Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/7wCIILVV_KizMvEXiqEvvxC6Jr4.roa
File: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (raw, json)
Hash identifier: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=
Subject key identifier: EF:00:88:20:B5:55:FC:A8:B3:32:F1:17:8A:A1:2F:BF:10:BA:26:BE
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C768E716B91A134C83FB0FDCFAF42
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/7wCIILVV_KizMvEXiqEvvxC6Jr4.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208300
IP address blocks: 89.248.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:76:8e:71:6b:91:a1:34:c8:3f:b0:fd:cf:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef008820b555fca8b332f1178aa12fbf10ba26be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:db:65:13:ba:18:d9:f7:e2:27:39:2c:36:
fb:59:a5:43:d1:38:80:c5:1b:c7:1f:02:d1:7f:30:
9f:c3:c2:a2:2a:ad:b2:2d:9a:b3:16:bc:a4:9b:3b:
cf:ed:25:df:24:05:24:f5:03:18:d9:1c:41:8c:cb:
ce:6c:7d:13:7b:44:34:05:da:6c:69:97:6c:60:fe:
70:15:94:cd:7b:ca:5e:97:43:b1:8b:62:f9:b8:e2:
d7:5f:82:c2:7b:93:ec:2b:e6:c0:3e:22:5b:fc:94:
38:75:44:b6:4c:9c:78:10:d0:72:65:96:ca:ef:80:
62:83:df:dd:a3:a4:82:83:2c:ac:c2:2b:35:2f:2b:
92:b7:4d:17:75:bb:98:df:0e:6e:8b:11:a2:db:35:
9e:37:b9:77:c8:f4:8e:ab:0f:2f:40:7b:35:58:76:
ea:ea:e3:24:5d:a8:9f:87:66:22:e3:e9:9a:f9:8d:
1e:02:b9:63:0e:55:3b:9e:78:93:91:b3:db:72:69:
34:80:51:4b:c8:ec:4a:a3:4a:0b:50:ef:6f:26:7b:
2d:9c:f1:5c:5b:7e:27:a4:c3:63:15:ff:6e:bb:16:
40:9b:7d:08:ff:65:9c:4d:7b:ee:b3:28:89:bf:06:
81:f4:6e:60:31:bc:69:d5:d1:da:7a:2b:86:81:6d:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:88:20:B5:55:FC:A8:B3:32:F1:17:8A:A1:2F:BF:10:BA:26:BE
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/7wCIILVV_KizMvEXiqEvvxC6Jr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.231.0/24
Signature Algorithm: sha256WithRSAEncryption
13:28:d1:41:21:d3:3c:e7:55:e8:d7:a0:18:28:c8:79:23:ab:
80:47:95:36:6b:99:2f:34:f1:0d:66:08:50:0e:a4:a3:a3:34:
2f:8e:bb:c9:9c:00:4c:84:e9:2f:3c:1e:22:06:2d:87:9e:44:
b5:eb:16:50:43:98:fe:d6:75:32:6b:3e:4f:0d:3b:1b:6a:01:
3e:d7:29:7a:95:10:70:c8:ae:fc:34:8d:0c:e3:99:ad:69:79:
e1:24:ff:85:d1:b4:52:74:df:bf:f8:38:ca:4f:3a:cd:c4:2c:
6e:2a:d9:52:3a:64:54:2d:ed:f1:f4:85:98:60:42:5e:b7:61:
a9:21:ae:8f:c5:c9:49:73:10:13:35:20:49:15:ec:d3:16:ea:
0f:7d:31:4a:86:46:07:61:49:4c:20:3a:4a:1d:2e:45:37:1f:
da:1e:3c:9e:a2:b0:ed:db:7e:2a:df:e7:90:87:97:15:c1:72:
ee:ea:61:62:e5:b3:8d:34:48:c7:8f:c6:95:fc:67:bd:3f:90:
97:d6:67:05:6d:82:05:d4:bb:02:12:fc:af:d9:06:64:4a:32:
2a:c6:f7:71:ba:20:f0:1c:18:aa:bf:d7:fd:c6:44:fb:07:73:
c5:75:ec:ac:aa:6b:fd:a5:dc:b1:2e:1c:86:41:56:14:a1:4a:
60:98:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net