Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/0l9O7XdrtoZ5DJm-OiE8PHu2Yqg.roa
File: 0l9O7XdrtoZ5DJm-OiE8PHu2Yqg.roa (raw, json)
Hash identifier: JBqsLSzjJjmYk5jpG/ysNVAs3n6pMbIqQNn+b2qZqQ4=
Subject key identifier: D2:5F:4E:ED:77:6B:B6:86:79:0C:99:BE:3A:21:3C:3C:7B:B6:62:A8
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018748A65A2E22981DD5442CF1FF8AA33F22
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/0l9O7XdrtoZ5DJm-OiE8PHu2Yqg.roa
Signing time: Mon 03 Apr 2023 19:44:34 +0000
ROA not before: Mon 03 Apr 2023 19:44:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 89.36.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:a6:5a:2e:22:98:1d:d5:44:2c:f1:ff:8a:a3:3f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 3 19:44:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d25f4eed776bb686790c99be3a213c3c7bb662a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:cf:98:ab:f6:45:6e:ac:74:4e:22:ba:cb:
d8:b0:ce:87:c9:b5:08:cc:d5:7d:aa:28:b6:b3:41:
fb:84:76:9f:90:9d:3f:99:e0:ed:5d:65:41:e7:fe:
40:c1:d3:51:99:78:03:b9:73:c7:45:78:cf:c8:03:
da:ee:b1:dd:7e:a6:68:eb:0c:a6:41:0a:90:14:90:
28:d0:e3:29:cf:6b:2a:a9:69:d5:f8:d4:1a:c6:1d:
26:bf:7e:df:0e:36:00:3a:0a:94:6f:45:88:34:55:
1a:f7:8e:32:b4:1f:58:12:36:1d:2e:82:b6:30:22:
ad:dd:6f:8c:e1:10:8c:ce:35:39:c3:d6:49:c5:29:
9b:00:1f:aa:8a:4f:2d:0f:b3:16:a5:ec:00:ab:a5:
2d:7a:70:bd:a9:5d:ba:09:03:d4:a5:4c:84:9b:f2:
15:0c:32:cd:32:10:48:a3:8f:49:28:b8:a2:50:58:
f8:93:43:60:3f:de:27:ab:44:dd:94:6f:45:4e:cb:
ea:56:63:8d:28:43:48:9b:ba:67:41:13:69:87:37:
30:b0:c7:96:fd:00:cc:c7:97:81:56:1a:ea:e2:5b:
0c:86:ba:5f:74:61:af:5c:20:b4:c7:6b:af:70:0d:
d0:d7:6c:d1:6e:f0:1e:56:34:c5:96:f5:c8:40:c8:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5F:4E:ED:77:6B:B6:86:79:0C:99:BE:3A:21:3C:3C:7B:B6:62:A8
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/0l9O7XdrtoZ5DJm-OiE8PHu2Yqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:69:9c:a9:c2:07:95:1e:9b:6b:49:80:4a:19:6f:8f:54:49:
e5:6b:0e:fd:4c:99:3a:29:c1:c4:94:03:0d:bb:9c:99:c8:ed:
48:2d:87:58:c0:56:46:5e:49:7d:4c:f8:b8:4a:58:c1:c0:7d:
07:52:67:33:3a:cc:24:6e:42:89:3f:ba:dc:53:43:d7:f0:87:
2e:d9:88:98:b1:2b:fd:13:cb:3c:0b:f6:f1:f7:a1:1d:07:f0:
32:03:ad:6c:1f:89:e0:cd:ee:7f:6f:b8:0b:00:d1:44:ee:98:
d8:98:28:76:d6:ff:ab:4f:dc:5e:c4:17:f2:08:0b:84:9c:7d:
c3:39:39:b0:89:f1:a9:d0:6b:19:ec:6e:72:12:e2:6f:10:07:
dc:f1:1d:64:69:d0:a3:8b:3d:26:0a:bb:99:15:28:55:35:68:
ed:24:ce:7f:a5:d9:72:31:43:60:a7:a5:0e:69:31:36:7c:8b:
9d:1b:9b:61:65:69:ad:91:04:35:44:d7:72:d4:a9:bd:ca:cc:
f5:a2:44:c7:3d:d8:94:68:93:72:1d:7e:a2:f8:24:81:c1:72:
42:69:36:0f:79:8d:d1:4a:52:36:1b:86:19:57:1c:51:a5:1c:
82:9e:c4:8d:9b:9e:fc:68:34:d0:26:04:e8:b5:66:5e:8b:e0:
5f:bf:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:32 2025 by rpki-client