Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/stSrirvZLoDxIAPnmlfB0EhK5PA.roa
File: stSrirvZLoDxIAPnmlfB0EhK5PA.roa (raw, json)
Hash identifier: Motxp5oyhMRpNDQnD5sOGrej0tXq+NZwlWTTnbPBjg0=
Subject key identifier: B2:D4:AB:8A:BB:D9:2E:80:F1:20:03:E7:9A:57:C1:D0:48:4A:E4:F0
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C8A4EE1CAAC714752270570A013E8
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/stSrirvZLoDxIAPnmlfB0EhK5PA.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214857
IP address blocks: 89.42.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8a:4e:e1:ca:ac:71:47:52:27:05:70:a0:13:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2d4ab8abbd92e80f12003e79a57c1d0484ae4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:bb:a8:d7:0f:01:ab:e1:27:49:38:8d:49:
96:76:97:53:ad:7c:8c:d5:54:81:11:09:06:0a:03:
11:31:23:f3:fc:3a:27:da:e4:79:0d:da:03:08:fb:
a1:ed:d1:f5:e7:f4:da:a6:28:c4:55:71:02:1b:23:
ba:ca:ca:13:76:ce:5c:e2:06:c6:6f:80:8e:b4:4e:
2d:c7:fc:dc:f6:95:4a:b9:f1:43:97:a7:25:a3:30:
2a:18:04:63:e5:c3:e3:dc:fe:e4:8e:64:cb:6f:70:
f1:b9:d9:ef:84:3b:65:4b:62:c1:c1:cd:1a:91:41:
04:b0:ef:c8:00:46:ed:0e:88:6f:c4:dd:74:02:74:
90:a6:81:18:9b:b9:8f:33:f8:c7:c8:c3:59:b8:9b:
de:c6:da:67:cc:96:6e:e6:f2:b9:6c:48:2e:93:a5:
96:cb:7d:96:87:db:85:62:17:32:33:bf:24:66:42:
3f:20:55:9d:ca:7f:d0:29:ba:24:ab:3d:6e:2b:eb:
b7:5d:3a:bb:b0:37:db:0d:03:83:43:37:41:a1:d2:
64:01:1c:91:10:96:de:84:50:64:c3:91:0b:a5:6f:
9c:3b:64:e0:4f:c6:a6:4e:b7:68:df:91:ae:26:45:
ad:c6:0c:30:e4:7e:a9:40:14:bd:a7:55:75:88:37:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:AB:8A:BB:D9:2E:80:F1:20:03:E7:9A:57:C1:D0:48:4A:E4:F0
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/stSrirvZLoDxIAPnmlfB0EhK5PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b6:48:4e:11:3b:26:e7:f6:43:26:b7:0a:68:64:b3:df:fd:
b8:d7:99:74:cf:e4:ff:56:e4:8b:45:76:42:34:b3:cb:25:43:
fb:c7:6a:f7:42:41:ea:52:40:2b:fc:4b:77:05:c7:5c:ff:38:
81:6f:9a:d8:dd:d8:f6:ef:b2:61:10:44:91:2f:c6:a8:3f:14:
8f:a9:a2:f0:10:f4:31:93:e7:f7:e9:b3:8c:ec:ec:59:07:8b:
eb:60:65:0b:2b:5d:ce:3a:5f:a9:af:d2:3f:b3:1b:8e:a0:3d:
9f:51:dc:c6:21:6d:2e:ba:b6:92:7c:6b:12:4e:3b:6d:f3:fd:
69:08:a2:12:17:8e:bf:e6:31:fa:26:e2:63:78:01:02:f1:cf:
1d:3c:6b:05:8d:96:39:bd:0a:4b:27:43:bb:44:ad:b6:b8:ff:
e4:2d:dc:ba:70:bd:11:10:0b:ec:06:bb:a2:02:50:31:e2:53:
31:23:2e:7e:82:25:0f:73:49:f9:72:dd:35:9c:39:a3:be:b6:
18:d2:36:a6:fb:28:87:fe:02:47:75:ce:5f:69:fc:33:71:bf:
04:0d:1e:fd:da:46:93:72:22:0f:5e:12:ea:df:8d:d4:bb:70:
0f:ca:c2:79:91:2f:e4:d0:07:4a:ce:75:df:9f:f8:1e:50:80:
a1:41:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:12 2025 by rpki-client on console.sobornost.net