1:
08:bb:ba:94:d2:9c:1b:53:b8:d9:99:3b:25:51:da:
11:d9:cb:50:f0:6a:f5:c9:ae:f3:f3:fb:7b:be:12:
99:af:d6:d6:7d:f4:3c:b5:8f:ea:66:3e:c7:3c:b3:
48:05:01:4e:2f:95:99:0e:30:57:3f:45:d8:2b:7a:
96:b6:16:18:2b:3c:e8:9e:4a:1e:cc:80:ed:35:3d:
4e:8b:9b:9a:bb:d9:a3:64:17:23:b8:4a:1f:81:a1:
ff:d9:fc:42:e6:8b:6a:a1:0c:1f:5c:0a:9b:0e:81:
10:56:e1:d1:27:8b:43:aa:e0:a8:24:47:9a:15:88:
c1:7a:c1:d4:ae:8e:58:4f:9d:63:84:b8:7d:15:6d:
3c:1f:cc:c5:13:64:c1:96:e9:ad:17:f7:6a:b3:ad:
21:f1:71:88:ee:08:c7:dc:90:d9:29:26:c0:bb:c0:
2f:26:b4:4f:b3:b0:63:63:be:e0:6e:d0:b0:2f:d4:
a7:f8:24:dc:df:00:f5:a1:34:dc:36:b6:10:1e:78:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:68:53:6A:CE:1B:FC:8A:1D:05:B7:E5:E3:A5:1F:FA:09:0C:DE
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/eR9oU2rOG_yKHQW35eOlH_oJDN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.65.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e7:3a:9c:cc:ae:11:78:25:c6:37:f2:fc:cb:df:71:d5:78:
68:89:21:fe:7f:22:a3:2c:1d:50:db:45:68:aa:f1:fe:1a:8b:
05:eb:86:d9:47:61:37:d4:79:4a:86:c8:92:16:24:56:d7:6b:
1e:c2:ce:46:24:e1:df:41:f6:4a:00:5b:a6:2b:63:99:60:aa:
91:24:c9:8e:7e:37:36:f0:2d:72:90:94:03:21:03:c6:b2:5d:
0b:68:cf:98:f0:09:19:c9:7e:26:a2:cb:36:b0:14:50:cf:32:
f9:e1:0d:b6:ea:02:ce:b7:ed:ab:cf:91:1e:37:92:71:b1:fa:
e6:38:73:78:0c:4d:35:ca:7d:ad:bf:25:2c:93:5c:56:37:e5:
eb:63:6e:a1:45:97:e6:a9:b9:94:80:4a:2b:74:0c:92:64:47:
65:95:49:0b:13:36:93:b1:55:3f:85:bf:ea:0e:e8:b7:fe:b2:
36:4a:7e:f6:e0:3d:9b:98:c1:3c:9a:4f:20:79:14:d0:f5:a2:
7f:42:c6:32:83:7c:32:d1:f2:fb:d6:88:8d:d8:c5:0c:98:97:
fc:cd:7c:b4:ff:8d:6c:6a:ce:bc:23:96:17:0c:45:c3:09:cd:
b7:ab:e2:cc:21:fd:08:f8:84:59:fd:36:ab:f8:28:36:ed:58:
b9:cd:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:53 2025 by rpki-client