Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/AEYI5GXnOCZSQRl7iJM68FezRrY.roa
File: AEYI5GXnOCZSQRl7iJM68FezRrY.roa (raw, json)
Hash identifier: jtYBPy2LfggSo3nP2Uk2oyBCmGFL6Mcjz2kn85j21qc=
Subject key identifier: 00:46:08:E4:65:E7:38:26:52:41:19:7B:88:93:3A:F0:57:B3:46:B6
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C8441FEDA6750D24EEC641F6FA903
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/AEYI5GXnOCZSQRl7iJM68FezRrY.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 89.44.243.0/24 maxlen: 24
109.122.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:84:41:fe:da:67:50:d2:4e:ec:64:1f:6f:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004608e465e738265241197b88933af057b346b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:8a:52:38:b5:46:b8:7f:8b:4c:a4:59:5b:
fd:03:c1:b9:68:55:41:b5:ff:38:ac:7f:dd:1a:9e:
1f:99:4b:61:62:08:c0:33:0c:88:9c:65:c8:71:df:
93:17:b2:2e:51:87:22:bb:c0:d6:0c:1c:40:33:13:
4d:75:ef:23:5e:5c:43:78:26:ff:66:a7:c3:d0:77:
06:71:ae:98:03:0e:62:e0:f6:60:ab:8f:7c:13:6f:
5e:e4:8a:06:06:75:79:d1:39:93:bd:b9:73:e9:ef:
7c:62:22:60:e7:d1:6a:7f:25:37:36:8d:31:ef:6b:
7f:cc:14:64:e5:d0:2d:d8:a2:47:6a:da:c2:f0:b5:
af:8a:a0:4f:f6:14:70:c1:67:fa:81:ce:f4:2c:09:
2a:8d:cd:c3:ab:70:d3:61:dc:df:29:fe:dc:f1:b6:
e2:03:da:cc:5c:99:17:82:33:cd:94:69:5e:b6:c4:
a5:b9:68:eb:57:2d:cd:6d:2f:5f:f0:69:91:d1:27:
82:55:8e:45:0a:de:7d:7d:9b:f0:cf:d8:3a:f2:5f:
58:2a:12:41:ce:14:1d:ad:48:c7:3b:c2:74:1f:6c:
aa:66:7d:38:da:eb:b0:a4:b3:f8:5f:1b:c9:c4:b2:
c4:2d:7e:2b:13:26:e9:93:53:09:a2:93:4c:4a:32:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:08:E4:65:E7:38:26:52:41:19:7B:88:93:3A:F0:57:B3:46:B6
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/AEYI5GXnOCZSQRl7iJM68FezRrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.243.0/24
109.122.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c4:82:ff:03:41:4a:dd:60:f9:d4:4d:1b:b2:1a:de:ba:35:
46:54:30:9c:9d:49:b1:32:ab:e5:5f:e4:8b:6c:6c:fb:43:f4:
a9:ae:fc:5a:18:27:f0:3c:9f:95:80:70:20:e7:7e:eb:7a:01:
44:27:66:9f:66:75:42:41:54:30:8e:85:d8:e5:9a:f1:b5:b9:
01:76:e5:80:1d:a3:99:82:36:6c:6e:3e:a3:95:73:0a:87:7a:
ec:1a:9f:d5:ab:fd:3b:83:13:d8:6e:e5:9a:49:ba:b9:6b:d0:
de:45:23:1d:00:74:8e:e5:e5:e3:cb:99:e3:43:f1:5a:19:fe:
ae:d8:fe:c2:a7:1a:59:53:e9:13:c2:22:1b:24:45:70:36:2a:
ea:cd:30:ed:4c:64:c2:c6:bd:8c:95:1a:fe:fc:bc:1b:c7:80:
f3:06:d5:fe:35:d2:da:5a:63:e5:b9:28:cc:66:a2:5e:c9:a4:
57:c2:a5:04:18:06:a5:c1:7a:06:4b:41:af:ec:8c:67:8d:4b:
56:a9:77:9e:af:dd:04:1a:43:52:c3:3e:68:d3:66:34:a6:5d:
27:64:83:8f:e5:08:59:5c:50:2d:f8:cc:e9:c8:63:7b:f4:09:
22:12:ae:51:9f:7f:c6:3c:d9:23:6f:4f:8c:01:31:1e:2b:ca:
e6:62:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:12 2025 by rpki-client on console.sobornost.net