Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa
File: ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa (raw, json)
Hash identifier: dL+5O6eKdQJWgkq0JqtkXhyJzAf/MU7XQ0/GDtElRTc=
Subject key identifier: A6:1D:85:15:9F:40:50:06:39:7F:C1:E4:25:B9:3F:DE:0F:56:93:CC
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019423D72A83EB524753CD5FB05A62A386CB
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203507
IP address blocks: 89.105.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2a:83:eb:52:47:53:cd:5f:b0:5a:62:a3:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a61d85159f405006397fc1e425b93fde0f5693cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:05:4c:62:f2:48:47:05:44:a3:e6:de:17:
d8:b9:22:c9:e2:72:a5:7f:cd:ca:e1:d2:39:51:f8:
c5:81:31:f9:4d:0d:6f:4f:40:5b:86:82:18:4b:ac:
33:a1:0f:fd:59:9b:76:64:55:ca:f4:3c:f8:ee:8d:
9d:01:b8:10:25:56:94:b3:74:e2:99:4c:b7:19:14:
9c:1c:4e:7e:52:0c:f8:d0:51:61:23:3a:87:a9:63:
25:e2:93:95:72:47:ba:2d:52:c1:1e:1b:7f:96:64:
af:bd:59:20:fd:fb:64:ed:f6:de:76:7c:12:07:43:
c1:00:c2:f8:b1:56:96:bc:f2:c4:0b:20:80:fe:97:
c2:a2:ca:72:41:33:a7:eb:e3:c4:ae:3e:e6:ae:31:
46:cc:5c:c5:be:a5:e7:be:de:85:f2:3b:e9:08:4f:
81:74:26:15:ce:69:d9:5c:e0:56:ea:f1:4d:bf:9a:
60:ac:11:69:0a:a5:68:2d:cb:36:bf:e5:91:0d:10:
f0:46:58:be:8e:4e:5e:2f:ae:31:ea:37:8e:89:49:
f2:fa:9a:22:0d:df:84:0f:06:48:91:06:32:32:ea:
ad:47:20:3a:37:43:5e:de:c6:6e:c6:a1:95:e3:80:
ca:83:de:93:b1:aa:38:6e:69:18:26:31:98:67:46:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:85:15:9F:40:50:06:39:7F:C1:E4:25:B9:3F:DE:0F:56:93:CC
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.213.0/24
Signature Algorithm: sha256WithRSAEncryption
96:40:59:ff:04:67:f7:54:28:46:2f:4c:55:58:2d:29:4d:ca:
d9:17:9b:9b:68:4d:f5:14:47:08:a9:12:f2:6e:38:e3:13:31:
e6:ac:d4:96:06:a0:66:8c:47:c3:e9:73:eb:f1:aa:bc:89:85:
4b:89:8e:0c:b3:0e:07:3c:6c:86:bb:ae:e3:02:cd:18:87:4f:
2a:b9:c8:43:67:0c:d6:94:23:9e:55:cc:1e:4b:fd:6c:6f:95:
15:39:11:fd:d7:b0:3c:4d:ae:d4:3c:ed:8a:86:3c:5c:96:ef:
56:af:f9:18:80:52:70:4d:21:4c:a3:4e:ad:c5:17:92:f5:3e:
b6:73:0d:88:2e:41:d7:8b:e0:8f:a5:43:8d:56:db:82:fd:8c:
ab:87:d8:53:e2:f9:30:ec:94:13:5f:67:aa:3c:78:c6:93:33:
0d:0d:d9:51:85:53:6d:3d:38:d2:a5:99:8a:45:bf:28:7e:53:
bb:02:ff:8d:95:ba:c6:05:6a:95:ef:fe:ac:fe:0e:be:d0:d6:
66:2d:19:99:15:b4:cf:90:18:1b:6c:37:f8:51:29:ce:6b:99:
85:e8:33:77:ec:33:17:a9:a9:bf:4e:79:8e:54:7c:09:7c:e2:
22:cc:33:41:e0:b9:81:bb:f6:e5:70:6f:97:2a:6b:87:ba:d9:
95:b6:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net