Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/lAbsKfE3TL6BXXIug3kLMpkTpyc.roa
File: lAbsKfE3TL6BXXIug3kLMpkTpyc.roa (raw, json)
Hash identifier: 6GXkOjomJPTn/I17Fb1Iyy+h/EVDmDKXN84MvWK1jeA=
Subject key identifier: 94:06:EC:29:F1:37:4C:BE:81:5D:72:2E:83:79:0B:32:99:13:A7:27
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 019427B534AA583B35D4EE4917F3C2FCC61B
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/lAbsKfE3TL6BXXIug3kLMpkTpyc.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41881
IP address blocks: 89.221.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:34:aa:58:3b:35:d4:ee:49:17:f3:c2:fc:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9406ec29f1374cbe815d722e83790b329913a727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:1e:11:a2:08:b4:1b:46:fa:5a:be:2b:dc:
9f:ca:3a:64:dd:b3:f9:3c:cf:4e:d0:e4:ee:fe:f9:
40:85:cd:e6:e1:29:a8:cf:88:2d:a4:4f:94:d0:81:
74:06:61:0e:39:5e:74:02:ae:1b:c8:58:02:a7:95:
75:86:e3:90:ab:50:14:61:69:b6:dc:83:03:4b:bf:
66:39:d2:c1:8e:ea:a9:fe:d7:0a:30:ff:50:88:4b:
21:bd:e8:b0:e8:f1:a9:c3:88:fe:43:92:39:24:56:
a0:81:4b:03:5c:1f:5d:01:c3:18:da:f2:79:be:fd:
19:41:fc:cf:f0:97:b0:90:07:a3:db:7c:db:1a:ec:
7d:9f:c7:4e:c8:fe:38:8f:61:9f:9f:b6:a3:56:09:
6d:0b:b6:88:32:f2:40:62:66:d1:18:f5:4c:ba:7b:
c2:bf:28:55:e1:ba:57:53:5f:53:54:d9:09:e6:d6:
7e:a6:d3:ea:c7:6b:08:a2:4f:0f:ae:05:66:67:be:
45:70:e6:fa:78:4e:ca:a5:d4:8c:ee:2e:b4:87:a9:
c8:d0:44:b1:a8:be:7a:4f:d8:43:cc:a9:6f:9e:8a:
1c:7e:42:09:2e:e2:ae:0d:c9:8a:65:7c:f9:25:85:
6f:9e:bb:d3:58:b2:a7:f4:96:67:a1:8e:d4:0e:1e:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:06:EC:29:F1:37:4C:BE:81:5D:72:2E:83:79:0B:32:99:13:A7:27
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/lAbsKfE3TL6BXXIug3kLMpkTpyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4b:8c:57:3e:6d:c6:f1:07:a7:20:41:41:a6:43:f6:86:ff:
0f:ce:88:8e:69:a0:b2:9e:b5:ea:c8:d6:03:33:61:1a:4c:83:
e3:4f:39:78:ee:fb:73:38:50:0e:cb:fd:7c:78:6b:e5:9c:19:
83:a0:70:b2:af:64:85:a4:57:7d:c2:46:3d:05:e1:0e:8b:31:
0f:55:55:26:0e:ab:ef:af:db:c9:1b:cd:91:c5:5b:c5:56:23:
30:19:25:19:59:9d:c0:ee:1d:ec:18:ca:19:e0:e4:1d:ab:1d:
57:f5:97:64:c9:07:e4:ba:b3:22:a8:4e:bb:0e:ba:dd:88:bf:
f5:1d:0c:71:1a:9a:ef:0b:81:98:94:02:93:6c:94:e9:ba:3c:
63:21:bf:5c:e1:f1:48:6d:af:39:e6:d7:bb:c6:48:a8:e0:7c:
08:37:fa:11:a2:e8:5c:eb:7c:01:b8:75:9b:ec:b5:8f:9c:ac:
4d:39:06:c2:98:4b:fc:85:1e:6c:a5:40:25:57:15:e9:85:f1:
fe:92:7b:92:42:d3:26:6e:f2:26:af:d0:9f:c7:b5:c1:92:db:
61:ef:7f:16:ba:28:c8:73:2d:2a:14:31:02:46:94:f0:40:b2:
03:91:de:dc:89:ac:49:a0:5e:47:36:ab:78:44:84:0a:04:5f:
3c:57:81:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:05 2025 by rpki-client on console.sobornost.net