Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Doi8954JkwuTbRk7l7z7MWvXF_A.roa
File: Doi8954JkwuTbRk7l7z7MWvXF_A.roa (raw, json)
Hash identifier: 1SN8xKmw05zImV11ejr3D6+R/d0bV1TQfj9MJ74QVE0=
Subject key identifier: 0E:88:BC:F7:9E:09:93:0B:93:6D:19:3B:97:BC:FB:31:6B:D7:17:F0
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B55FF637FF9F2C328BC6D2C948F195
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Doi8954JkwuTbRk7l7z7MWvXF_A.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 89.23.114.0/24 maxlen: 24
2a11:91c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5f:f6:37:ff:9f:2c:32:8b:c6:d2:c9:48:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e88bcf79e09930b936d193b97bcfb316bd717f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:ef:a0:3c:c6:4e:57:d3:39:0e:21:fe:6b:
a8:ba:f2:9a:0b:55:b0:c5:4f:b3:b1:40:4b:17:4f:
4e:96:c1:fe:8c:6b:f6:f9:de:6a:ce:31:09:63:9a:
de:ef:c4:82:b5:8a:3f:3a:cc:9e:ed:cf:f5:35:f9:
14:0d:08:80:2f:19:8a:5f:81:2c:a6:d5:d6:91:da:
80:3d:26:8f:ae:27:fc:7c:8f:4b:3b:6d:06:fb:bf:
46:67:7a:93:8e:e1:bc:f7:e9:a5:f4:c6:cc:96:a0:
25:3e:4c:53:75:eb:03:e8:a9:fa:4c:4e:0b:71:c2:
90:f7:77:3c:0c:1b:6b:b3:db:1c:56:cd:e9:44:e2:
4c:3d:5b:11:da:80:e9:8c:63:36:d0:22:6b:9f:f6:
60:88:97:88:31:71:b8:5a:cb:ac:8d:01:fb:ce:83:
ff:10:06:d6:22:d0:c6:c3:76:d2:72:da:95:e6:cc:
79:45:03:d5:9b:18:68:82:be:46:f2:35:7d:4e:6d:
95:d2:05:49:64:91:df:1a:57:f1:3e:d9:e0:27:6f:
a2:db:12:7d:cd:37:44:72:70:04:4a:47:49:34:e9:
56:ad:99:d6:3a:ed:35:84:b8:91:3a:40:3b:39:f8:
66:57:0a:60:38:4c:14:db:a8:64:86:f0:39:3a:7e:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:BC:F7:9E:09:93:0B:93:6D:19:3B:97:BC:FB:31:6B:D7:17:F0
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Doi8954JkwuTbRk7l7z7MWvXF_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.114.0/24
IPv6:
2a11:91c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:ce:6a:3f:dc:c8:b2:bf:06:2a:19:15:69:04:4e:66:2c:ed:
53:8e:ff:fd:59:40:ac:7c:ea:01:18:9a:7e:e9:29:80:53:f5:
d1:ba:d8:b5:02:9d:0c:81:70:3b:db:62:13:4d:30:6e:14:86:
1e:1a:87:da:5b:1c:67:da:43:05:35:c1:2a:32:f0:3e:38:30:
c5:19:d2:fa:5e:59:c5:37:3c:cf:bd:ed:43:7e:9c:48:c4:36:
43:88:94:75:88:c9:72:11:e5:46:31:30:8e:fe:12:7a:c1:b6:
80:6e:9b:0f:af:21:52:3d:3d:61:ba:01:97:54:af:74:39:30:
c6:99:d6:9d:36:b4:79:02:04:c8:64:62:74:81:cd:7a:12:0d:
59:d7:77:23:7a:47:a7:63:8a:a2:f7:ee:bd:a1:95:e6:9a:c7:
c4:98:1a:aa:8f:96:4a:68:44:ba:9a:91:7b:ce:5a:95:f3:3d:
35:c1:eb:55:c2:a2:2c:8a:50:c7:21:d0:d3:cf:b2:3c:0f:1d:
c6:da:0b:c7:9c:8a:19:f9:0d:87:30:90:19:74:66:a2:03:83:
20:95:1b:9e:2a:5c:7d:ed:1a:10:df:61:d6:9d:63:6c:03:78:
69:10:22:f5:57:df:32:10:d8:3c:5b:0e:f9:6f:7b:eb:35:13:
68:4d:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:09 2025 by rpki-client