Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/npPe8XFZ6a2BHwdNHsqb1MolM3s.roa
File: npPe8XFZ6a2BHwdNHsqb1MolM3s.roa (raw, json)
Hash identifier: SYptx1aM+buVWFSsRUXazThSDntWvjmVRSFMm5fwB98=
Subject key identifier: 9E:93:DE:F1:71:59:E9:AD:81:1F:07:4D:1E:CA:9B:D4:CA:25:33:7B
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D661C0A9B5316A6723BEE4AAC79F94
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/npPe8XFZ6a2BHwdNHsqb1MolM3s.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 89.47.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:61:c0:a9:b5:31:6a:67:23:be:e4:aa:c7:9f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e93def17159e9ad811f074d1eca9bd4ca25337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7c:9c:ff:d5:a7:70:0a:da:ce:da:cc:4f:a1:
6d:d9:b5:21:d7:4e:96:88:e5:6f:be:cd:38:9c:96:
9c:04:b0:46:04:3b:7c:ee:cb:f7:88:58:42:2c:11:
50:4d:75:53:8f:7f:1f:80:f8:17:71:21:bf:e4:2e:
8a:d7:35:9a:56:32:47:20:5f:fa:b8:ef:0a:b9:d7:
f5:ab:52:42:df:99:64:54:64:b1:f1:7f:3c:1f:bd:
f0:1e:ce:fa:ea:83:ac:00:eb:a0:07:55:ae:8f:4d:
05:14:8e:ee:1b:dc:81:ae:89:01:a9:26:34:13:28:
cb:6e:03:e6:90:44:5e:bb:d2:eb:11:a0:73:4e:f8:
66:56:80:df:fe:64:ed:ff:69:36:85:22:c0:16:5d:
1c:31:6b:d7:dc:dc:6b:ce:ef:92:b7:e0:79:0c:d2:
6f:70:fc:ea:07:6b:fc:2f:b0:b6:74:fc:c5:0d:23:
96:c3:21:41:5a:44:5a:45:b6:7b:51:e4:78:56:2b:
b3:de:60:85:f3:f5:4a:32:be:17:c1:ea:25:0b:dd:
f7:24:38:39:aa:64:36:d5:72:3d:5d:8e:42:98:b4:
51:d6:25:72:84:79:00:3d:8c:af:93:95:7c:ac:d0:
d9:f6:3d:66:25:b0:20:93:14:a7:c5:a3:e2:1f:a5:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:DE:F1:71:59:E9:AD:81:1F:07:4D:1E:CA:9B:D4:CA:25:33:7B
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/npPe8XFZ6a2BHwdNHsqb1MolM3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:57:fd:62:e8:e7:63:6f:df:48:f1:1e:59:8d:39:5c:17:0b:
ea:f5:65:b9:a9:79:6f:12:1a:8b:4f:38:ac:3e:6b:24:dc:35:
d2:61:8a:68:fb:18:27:b6:62:ee:87:af:14:27:b0:55:62:95:
c0:d2:2c:ad:a4:cd:98:eb:45:44:a8:ec:d8:fc:6e:9d:6c:64:
e6:a4:6c:9b:31:17:24:1a:5f:1a:b1:39:56:8e:c4:63:08:82:
b6:2d:ff:c2:39:d5:2f:e8:1d:a5:79:4c:ee:2c:87:dd:60:78:
ef:b3:b9:52:27:b4:b7:04:5d:10:74:c7:ce:08:5b:57:12:49:
e5:48:8f:0b:03:34:9e:a4:22:e5:28:9b:c7:10:c4:39:81:88:
17:f3:94:b6:8c:93:d0:ab:ad:9b:4b:fc:fd:d3:54:04:14:f8:
17:d7:e0:e2:db:85:ae:2d:5a:73:1d:78:79:34:f2:1b:01:cb:
df:48:b5:f9:20:3a:25:af:31:21:fa:d4:62:d8:82:9c:43:28:
4b:69:86:2f:15:57:d2:2b:c1:24:11:06:0c:ac:2e:38:80:3a:
c1:f0:22:68:ce:a2:33:45:ba:a6:79:96:3d:e4:4a:22:76:c4:
9b:4c:b3:68:64:17:86:a4:c0:e6:d6:51:39:06:3c:4d:3e:a4:
9b:28:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:45 2025 by rpki-client on console.sobornost.net