Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/7PSM5IFwuDXaHWgLAIJqlZXkAa0.roa
File: 7PSM5IFwuDXaHWgLAIJqlZXkAa0.roa (raw, json)
Hash identifier: mkcchM+Sna+fQZQGVKkZD7IuN4FIDuXIPQjimiWRSvA=
Subject key identifier: EC:F4:8C:E4:81:70:B8:35:DA:1D:68:0B:00:82:6A:95:95:E4:01:AD
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B50FC07DCB705C4450CC9312638EFF19A
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/7PSM5IFwuDXaHWgLAIJqlZXkAa0.roa
Signing time: Sat 21 Oct 2023 06:46:16 +0000
ROA not before: Sat 21 Oct 2023 06:46:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 89.44.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:50:fc:07:dc:b7:05:c4:45:0c:c9:31:26:38:ef:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 21 06:46:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecf48ce48170b835da1d680b00826a9595e401ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fd:12:52:5f:84:45:47:39:67:93:4f:e4:bd:
cd:99:39:55:73:b8:4d:53:03:e2:62:0a:de:1e:4d:
6f:c8:47:a0:69:c4:e9:28:b0:c7:fe:1b:1b:f1:42:
4e:f6:48:44:40:0b:05:3c:b2:fc:6b:2a:2d:ca:54:
ec:d1:d6:bc:fe:66:9d:ab:b6:8a:05:96:65:c8:95:
2c:3c:75:fa:00:d5:2a:69:c2:fa:6b:f7:5c:c9:ab:
70:24:84:cd:9d:8b:8d:c0:23:1e:bc:79:63:b0:c1:
2c:4d:3f:2d:c3:78:4e:0c:4f:6d:14:7f:1b:57:fb:
51:59:c5:d9:ab:00:60:bf:a9:2a:6a:93:0e:54:72:
a3:25:04:52:13:66:19:f5:59:d2:e0:aa:4b:48:4c:
2b:d3:36:29:36:81:4b:5e:66:67:52:8e:60:d7:e3:
c5:d5:64:f7:d0:09:8f:92:fa:5f:9c:03:61:da:1e:
5a:ce:7a:e6:86:58:02:7f:d4:72:ae:99:c5:a6:22:
7c:25:71:b1:d4:dd:91:76:5a:9b:98:91:78:72:6a:
32:0a:c0:e5:29:bf:64:4f:7d:61:d5:8b:5c:59:d9:
3a:41:fd:bd:42:36:ae:a7:9f:65:6f:b1:f8:01:19:
4a:77:42:bc:5b:29:e1:8c:0c:f8:8e:32:08:75:c9:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:8C:E4:81:70:B8:35:DA:1D:68:0B:00:82:6A:95:95:E4:01:AD
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/7PSM5IFwuDXaHWgLAIJqlZXkAa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a1:8a:3f:e1:e1:0b:6b:46:96:51:40:6e:d9:f2:2e:99:57:
a9:99:06:26:84:e8:ef:5a:2a:07:87:f2:5b:c8:0b:ab:ac:46:
7c:41:cf:b3:ab:48:e4:f6:a5:fe:dc:57:ba:0b:7c:7b:76:dd:
ba:1d:ae:53:64:b8:d6:ec:96:b3:f8:1d:3e:06:90:10:6d:40:
a6:02:0f:d0:7c:51:52:b0:45:19:95:5a:0a:90:91:b8:43:5c:
1e:c0:45:20:19:59:ea:66:5b:c2:74:9e:18:09:72:12:a5:2b:
ae:a8:aa:71:32:31:9a:61:fc:57:15:8b:25:54:dd:55:50:08:
59:50:d1:28:9e:2e:23:69:72:db:07:3f:81:f1:d5:f1:62:a5:
fb:42:7a:25:44:7b:ce:d3:d4:45:e0:81:53:9a:b3:86:41:02:
a7:08:d9:09:89:8e:59:5e:18:68:15:7f:4d:d9:8d:94:22:7d:
5d:c1:c4:0d:1f:79:46:de:14:ad:ae:68:9f:02:64:9d:7c:d7:
70:f9:80:96:aa:0c:76:03:ef:8a:0b:e3:ad:ef:26:63:44:4a:
ce:1b:36:39:ac:db:bc:69:35:6b:b1:aa:4e:16:20:ee:1c:2b:
f3:38:3f:a2:54:86:c5:7a:52:51:5c:ba:f8:7c:4e:0d:b0:e9:
43:8d:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:14 2025 by rpki-client