Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-cyewzJmWJVGbju-KQOjsMkDejA.roa
File: 1-cyewzJmWJVGbju-KQOjsMkDejA.roa (raw, json)
Hash identifier: 66OXI4qX7NDW/kNXE3cUSnnAbzbdF7WhPt48rYX1a58=
Subject key identifier: F9:CC:9E:C3:32:66:58:95:46:6E:3B:BE:29:03:A3:B0:C9:03:7A:30
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01835E74B6903ADA38D8B523A225B52C5F12
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-cyewzJmWJVGbju-KQOjsMkDejA.roa
Signing time: Wed 21 Sep 2022 05:10:50 +0000
ROA not before: Wed 21 Sep 2022 05:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210352
IP address blocks: 89.23.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:74:b6:90:3a:da:38:d8:b5:23:a2:25:b5:2c:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 21 05:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9cc9ec332665895466e3bbe2903a3b0c9037a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:4b:99:75:cc:50:c5:26:0d:3c:31:03:4a:
f7:e5:e7:00:70:2b:f0:03:aa:9c:28:b7:3c:64:04:
bb:55:e2:43:f0:6e:b5:a2:66:32:df:9e:c9:18:06:
5f:b5:4d:f8:82:62:b4:11:b8:d7:09:a4:1a:bd:24:
2c:ac:a9:5f:62:49:19:d6:06:f6:93:0c:b6:cf:8b:
d9:b2:fe:71:14:b8:6d:47:48:91:a9:a1:4c:ef:32:
83:0a:d6:86:b3:6b:b7:73:9a:71:71:71:60:1b:60:
d2:69:d3:eb:fd:3c:59:7a:75:4b:1d:7b:a8:bc:3d:
9f:4a:a9:5a:e0:a9:f3:09:59:d3:c3:36:07:37:5c:
a5:c4:c5:f1:00:ed:d3:72:69:ef:bd:e9:67:a3:04:
25:66:81:16:e4:f0:e2:20:1d:f8:32:cc:49:12:06:
06:41:44:af:51:0b:ea:9c:f7:75:a0:53:1f:ad:8b:
fc:20:bd:5e:99:e6:06:2f:0c:54:be:1d:e9:6c:8d:
1b:9e:f1:c8:43:55:7e:02:ff:21:7f:5d:a4:d1:88:
5f:51:3e:a8:e2:76:50:da:24:6e:a6:0e:08:b8:2f:
ea:58:f1:5d:f3:a5:ae:33:c5:15:18:ad:f3:d9:47:
24:70:c6:dd:93:f9:c0:9e:08:43:1e:9f:a6:ee:8f:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:9E:C3:32:66:58:95:46:6E:3B:BE:29:03:A3:B0:C9:03:7A:30
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-cyewzJmWJVGbju-KQOjsMkDejA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.107.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7c:59:d9:40:58:b0:2f:6b:a3:01:cd:91:87:5a:f4:e8:69:
05:6e:d0:f0:b9:e2:19:35:cb:34:ed:ae:ec:07:9a:1e:42:03:
00:a0:41:00:5d:c3:6a:34:d1:7e:c2:2d:56:cd:7d:e5:20:41:
f2:52:8f:ce:7a:7f:ef:c8:0a:6e:b7:15:26:c8:50:d0:ca:ea:
de:0d:9b:d6:c2:a3:80:ba:a4:6c:a1:ca:47:94:eb:62:29:cd:
6d:6b:11:8a:f9:bc:bf:eb:ba:8e:46:b1:ab:13:ea:b3:a9:61:
e4:25:92:cc:c0:8b:28:89:dc:30:4e:12:51:0e:a6:98:a3:46:
4d:03:78:a9:3c:4e:66:d6:b7:b5:90:4e:21:fa:2d:dc:28:30:
97:b3:2e:bc:fd:23:51:b8:6e:c6:83:0c:cd:e2:81:be:28:a5:
10:10:2a:24:28:e2:73:39:9f:6f:a3:d3:b4:c5:58:e0:94:fb:
e2:1d:d5:7e:cf:8b:76:16:0c:0d:52:eb:61:5b:c8:cc:0e:af:
2e:eb:a5:8e:c6:ec:64:bc:2b:00:a8:c4:a2:2d:7d:fc:ee:0c:
62:ef:13:99:fa:18:90:c3:90:0e:38:b7:8f:5e:79:da:dd:3c:
56:83:b1:ad:d1:95:c1:b7:e8:13:1c:e6:11:7e:31:76:dc:d8:
d0:ce:e2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:23:00 2025 by rpki-client