Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/QD8rfcXrFLBv5ho4olBdPC1p818.roa
File: QD8rfcXrFLBv5ho4olBdPC1p818.roa (raw, json)
Hash identifier: dkERnkYt+qFsFa7JHkV0epWToLTcYSQMGJn1mguBlCM=
Subject key identifier: 40:3F:2B:7D:C5:EB:14:B0:6F:E6:1A:38:A2:50:5D:3C:2D:69:F3:5F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B573B550CDE7B0639C90794A4A5E1E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/QD8rfcXrFLBv5ho4olBdPC1p818.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 89.23.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:73:b5:50:cd:e7:b0:63:9c:90:79:4a:4a:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=403f2b7dc5eb14b06fe61a38a2505d3c2d69f35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:41:bc:44:14:67:ca:d1:01:83:74:70:c8:
40:1a:37:1f:7c:c8:07:cf:b4:f9:e7:d7:90:c4:24:
08:1a:71:a9:78:54:9e:f5:70:42:47:0d:77:f0:6a:
9f:35:7d:59:09:0e:5a:6c:da:00:5b:1e:2d:db:3c:
7e:82:2b:67:f0:a8:81:00:bc:1b:9d:fc:ef:63:17:
ef:17:49:f8:69:75:ba:b2:06:f0:62:0d:91:b5:23:
15:00:39:bd:a0:5b:24:17:d7:c4:7f:5c:31:60:5a:
58:6b:24:f3:c7:14:0e:a1:0f:96:86:18:01:31:20:
6c:a2:03:88:d7:70:55:71:c3:0d:fd:ef:c2:fc:f1:
02:30:19:0c:3d:15:18:d4:42:20:38:f9:4c:0e:07:
f3:be:2f:36:68:95:a6:1b:ed:c7:96:0f:84:e6:d7:
57:44:9e:b0:c5:0d:88:83:3f:59:fa:7c:f8:5c:97:
42:a1:b2:16:8b:7a:59:5f:66:82:7d:88:e5:04:b4:
a4:98:05:3e:43:1b:a1:d5:e6:64:82:f9:84:1f:13:
4a:f9:b0:47:24:59:d4:d5:47:8c:91:e9:14:25:22:
e9:dc:2d:25:14:d2:79:49:d5:fe:ee:5d:e5:22:d7:
57:8e:de:c1:d9:c2:c8:66:66:01:be:01:6e:42:b5:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:2B:7D:C5:EB:14:B0:6F:E6:1A:38:A2:50:5D:3C:2D:69:F3:5F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/QD8rfcXrFLBv5ho4olBdPC1p818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:99:2b:98:ee:f5:f6:ab:74:97:03:53:38:83:cd:87:88:0c:
78:fd:5b:8a:93:a1:ed:82:0b:65:a6:37:f0:f0:96:36:53:e6:
96:93:14:da:8d:70:57:61:a4:1c:0b:06:1b:4a:61:40:37:29:
ea:d6:4b:56:37:21:c1:54:f6:a9:ce:4f:97:f6:33:d5:cd:73:
6f:85:c5:96:8d:13:d7:9d:e6:19:76:f3:75:38:1f:94:74:24:
27:a2:a7:5a:71:e4:88:56:7e:fa:1d:97:a7:59:45:5a:6e:57:
4a:bc:b0:03:c5:20:44:ed:1e:b6:bc:f7:8b:aa:e5:99:8b:fd:
ee:cd:24:11:8f:76:2d:c8:9f:d1:d5:25:3d:01:00:7c:36:42:
d8:52:2a:a3:7f:2b:a4:80:c1:59:6d:84:7d:8f:d6:e7:b9:9d:
ec:4a:aa:92:82:35:d2:f0:e6:cb:93:51:9b:4f:7a:83:e5:a7:
71:de:cd:4f:d3:28:51:bc:5d:42:05:56:f5:22:90:c6:52:ac:
77:66:05:0e:47:f4:5e:44:d2:93:35:08:5b:b7:1c:6e:5d:35:
cd:b7:2c:74:c6:d1:58:62:65:d2:67:5c:20:6c:13:69:f6:5c:
cc:b1:dd:64:4f:20:69:56:a7:d8:ad:5f:d2:84:82:12:8f:36:
14:68:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:18 2025 by rpki-client