Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ij5EepAi56wzEu5sg98dD4j-iF0.roa
File: ij5EepAi56wzEu5sg98dD4j-iF0.roa (raw, json)
Hash identifier: TyVyN98VieCxbdrRoS/pp+5Q5cgo1xHdkr1sKk1Zlwo=
Subject key identifier: 8A:3E:44:7A:90:22:E7:AC:33:12:EE:6C:83:DF:1D:0F:88:FE:88:5D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB426BA7F8DB1995CE349F5E97C0D
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ij5EepAi56wzEu5sg98dD4j-iF0.roa
Signing time: Wed 01 Jan 2025 01:48:22 +0000
ROA not before: Wed 01 Jan 2025 01:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199380
IP address blocks: 89.32.194.0/23 maxlen: 24
89.37.80.0/22 maxlen: 24
89.42.236.0/23 maxlen: 24
185.16.120.0/22 maxlen: 24
188.208.24.0/22 maxlen: 24
188.239.184.0/22 maxlen: 24
188.247.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b4:26:ba:7f:8d:b1:99:5c:e3:49:f5:e9:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3e447a9022e7ac3312ee6c83df1d0f88fe885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:a1:2f:bf:c3:34:0c:0a:ad:7b:9f:44:0a:
f6:4d:67:e1:9f:17:3c:0e:f8:4d:cd:0a:69:ae:e5:
2c:b4:61:63:a2:ef:00:a1:6d:61:e2:e0:6d:eb:25:
13:2c:2c:b2:ff:7d:11:0c:30:98:ec:fd:c0:3b:a6:
21:22:61:3c:86:f5:e1:9b:b2:c2:c4:0f:45:4f:36:
7b:b8:a7:53:01:3a:d8:c0:6a:74:77:c6:80:bf:e0:
32:cb:ed:ca:6d:53:f7:56:6a:0e:dd:7d:a1:d4:fb:
15:20:b3:82:26:f3:d8:f0:42:97:85:31:70:7d:09:
8e:a1:11:1d:c3:bd:2e:c0:df:d3:14:cb:95:50:3c:
e1:a3:67:28:b8:e5:dc:35:d8:34:6c:ea:4d:4a:b8:
7f:20:1f:f7:ab:8c:eb:65:b8:82:ce:c4:a2:63:22:
3d:3c:dc:33:81:27:7b:49:e5:36:83:59:f9:a8:83:
a8:09:83:b6:c5:b3:45:e0:30:9a:da:78:ba:96:a4:
9f:1c:af:7c:e1:96:d9:2a:9f:50:ae:6c:99:bc:ed:
26:df:3a:ff:f0:87:72:ea:fc:94:61:bd:0e:9e:73:
9e:fc:84:65:08:16:fe:46:0e:1a:3e:42:ae:b7:0d:
1f:95:f1:09:bb:2e:15:a8:d2:56:0a:fe:64:58:a5:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:44:7A:90:22:E7:AC:33:12:EE:6C:83:DF:1D:0F:88:FE:88:5D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ij5EepAi56wzEu5sg98dD4j-iF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.194.0/23
89.37.80.0/22
89.42.236.0/23
185.16.120.0/22
188.208.24.0/22
188.239.184.0/22
188.247.168.0/22
Signature Algorithm: sha256WithRSAEncryption
12:7b:93:0b:e0:9d:a2:4b:62:9b:29:22:79:5b:e5:4e:0d:e6:
8b:97:6c:39:23:58:47:85:b2:62:ee:27:57:c8:22:0e:d6:fa:
a2:ba:3e:cc:84:c2:86:9f:4b:5f:b4:aa:71:52:b3:98:ac:bc:
dc:e2:8b:d8:d9:a2:af:21:06:dc:42:eb:4b:f6:af:25:b0:ea:
51:f2:73:46:20:d1:6f:c1:4c:b8:8b:51:43:f6:92:5c:e8:72:
41:90:90:14:ed:85:bd:6e:5b:e7:e6:7d:4b:93:fe:38:cf:93:
0c:06:b8:4a:de:e7:41:f8:12:7d:1f:64:36:ca:c6:cc:f5:b2:
af:20:b7:d2:6e:c8:03:eb:1a:71:f1:d2:0c:ba:64:ef:e2:65:
ee:5e:d0:08:4a:a6:5f:a5:53:2d:37:01:77:a0:89:5c:83:93:
2c:d8:be:77:70:29:dd:8e:d5:49:e4:07:ea:c4:ee:f6:30:e7:
d3:04:f0:64:d9:d4:0d:24:e0:b3:9e:cb:50:5a:40:93:ad:42:
d0:d4:0a:7a:c1:0d:28:b9:c4:52:5d:69:6c:71:70:a2:f3:52:
2d:e8:10:b4:e5:50:2d:35:ad:e4:49:e9:33:69:55:9e:9e:5e:
fd:38:ef:6c:6a:52:46:29:37:e1:4c:63:e5:50:60:c9:08:b3:
ca:49:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net