Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Srh5g0ojceAQmtMmznAeDlPYrmw.roa
File: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (raw, json)
Hash identifier: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=
Subject key identifier: 4A:B8:79:83:4A:23:71:E0:10:9A:D3:26:CE:70:1E:0E:53:D8:AE:6C
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 019422FBA9751781B15E64E14538341E9682
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Srh5g0ojceAQmtMmznAeDlPYrmw.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210835
IP address blocks: 89.150.36.0/24 maxlen: 24
89.150.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a9:75:17:81:b1:5e:64:e1:45:38:34:1e:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ab879834a2371e0109ad326ce701e0e53d8ae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:5b:c9:f3:52:36:e7:95:99:a2:10:32:05:
ff:ac:c7:d3:6a:72:35:28:43:de:5d:41:68:cc:d9:
a8:df:25:c0:21:1d:fd:9d:53:45:9d:42:1c:21:48:
af:3f:3a:1a:46:d5:a5:18:43:01:aa:52:6f:25:4d:
a6:82:a8:27:1a:15:e7:de:94:3c:ca:aa:02:6e:1e:
3f:4a:65:42:99:e7:98:d0:9a:b1:41:91:46:75:24:
ab:a3:d0:d5:95:bf:29:82:99:5d:f0:a6:51:00:28:
66:66:7b:8f:89:21:ba:ad:50:36:f7:cd:6d:3c:0d:
f0:fa:34:e5:ff:20:4a:fa:60:0b:c9:5d:c9:06:47:
3d:fb:57:af:8a:ed:51:84:80:dc:a7:ca:17:17:97:
b8:2a:eb:45:f4:26:e2:2b:c3:17:9e:18:1d:df:6e:
c0:79:b3:f1:e8:67:a6:ee:2a:49:77:a4:f2:47:08:
13:d3:de:82:96:c2:41:ab:bd:42:a6:b1:72:ee:05:
ee:73:52:ab:17:7a:b9:5f:d6:9c:62:b7:98:c1:ec:
d9:ce:3d:0f:df:9d:fc:ec:50:db:21:96:1b:c0:8f:
26:89:93:c8:2f:68:4a:d7:43:3b:98:d2:9f:09:18:
ee:0a:d4:49:90:d3:27:84:01:14:07:9e:9c:f5:ad:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:79:83:4A:23:71:E0:10:9A:D3:26:CE:70:1E:0E:53:D8:AE:6C
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Srh5g0ojceAQmtMmznAeDlPYrmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.36.0/24
89.150.38.0/24
Signature Algorithm: sha256WithRSAEncryption
94:76:83:9a:b8:33:36:11:8c:e6:9f:be:26:58:0b:ed:6d:89:
28:70:d2:49:e0:71:2b:a1:0a:81:cc:21:a6:94:d7:c0:13:ca:
57:fe:e4:3b:25:d9:4d:25:45:03:f5:fe:db:41:7e:23:31:aa:
70:fd:4c:dc:c9:4d:61:3f:3c:99:e5:56:a5:33:32:75:c4:d1:
6d:7c:05:aa:bc:ee:34:50:34:b7:df:ff:e5:c5:a7:8c:eb:99:
99:f4:54:21:ad:be:d7:d6:85:89:93:da:d7:1c:47:d0:eb:c1:
66:bd:ad:c7:d8:3d:59:7b:85:36:d3:39:4e:2c:e0:74:c8:f8:
ad:d1:9d:13:60:07:30:33:27:22:3c:ac:d8:ae:cf:55:e6:9d:
59:b1:da:e3:e9:18:1a:88:5c:de:df:b4:24:7a:0a:55:a8:a3:
ab:6a:3c:bc:b9:a5:19:f4:c5:1d:31:8e:4e:bc:9a:53:35:f5:
95:bb:df:8a:b1:ff:80:df:08:c7:3b:4a:c0:84:4d:d5:64:6f:
7e:eb:ed:0d:66:c9:6f:9f:ae:91:d2:7c:ac:81:76:34:f9:2c:
40:8b:fe:bf:23:e5:07:7d:85:b4:50:32:17:0d:9d:ee:07:b8:
93:c9:aa:ec:95:5f:76:d0:d8:dc:70:d2:19:82:5c:92:f4:07:
56:b3:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net