Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/I_uguIxF_BMEoyGLoIURMKuvuX4.roa
File: I_uguIxF_BMEoyGLoIURMKuvuX4.roa (raw, json)
Hash identifier: 8eCD2dZaEAtY0Dv9hMHZwLlo808FjJsySBHzoOCHK7Q=
Subject key identifier: 23:FB:A0:B8:8C:45:FC:13:04:A3:21:8B:A0:85:11:30:AB:AF:B9:7E
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0195F5B402AEEF72225935882124827255A0
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/I_uguIxF_BMEoyGLoIURMKuvuX4.roa
Signing time: Wed 02 Apr 2025 08:52:49 +0000
ROA not before: Wed 02 Apr 2025 08:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34661
IP address blocks: 89.28.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:b4:02:ae:ef:72:22:59:35:88:21:24:82:72:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Apr 2 08:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23fba0b88c45fc1304a3218ba0851130abafb97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:e0:56:91:f6:81:43:b8:56:b4:e7:2c:88:
9b:1b:52:4d:f9:f0:5b:ef:30:05:e8:f5:63:ce:c0:
fc:08:ff:80:c7:48:2f:e6:9e:cf:d4:3d:87:31:27:
21:e9:f1:4f:1e:00:f5:43:1d:8d:a3:90:6c:41:fd:
08:04:80:e1:20:0b:49:15:4d:a3:89:2c:31:0b:3d:
55:a7:68:64:13:fa:a1:30:c0:db:ed:42:f9:d9:4b:
4b:72:fa:f6:7b:10:86:42:0b:98:3f:20:c2:2c:ec:
e5:89:a2:e5:ff:7f:65:c4:d4:a4:da:2c:47:80:ba:
ca:12:22:25:0e:07:50:23:12:95:8a:ea:04:e2:3a:
92:b8:e5:6c:e4:e4:47:62:8a:b0:8a:70:9a:54:91:
f2:d1:28:73:fa:35:4f:ca:8c:48:6d:62:09:1b:a0:
e0:72:75:8b:28:af:f0:86:34:1c:8d:0e:33:44:a4:
6b:5c:b3:27:0b:3b:dd:f9:16:1f:7b:6e:2f:26:ed:
26:e2:02:86:f2:56:6d:07:03:9a:ed:d3:84:8b:3c:
04:48:e3:c7:eb:06:20:ca:f6:c1:b9:90:b2:59:6b:
55:69:f4:35:f7:cb:0d:02:0f:8b:a6:0c:7e:22:7a:
e0:ad:80:4c:ce:da:97:1f:21:c1:76:5a:f6:58:1d:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:A0:B8:8C:45:FC:13:04:A3:21:8B:A0:85:11:30:AB:AF:B9:7E
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/I_uguIxF_BMEoyGLoIURMKuvuX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.200.0/21
Signature Algorithm: sha256WithRSAEncryption
89:ee:b8:fa:04:4d:7d:1d:56:52:9a:b5:04:5b:aa:96:3b:89:
dd:a8:df:c5:7e:19:65:e1:0e:2f:3b:85:6d:57:f0:84:de:ca:
b0:a9:f9:ca:8e:99:61:d9:07:d5:d0:4d:0c:48:14:4e:49:21:
8b:1d:b9:4a:93:8a:6c:75:21:d5:b8:98:1a:5d:cb:6c:92:61:
75:0e:db:5e:1f:5b:70:86:d7:5d:96:93:a6:40:34:94:ef:3d:
4d:c7:8c:61:aa:7b:a5:c9:c8:08:88:8c:69:5f:e7:af:c1:8d:
3a:36:e5:1c:c7:d5:76:b7:dc:e2:90:06:64:3e:81:5b:f6:4e:
97:2d:c0:ba:96:c7:d3:d3:22:b7:4f:79:c0:17:22:f6:d5:5a:
aa:ac:01:5a:6d:e6:c8:c3:93:d5:54:ac:49:32:66:eb:79:61:
99:2d:ba:ac:84:e1:d0:eb:80:28:75:77:71:56:5a:98:b3:0c:
bf:68:65:fe:15:7a:e9:8c:97:e4:43:3b:f0:b3:09:cb:e0:74:
e7:bd:ba:43:62:2a:cc:07:98:3e:55:29:e7:42:7b:5c:0b:fc:
3a:c7:a6:cc:e2:e8:c1:a1:6b:20:19:e0:78:ed:77:6e:55:f9:
9b:6a:d5:6b:67:5f:47:37:4f:7a:78:02:06:66:07:10:a8:18:
c3:db:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net