Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/3FnVY4sBG3BUNdCMlG69JrkCRk4.roa
File: 3FnVY4sBG3BUNdCMlG69JrkCRk4.roa (raw, json)
Hash identifier: xbgs2co1eheJ2l8YrvPyfXeU2aKPVWbDIStArstZGzA=
Subject key identifier: DC:59:D5:63:8B:01:1B:70:54:35:D0:8C:94:6E:BD:26:B9:02:46:4E
Certificate issuer: /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial: 019425216D242C50F68EEBB2CD5E59DB95AE
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/3FnVY4sBG3BUNdCMlG69JrkCRk4.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39452
IP address blocks: 89.150.0.0/23 maxlen: 23
89.150.0.0/24 maxlen: 24
89.150.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6d:24:2c:50:f6:8e:eb:b2:cd:5e:59:db:95:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc59d5638b011b705435d08c946ebd26b902464e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:11:8f:24:92:dd:eb:ad:dd:81:38:ac:93:
cb:32:f4:a7:43:a4:70:23:f9:73:19:ce:1c:06:08:
1a:d6:09:11:e3:3d:c5:27:98:49:de:a9:da:f9:28:
7b:42:30:6d:ab:21:3f:5c:ed:02:8b:0d:ab:c5:b8:
85:72:28:84:27:51:9f:b1:16:94:d7:58:f8:c4:35:
05:bb:79:e6:c6:72:45:fe:e1:d3:c2:8f:30:d5:af:
f7:0d:c8:31:6b:2b:5e:93:ec:31:ad:03:d9:8d:63:
63:7f:48:cf:dc:0d:34:52:32:18:f6:e7:31:b4:97:
9e:5a:c0:7a:e3:09:5c:be:ab:7a:b0:83:70:0e:b8:
93:83:05:db:12:c2:c4:7d:df:cc:54:a7:9f:17:ca:
6b:8f:d0:38:fc:60:52:12:c6:ab:e3:ab:1f:58:07:
de:be:04:61:fd:f7:30:d4:96:e0:88:79:b6:fe:35:
48:57:33:66:95:d6:9a:86:1c:03:9a:39:aa:88:8c:
de:3b:c2:0a:f8:0f:47:42:74:55:dc:d8:45:c8:41:
2c:4b:b8:aa:3f:1b:e8:05:bf:6d:04:11:d5:99:9b:
1c:f6:52:11:5a:97:34:2a:7e:32:a5:0a:3a:ec:20:
c2:fb:3e:72:d6:24:80:d2:bc:ff:98:14:65:13:2f:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:D5:63:8B:01:1B:70:54:35:D0:8C:94:6E:BD:26:B9:02:46:4E
X509v3 Authority Key Identifier:
keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/3FnVY4sBG3BUNdCMlG69JrkCRk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.0.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:ea:e6:4e:d3:66:b6:f3:25:75:66:24:60:b8:23:7e:c2:91:
d1:a6:f7:53:6e:6d:80:dd:02:b6:02:23:c0:9a:78:1d:54:01:
03:7a:48:46:7b:fb:95:9b:d7:69:4d:9b:51:6d:d4:ba:26:d2:
66:f2:2a:42:02:b3:f3:37:d8:56:5f:32:0e:ef:43:36:73:c1:
3f:b7:e3:97:35:93:68:c3:6d:c1:5b:f0:95:12:ff:41:06:c3:
77:43:15:87:15:4e:d8:82:90:97:77:90:98:05:1d:22:f8:76:
a9:85:99:a1:93:94:31:f1:eb:46:32:87:30:e5:ce:6d:85:af:
da:3b:e6:1e:4d:69:df:ec:01:f3:c0:22:30:5f:5f:69:e7:ef:
5c:3c:cc:ec:39:60:e4:4b:b7:8b:79:45:87:57:83:8a:07:8f:
73:fc:41:d6:0f:0c:22:ac:20:45:bd:f2:ec:4a:be:64:b3:11:
94:0a:7a:d1:1a:10:96:d0:65:61:25:8f:58:14:00:a2:84:38:
e1:3b:cb:d0:5f:62:ad:13:e8:5c:88:78:c9:d4:58:cb:e0:89:
f8:66:e0:56:76:3b:45:22:ce:c9:4c:08:0e:a9:fd:b9:af:f3:
05:d1:cf:0f:ed:9f:98:ed:df:95:f2:0b:e3:22:a2:c6:33:97:
a6:b0:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net