Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SJurdP8XjT1Iwk8vwpoxyrsB9ts.roa
File: SJurdP8XjT1Iwk8vwpoxyrsB9ts.roa (raw, json)
Hash identifier: dIANO55OePJP6VZs03jA8FhdKYO/X1nbSo/1t6JG6iQ=
Subject key identifier: 48:9B:AB:74:FF:17:8D:3D:48:C2:4F:2F:C2:9A:31:CA:BB:01:F6:DB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01961FDFA2BD15A5E20D789EBC0AEC60998F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SJurdP8XjT1Iwk8vwpoxyrsB9ts.roa
Signing time: Thu 10 Apr 2025 13:24:31 +0000
ROA not before: Thu 10 Apr 2025 13:24:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 89.47.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:df:a2:bd:15:a5:e2:0d:78:9e:bc:0a:ec:60:99:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 10 13:24:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=489bab74ff178d3d48c24f2fc29a31cabb01f6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:f9:3c:f3:5e:82:90:d4:bb:9a:12:57:43:
e1:c1:13:26:00:68:ce:b0:42:d5:5d:44:c5:a4:69:
16:60:83:99:5e:d2:8c:61:fd:23:23:76:c2:1c:b7:
e8:f0:05:5b:6f:f6:ec:01:48:eb:a0:dc:ae:2c:4d:
c8:8c:5c:b1:d9:ae:24:79:9c:31:46:1b:0b:cf:83:
fb:86:dc:6c:5b:89:7b:1b:f6:80:8b:15:cf:0e:f2:
b4:9a:28:53:20:3c:69:d8:83:00:bd:95:4e:cc:5a:
fb:79:5d:f6:6d:79:92:d4:ae:b5:92:4e:15:12:ca:
37:e5:08:91:1f:77:63:65:ad:dd:95:3f:f7:58:0a:
5e:5c:3e:eb:1a:88:8a:ed:e6:bd:23:ed:db:73:78:
46:39:63:3c:ab:0c:67:64:e6:19:c7:87:76:89:70:
ff:2d:e9:35:a1:5c:27:fc:f6:37:cf:29:32:f7:c1:
d6:de:72:e7:fc:f1:68:6b:f7:c7:f7:0c:2e:cf:79:
b4:31:6e:2d:71:a5:b6:80:5e:55:a9:39:02:70:45:
66:da:bb:43:f4:5b:d1:dd:b4:d4:b5:fe:5d:1c:fb:
9c:f0:d3:a2:8c:26:93:b3:4a:16:a0:5f:f2:99:86:
29:70:1a:e6:75:08:54:91:77:d0:14:21:cd:4a:8e:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:AB:74:FF:17:8D:3D:48:C2:4F:2F:C2:9A:31:CA:BB:01:F6:DB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SJurdP8XjT1Iwk8vwpoxyrsB9ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.100.0/24
Signature Algorithm: sha256WithRSAEncryption
43:95:fc:5a:4f:a0:6f:8c:4c:c7:cd:82:b0:7a:7c:be:ae:4a:
b7:81:d1:c0:9b:6f:40:ea:33:de:e8:da:39:f2:de:bd:19:02:
48:2e:61:ef:64:6c:d9:72:a2:ec:57:bf:36:b2:16:44:50:76:
7b:fd:f5:73:12:05:da:4d:78:2c:58:a1:72:22:cf:4a:bd:ff:
f9:41:fe:ca:9a:f4:4e:34:b0:7b:2f:90:c0:b2:ed:15:30:f3:
55:ee:67:79:cb:52:1a:b6:95:82:10:7b:a4:91:52:b9:40:66:
50:80:8d:08:4f:65:d9:27:31:f4:e5:c7:7e:a4:18:07:4a:1f:
32:9a:75:4f:1c:70:70:c8:3e:d7:b2:4f:8d:6f:81:f0:53:9e:
74:b3:f2:c8:eb:4f:0d:15:ae:d4:4a:b4:b9:8f:c1:9a:60:00:
53:91:7f:47:71:ba:29:ff:79:64:0f:55:5e:ee:d7:1b:ee:07:
5d:58:52:8b:75:01:43:46:87:aa:e0:3d:25:39:f6:3c:2f:5e:
5f:b9:af:97:39:0d:cc:a9:31:a5:01:f3:76:d1:68:d1:47:22:
99:bc:bb:35:84:70:69:a3:0f:15:d7:5b:10:5f:fa:14:17:77:
6a:d2:e8:b2:0a:b6:19:1c:8b:6a:61:78:05:8b:de:5b:49:77:
0c:cc:04:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net