Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/u0f9PxaQd0mAxa8Itc20HFbeP38.roa
File: u0f9PxaQd0mAxa8Itc20HFbeP38.roa (raw, json)
Hash identifier: rR/U5zUdn4BqglESZgdPbeQkSaKBK59VA33l+LC72ME=
Subject key identifier: BB:47:FD:3F:16:90:77:49:80:C5:AF:08:B5:CD:B4:1C:56:DE:3F:7F
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0194C33B3BBE404839ECA60AC3DB589D050F
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/u0f9PxaQd0mAxa8Itc20HFbeP38.roa
Signing time: Sat 01 Feb 2025 20:37:06 +0000
ROA not before: Sat 01 Feb 2025 20:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.150.49.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
188.94.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:3b:3b:be:40:48:39:ec:a6:0a:c3:db:58:9d:05:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Feb 1 20:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb47fd3f1690774980c5af08b5cdb41c56de3f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:62:0b:fa:87:15:0e:e7:57:9a:a7:7e:03:
53:02:01:d2:55:30:27:c4:42:a4:06:95:d9:52:af:
28:55:08:24:32:fb:f0:63:89:6a:2b:8e:9c:c0:2a:
70:cd:0c:99:d4:6d:04:ee:ac:31:b9:6d:c2:e0:79:
75:87:e8:43:16:7b:26:94:85:da:c3:e8:de:2f:e5:
c9:91:1e:e0:19:a5:bc:da:ed:21:de:a1:39:3b:b9:
34:76:89:48:61:7a:94:37:c5:ab:a4:d8:f7:41:d5:
9b:89:37:b3:d4:82:6e:0e:7c:fb:ec:9f:af:27:a4:
ce:6d:44:94:94:ca:78:68:a6:d4:3c:7a:91:88:25:
7a:f8:e0:07:cf:90:53:99:87:29:19:eb:18:a6:02:
be:ae:25:c9:f3:49:16:ad:14:37:10:ea:18:5a:1d:
36:5a:de:c9:aa:d7:80:f7:05:af:32:2b:da:11:a4:
8b:ed:1c:77:b5:ca:7f:96:90:01:b3:8a:70:9c:a4:
fa:f4:8c:4e:3d:c7:50:89:03:0b:db:b3:f4:49:6c:
2b:68:e1:d7:35:60:1c:5c:c9:44:8d:fa:d2:d6:c4:
4a:77:69:cc:6a:66:33:7c:bc:fe:0b:58:1c:3a:c4:
ea:c7:46:2b:28:d9:95:cd:27:8a:66:ea:9b:5f:00:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:FD:3F:16:90:77:49:80:C5:AF:08:B5:CD:B4:1C:56:DE:3F:7F
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/u0f9PxaQd0mAxa8Itc20HFbeP38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
185.162.176.0/24
188.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8e:f2:e0:44:69:08:6d:d3:95:3c:1c:db:ee:97:2f:e6:ff:
de:5b:c4:ae:06:2b:28:cf:69:7d:21:c5:9e:cb:db:24:a0:eb:
bd:67:56:8c:d4:8f:cb:8a:37:39:b9:3e:2d:0a:8f:d0:34:df:
a3:55:f3:04:0d:e5:f7:ad:28:70:5a:6a:6c:74:70:d7:29:dc:
a7:7c:7c:2d:b6:6d:b3:45:09:fa:00:30:ab:f7:ec:d2:94:4c:
44:81:62:fd:a4:ca:76:28:30:8e:0b:c4:f1:b5:34:d9:0d:38:
6a:8c:ff:eb:1f:4b:60:1b:a4:11:9e:4f:73:59:c6:e7:e5:c6:
8c:d1:85:a2:c6:e8:cd:c2:b7:06:0a:31:6b:d3:d4:34:1f:98:
af:76:a5:96:9d:48:a9:52:0b:d9:29:63:94:f9:44:cd:dd:50:
14:45:01:c8:58:35:7d:1e:44:70:53:74:ce:be:0c:35:f3:14:
1a:00:be:06:34:a1:c9:4b:73:6a:f9:db:14:72:46:7c:c7:94:
0c:40:ae:d8:8c:22:f2:5b:a3:c3:f9:db:be:aa:a6:c8:b0:83:
9f:0b:99:df:97:ca:69:14:90:ff:02:f6:e4:1c:4d:69:c4:2b:
ec:2d:47:55:2c:c7:4c:47:39:3f:58:c8:12:44:a9:9b:c5:ea:
e1:f8:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:07 2025 by rpki-client on console.sobornost.net