Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/dpEUD5Ic4PND631hV_WLYlzOm-Q.roa
File: dpEUD5Ic4PND631hV_WLYlzOm-Q.roa (raw, json)
Hash identifier: jkB5/8OIzhFzu0rc7J2Og2F1itTEOg0Rs+XbStzpkvQ=
Subject key identifier: 76:91:14:0F:92:1C:E0:F3:43:EB:7D:61:57:F5:8B:62:5C:CE:9B:E4
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 019427B534F4EF14D9EB2502898A2F8DACF4
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/dpEUD5Ic4PND631hV_WLYlzOm-Q.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50733
IP address blocks: 89.221.80.0/22 maxlen: 22
89.221.80.0/23 maxlen: 23
89.221.80.0/24 maxlen: 24
89.221.81.0/24 maxlen: 24
89.221.82.0/23 maxlen: 23
89.221.82.0/24 maxlen: 24
89.221.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:34:f4:ef:14:d9:eb:25:02:89:8a:2f:8d:ac:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7691140f921ce0f343eb7d6157f58b625cce9be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:f6:1a:d5:c9:e1:31:c4:de:2b:0d:be:a8:
54:c1:2f:b1:d7:30:bd:51:53:a4:b1:77:6d:40:b6:
a6:bf:3b:56:48:2e:95:80:c8:91:d4:0c:28:a2:d7:
df:58:ae:17:c2:03:e7:37:93:76:52:b9:8c:b2:39:
02:3e:b8:68:fe:ee:27:35:01:44:de:b1:46:97:71:
24:bf:3f:7a:3b:51:f2:54:23:82:7c:a6:b5:bb:b5:
07:74:e2:3c:f0:69:2a:05:57:07:64:51:f5:21:c2:
77:22:d9:7d:b1:e6:c6:d3:52:8e:26:28:61:24:31:
a8:e4:20:9f:32:14:cf:29:b4:9b:67:8c:ea:02:94:
4e:8b:eb:a8:1c:fa:94:53:62:21:dd:5c:ef:53:17:
71:70:40:89:4e:1a:54:9a:56:37:86:fb:68:5b:03:
ac:d7:9b:03:2f:9a:62:45:ec:cb:0d:9f:87:2b:9d:
5b:1c:2a:74:f2:26:2a:e3:a2:f1:41:a5:ae:e2:a8:
02:56:90:95:37:df:c6:bd:f0:80:20:42:8b:39:4d:
69:b4:8c:48:c0:c5:15:8a:42:c4:ee:97:07:e8:4d:
aa:7c:db:2a:96:ee:6b:04:1a:fb:73:4a:5b:d1:70:
93:9e:96:3b:23:f2:00:3f:f1:6b:54:5d:f5:00:c0:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:14:0F:92:1C:E0:F3:43:EB:7D:61:57:F5:8B:62:5C:CE:9B:E4
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/dpEUD5Ic4PND631hV_WLYlzOm-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:81:93:f7:c8:2d:ce:51:bc:3b:6e:8f:07:c3:90:59:86:b6:
17:26:e2:41:3d:86:8f:92:c6:68:da:d0:3e:8a:87:4c:d5:97:
30:aa:5d:a4:74:81:69:b4:6a:e4:56:89:0f:98:d7:b4:de:76:
27:5c:85:3c:13:6b:8f:4e:9d:27:d4:89:50:cf:05:86:28:4a:
18:97:0c:d7:82:b8:f0:2f:5d:e1:ff:1f:1b:a6:02:1a:ec:f8:
7c:15:dd:f2:f2:9b:ad:28:9c:00:d2:84:e2:42:ed:47:c4:78:
75:3e:75:b0:83:d3:7a:8d:d3:c7:1a:6d:c1:29:ca:b8:7e:ef:
50:15:d1:04:73:74:1f:da:77:5b:f1:1b:36:7c:bb:aa:2e:97:
08:48:6e:6a:5b:d0:d0:e6:7c:08:1a:d4:24:e0:03:30:1f:aa:
dc:e6:55:92:03:41:60:47:ac:6e:ac:aa:c0:e6:1d:b6:d5:d2:
0b:7b:3e:f1:39:93:1e:fa:5a:89:f1:e8:c3:15:b4:c4:e8:0f:
38:23:a6:6c:83:4a:4e:fc:55:d7:e0:f2:36:f1:b8:12:39:bd:
f8:00:17:d8:81:89:a3:89:bb:24:f6:60:94:1a:00:63:00:ac:
8a:2a:65:ae:9d:d1:3b:59:b1:2c:c8:32:d6:63:cd:c0:4f:af:
92:94:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:05 2025 by rpki-client on console.sobornost.net