Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/V1rb0y6iu1TTOsIZQYPUPITNZdc.roa
File: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (raw, json)
Hash identifier: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=
Subject key identifier: 57:5A:DB:D3:2E:A2:BB:54:D3:3A:C2:19:41:83:D4:3C:84:CD:65:D7
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019425FC3D0FB041AACAA3697C4A4DAD2E1B
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/V1rb0y6iu1TTOsIZQYPUPITNZdc.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198404
IP address blocks: 89.39.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3d:0f:b0:41:aa:ca:a3:69:7c:4a:4d:ad:2e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=575adbd32ea2bb54d33ac2194183d43c84cd65d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:b8:39:0e:b1:fd:4d:84:7d:6a:c3:26:bf:
2a:11:59:e7:c3:26:1d:13:df:bd:c9:71:0a:59:70:
5a:76:e1:0d:10:90:40:28:2b:b6:c5:33:14:9d:75:
20:8e:a8:b6:19:45:b0:b1:c5:12:00:79:76:44:23:
69:ab:52:64:d9:b3:1f:f0:fd:c8:4b:a1:37:47:c2:
c4:41:ad:93:c0:9d:41:63:d0:08:9e:62:9d:4e:10:
8d:ff:11:26:f6:c0:cc:96:0c:12:03:f4:d4:30:7b:
aa:25:9c:91:56:84:d2:b5:1e:bf:f6:42:7a:5f:4c:
1b:f0:6f:0e:c9:f2:a9:07:62:c6:c1:2f:94:d2:7c:
fc:9f:92:4f:16:c5:93:aa:c7:5d:bc:d7:0a:a8:26:
c6:f3:21:01:6c:02:b0:c0:19:32:e0:ba:37:f8:e0:
b6:18:fe:e7:f7:b1:ac:2b:fd:85:fa:0e:b8:a9:03:
b1:d0:09:fd:38:03:86:8a:d1:84:a6:b0:98:59:4f:
32:56:4a:28:d9:3c:3b:8e:be:32:da:a4:08:d3:0c:
3e:72:55:6f:55:6c:2a:b7:cd:69:fc:7c:60:fe:70:
97:c0:e9:3b:f8:d2:85:79:47:92:79:cb:3e:90:ea:
7d:ef:e1:5a:d2:ef:b0:f3:c7:7a:e2:da:8a:f1:b5:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:DB:D3:2E:A2:BB:54:D3:3A:C2:19:41:83:D4:3C:84:CD:65:D7
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/V1rb0y6iu1TTOsIZQYPUPITNZdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.32.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0f:8d:dc:6b:bd:ed:e0:de:6e:bc:9c:24:8c:de:2a:e5:1c:
99:ba:5e:ff:44:19:14:e8:86:98:b5:9e:54:b7:d6:d4:59:a8:
88:4f:b9:9a:19:93:c5:4d:94:6d:c5:19:f5:31:d4:22:3d:d9:
89:11:ca:d5:9b:3e:65:6f:cd:ee:3a:69:5d:6b:8a:f3:56:62:
54:5f:93:54:44:01:64:31:cd:ee:19:15:86:85:bf:cc:9c:6f:
d5:22:7a:64:ad:97:a6:1d:98:51:09:b9:36:47:89:50:2b:da:
62:aa:fe:95:53:b8:bb:43:ab:e5:e6:f3:21:6e:72:d6:fc:e7:
09:05:8e:28:8f:38:7e:df:d4:89:76:37:de:c0:93:e5:19:8d:
75:bd:9f:7b:09:f3:92:26:b2:3d:dd:36:bb:6a:ef:e1:ff:f6:
24:b5:8f:66:30:30:37:18:eb:c5:14:7a:26:8c:d5:7b:a5:25:
67:d8:79:2c:58:58:e1:87:54:84:a1:40:26:90:0e:be:d9:48:
5b:01:19:47:12:18:39:ee:83:e5:a9:02:d6:e1:77:b2:0d:ea:
bb:f0:c3:ce:52:67:75:57:d2:2a:02:71:1e:1c:f9:54:7f:1f:
60:65:ec:f1:56:43:09:bb:ab:f7:cd:b5:1f:0a:81:85:7c:e2:
70:15:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:54 2025 by rpki-client on console.sobornost.net