Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/pIiqmAhh4Efmjii00YcovJnqa0s.roa
File: pIiqmAhh4Efmjii00YcovJnqa0s.roa (raw, json)
Hash identifier: OMG9mB1P/OPHsZ0mJOPrtZjUwn7+m8UALiq+yKbfM8U=
Subject key identifier: A4:88:AA:98:08:61:E0:47:E6:8E:28:B4:D1:87:28:BC:99:EA:6B:4B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56E3EFB61CFE714AD1B92B6DFDF3C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/pIiqmAhh4Efmjii00YcovJnqa0s.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 89.23.103.0/24 maxlen: 24
89.23.107.0/24 maxlen: 24
89.23.108.0/24 maxlen: 24
89.23.113.0/24 maxlen: 24
185.39.204.0/24 maxlen: 24
185.39.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6e:3e:fb:61:cf:e7:14:ad:1b:92:b6:df:df:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a488aa980861e047e68e28b4d18728bc99ea6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:1d:c1:22:fd:b4:2c:03:cf:33:e5:4b:d4:
0c:98:e3:07:bf:14:49:a1:02:7f:28:ae:81:14:f5:
62:50:34:c7:24:07:f2:99:96:d2:a4:6d:a2:5a:77:
14:fd:ec:6e:d3:0b:7a:94:36:ee:ac:e4:d2:b5:5b:
6a:59:ec:a2:a0:e9:41:14:d0:f5:26:98:90:59:df:
b3:77:49:dc:94:84:d5:b6:68:79:cb:a3:ec:54:b3:
ff:6e:bc:28:d6:0a:ca:53:73:f0:d3:90:80:e9:3a:
52:cb:7e:38:98:0a:ba:90:53:04:02:9b:cf:5d:d7:
d8:9d:59:ca:23:4c:07:ac:3c:2a:0c:da:27:a5:9e:
6f:75:74:b6:4e:a4:e8:19:93:61:e5:6c:45:76:38:
91:dd:03:1a:01:55:6f:ca:e9:7d:59:8b:62:0d:c0:
98:ff:65:57:11:25:17:e0:05:1a:98:46:cc:8d:25:
17:88:70:f7:f4:c6:18:57:11:bd:1a:a5:83:83:c0:
33:3a:a6:4e:f0:df:5e:ec:28:91:65:71:2f:d6:35:
db:02:f0:fd:b6:d3:ba:90:29:91:cf:48:f2:83:65:
20:78:b7:b3:8b:24:55:94:69:ae:d2:57:00:b8:ee:
1a:43:3d:db:99:9b:a4:b8:1c:b6:15:a5:46:e6:f5:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:AA:98:08:61:E0:47:E6:8E:28:B4:D1:87:28:BC:99:EA:6B:4B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/pIiqmAhh4Efmjii00YcovJnqa0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.103.0/24
89.23.107.0-89.23.108.255
89.23.113.0/24
185.39.204.0/24
185.39.207.0/24
Signature Algorithm: sha256WithRSAEncryption
34:13:99:9c:07:86:c8:0e:b9:69:01:00:70:ba:88:97:ac:3e:
c9:f8:f9:ee:03:d6:fe:4e:fe:84:ba:e0:f8:3d:48:0e:c7:2f:
74:3b:6c:10:06:83:e8:b9:b4:4e:4a:93:1b:b7:da:d3:12:82:
de:ce:45:64:54:24:66:84:18:8f:3b:5a:f2:0f:bd:55:28:70:
91:b2:81:a2:63:3a:16:a5:bd:5a:59:f9:a6:51:b4:8e:b0:b0:
f3:c2:e2:99:f7:fd:70:f8:68:6b:47:70:6a:dd:95:b7:94:39:
7b:3c:f2:91:a1:46:ec:32:16:4a:7a:a5:b2:1b:38:71:75:f5:
3b:51:bd:11:ce:38:e9:69:0e:1d:1f:82:19:63:61:3c:2e:35:
26:29:e5:11:f1:9a:a1:83:19:f2:cb:bf:e7:30:b1:86:27:f2:
39:75:6a:8f:d0:09:f5:b2:08:a3:21:27:a3:a6:87:88:8a:03:
f5:57:9b:49:50:86:4f:da:de:74:2e:c1:2f:d7:4e:4d:ef:31:
17:47:04:a4:ee:d8:81:a2:9e:b0:e2:c7:e8:00:90:b6:ad:0e:
46:5b:96:f8:76:04:f0:14:48:0a:4b:ef:ce:33:2f:0b:72:d0:
ae:22:12:d8:00:58:9f:5d:2e:8a:68:63:62:fd:1d:6d:fb:fb:
63:22:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:38 2025 by rpki-client