Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/lBd5ayKV19qIMGuCBhbbrB6mWpM.roa
File: lBd5ayKV19qIMGuCBhbbrB6mWpM.roa (raw, json)
Hash identifier: +DZa9foRJclwsy6vlDnsvddvxMKMT8TD44d1ng4qPj0=
Subject key identifier: 94:17:79:6B:22:95:D7:DA:88:30:6B:82:06:16:DB:AC:1E:A6:5A:93
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0194F9277F5B80CA2B7675714813C3F0CBAC
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/lBd5ayKV19qIMGuCBhbbrB6mWpM.roa
Signing time: Wed 12 Feb 2025 07:55:02 +0000
ROA not before: Wed 12 Feb 2025 07:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 89.42.136.0/22 maxlen: 24
89.42.136.0/23 maxlen: 24
89.42.136.0/24 maxlen: 24
89.42.137.0/24 maxlen: 24
89.42.138.0/23 maxlen: 24
89.42.138.0/24 maxlen: 24
89.42.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:27:7f:5b:80:ca:2b:76:75:71:48:13:c3:f0:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Feb 12 07:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9417796b2295d7da88306b820616dbac1ea65a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:d6:79:ed:eb:64:44:b7:14:d1:5f:78:11:
07:34:bf:72:a3:e4:8e:8f:ae:b0:e8:87:f1:a8:ce:
f5:e4:d7:fc:db:27:e9:d3:d8:7f:59:20:c4:be:82:
dd:cd:11:f7:3f:89:32:86:83:a6:7e:ef:7d:02:37:
17:9d:4c:00:7f:ee:c4:cd:85:68:10:93:57:89:21:
57:10:13:35:32:11:57:29:e8:37:b4:6e:25:39:ac:
b5:ee:f3:b1:a7:65:92:a8:4c:6f:8c:65:51:e3:06:
df:44:ca:ec:05:6d:0c:6f:75:2e:ee:eb:5f:fd:97:
2b:2f:68:46:d7:2a:68:de:17:a5:16:05:38:11:89:
2d:42:0f:b4:c5:e9:ad:56:ed:8d:94:1a:60:58:ea:
6b:21:93:0a:c0:be:5d:3d:e8:86:4a:f7:3b:cf:b2:
25:31:b3:85:2a:7e:e9:10:2b:35:37:b8:b7:a8:b1:
70:fe:30:28:cc:50:9a:c2:8a:fa:dd:bb:5a:90:f1:
9d:90:42:d6:2b:86:99:c1:04:62:4d:0f:60:b9:19:
fb:5f:5a:3b:8d:4e:96:c4:71:73:91:84:50:8e:2d:
51:18:0b:2e:f4:8c:c2:01:88:94:35:a2:05:98:7a:
f0:cc:74:94:63:54:53:c3:24:b2:00:41:42:af:33:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:17:79:6B:22:95:D7:DA:88:30:6B:82:06:16:DB:AC:1E:A6:5A:93
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/lBd5ayKV19qIMGuCBhbbrB6mWpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.136.0/22
Signature Algorithm: sha256WithRSAEncryption
13:df:10:9c:c1:f8:2a:ee:87:2d:f7:77:fd:06:d4:05:ea:c5:
b0:f3:17:f8:da:d5:03:e0:a5:6e:12:af:53:9b:24:ad:5b:32:
7e:23:59:44:01:a3:e4:50:c1:7a:5b:9e:81:94:4d:58:06:aa:
51:52:58:22:fa:65:02:b7:c9:e0:e0:9d:fd:ac:33:22:b2:60:
ae:b2:50:13:25:f9:da:db:18:9a:12:2e:a3:47:00:f6:51:62:
1c:25:ac:06:a2:34:2c:03:83:5f:10:56:3f:9b:db:56:a4:73:
40:df:be:a4:da:bc:82:cb:7e:8c:10:99:7d:fb:fe:2d:a0:13:
0d:1b:32:00:f2:3f:d7:9d:7b:5a:c7:68:96:e0:ed:66:09:33:
f2:e5:b5:50:32:04:22:82:2a:15:e1:d8:8a:9c:8a:6c:32:09:
b4:6b:15:0b:e7:2d:65:f2:98:bb:30:61:0d:27:d4:01:b7:fc:
58:c9:f0:87:fb:fd:e6:86:46:83:b7:b2:86:53:bf:50:65:74:
6b:e1:5a:00:49:32:e0:4d:ac:27:e2:a9:a8:19:ba:4d:df:c6:
ab:27:ff:90:42:66:00:fc:cb:5b:cd:fa:66:d6:0d:88:bf:8b:
25:a8:cd:bb:27:d1:ab:6e:36:73:13:da:a0:4b:4c:bb:b2:b5:
f6:83:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:09 2025 by rpki-client