Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa
File: iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa (raw, json)
Hash identifier: GfiW21oyJHRpJ2RiePVt0wuNlZL5LHM/Gp8C0SkaZrY=
Subject key identifier: 89:1D:B1:86:CC:EB:86:EF:42:41:5F:48:97:0E:35:5A:DF:B3:09:1D
Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial: 01942369BAA0AB823A77B104FC4389CF68ED
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41424
IP address blocks: 89.207.240.0/21 maxlen: 21
89.207.240.0/24 maxlen: 24
89.207.241.0/24 maxlen: 24
89.207.244.0/24 maxlen: 24
89.207.247.0/24 maxlen: 24
193.41.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ba:a0:ab:82:3a:77:b1:04:fc:43:89:cf:68:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=891db186cceb86ef42415f48970e355adfb3091d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:3a:42:04:d3:94:af:13:53:fb:54:ce:65:
f9:89:4c:21:78:fd:3e:15:c5:0f:e2:df:3a:b0:db:
0f:3a:25:35:d2:18:ad:ff:62:18:86:b8:6f:c9:bb:
19:ca:7d:04:f2:64:eb:08:68:97:b3:18:8b:e0:ba:
3c:9c:e6:5f:3f:d4:38:21:1a:79:64:53:2b:15:8d:
f3:36:27:a4:eb:ed:11:3d:03:f2:94:32:4b:ee:b8:
a7:70:c6:e1:8c:5c:e2:20:dc:54:29:76:16:df:2c:
46:cd:e0:5f:57:27:22:81:d5:1f:15:00:46:96:d1:
19:7d:f7:14:a7:52:8b:fc:80:45:d3:a0:bc:57:79:
6f:e0:d4:c0:a9:c4:e0:c1:c8:32:12:a0:1c:68:29:
0f:21:7d:a8:4a:5e:9a:f4:ba:37:b1:6e:51:6b:48:
98:13:06:cd:3a:84:ea:90:c8:c5:0f:81:e9:9c:14:
9b:fc:e7:58:ff:48:6d:b8:75:9b:1b:cc:3e:e5:68:
52:2c:92:63:09:80:17:3e:00:1c:e8:48:e5:c4:ff:
0d:49:44:ca:f2:c9:9e:d3:c8:f3:0f:c2:1f:90:f6:
fb:f1:72:c9:18:b2:67:f9:80:94:f0:fd:67:1f:0f:
99:08:75:de:ba:cf:7e:ce:dd:f5:73:05:40:37:51:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:B1:86:CC:EB:86:EF:42:41:5F:48:97:0E:35:5A:DF:B3:09:1D
X509v3 Authority Key Identifier:
keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.240.0/21
193.41.33.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a5:dd:fb:5d:63:bf:0e:e9:1d:b8:27:39:92:4f:c2:78:91:
d3:13:03:b7:80:da:58:e7:47:8d:a6:e1:0b:e4:b6:19:82:0e:
7e:d7:5a:6a:2f:cf:4e:e9:04:65:04:2a:71:1d:30:11:8c:4e:
0a:bd:d1:0f:e5:f4:88:31:f2:00:08:ec:46:20:d6:59:54:18:
6d:1f:94:36:66:63:c5:1d:95:3d:02:2b:eb:20:87:2a:76:c5:
7f:35:84:36:8e:81:14:4f:1c:7d:1d:50:57:e3:db:cb:07:4e:
cf:9e:16:f1:df:81:b5:b1:84:61:08:9e:58:cc:4c:67:7f:28:
6d:e9:cc:b6:f4:d2:98:61:1b:53:fc:c9:b6:b2:d0:0e:91:17:
4d:34:ad:ee:41:a5:8a:50:3e:30:b9:1a:66:a7:83:1f:15:aa:
20:64:30:bb:f9:e1:20:33:ec:4e:94:ec:e4:ba:80:e2:d9:24:
d6:d6:62:a7:82:08:6a:26:41:cf:1c:0e:3a:4f:15:cc:c4:37:
81:3f:69:f8:de:1b:fb:ea:ca:70:15:f0:f1:82:e4:d6:f8:3d:
ff:c2:d9:b1:a1:f5:62:45:4a:ca:0d:d9:7e:48:dc:f6:2e:f7:
ab:9b:29:20:66:82:94:47:18:dc:c2:80:02:29:60:b2:61:e8:
f3:cb:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net