Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/fpYWx7I0_qyAxUcplQpCeSc2w8c.roa
File: fpYWx7I0_qyAxUcplQpCeSc2w8c.roa (raw, json)
Hash identifier: cg2sXrbRVwXMk1wR3j9whqGcVW2PV7ylfoVbENZnPNY=
Subject key identifier: 7E:96:16:C7:B2:34:FE:AC:80:C5:47:29:95:0A:42:79:27:36:C3:C7
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0194236A10C04190936B54CFABB1210C8F92
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/fpYWx7I0_qyAxUcplQpCeSc2w8c.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 89.184.8.0/23 maxlen: 23
89.184.14.0/23 maxlen: 23
89.184.16.0/21 maxlen: 24
89.184.24.0/21 maxlen: 24
193.223.103.0/24 maxlen: 24
193.223.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:c0:41:90:93:6b:54:cf:ab:b1:21:0c:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e9616c7b234feac80c54729950a42792736c3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:59:98:7e:fa:f7:33:62:67:a2:32:51:f0:
06:5e:c4:ad:55:8b:08:82:98:e0:b8:09:04:7b:e6:
50:e3:01:83:b6:4f:a7:c0:3f:1c:7d:e9:78:9e:5d:
c0:81:e7:67:34:90:0e:08:aa:9d:b0:67:4a:38:7a:
4a:64:66:10:d5:96:76:09:39:79:1d:ce:bb:5b:1c:
dd:1a:4a:c7:48:1d:71:8d:43:78:77:ad:73:e9:fd:
a2:50:9e:b6:93:4c:4d:8e:98:f0:5e:cd:b9:1a:1d:
27:c3:f0:4c:e5:e4:a6:8f:93:4b:87:db:bc:32:35:
4c:89:11:5c:da:a7:62:f7:de:8f:59:3f:e5:15:fd:
72:f4:55:d1:62:fd:59:f5:6b:ab:68:ef:49:9f:11:
c2:3c:3e:0c:b5:b7:80:77:d9:38:cc:5d:77:90:e4:
05:28:16:c2:e9:4d:4b:f1:69:3a:0e:92:c5:d8:20:
99:d2:ce:9a:19:8d:e8:a3:c7:07:79:2a:c6:98:48:
6b:a4:1d:b2:e5:b1:f9:ce:1c:d4:fe:63:bb:b5:b9:
90:3f:2e:44:22:fa:20:30:79:e6:e4:c4:07:1b:a3:
ec:ad:6e:15:f2:13:d9:82:a5:cf:98:ef:e5:eb:05:
a5:3e:35:02:33:d6:2d:01:11:2f:e9:ca:c6:2b:98:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:16:C7:B2:34:FE:AC:80:C5:47:29:95:0A:42:79:27:36:C3:C7
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/fpYWx7I0_qyAxUcplQpCeSc2w8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.8.0/23
89.184.14.0-89.184.31.255
193.223.103.0/24
193.223.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b6:70:65:79:04:0e:35:fc:da:66:c0:20:04:db:c7:1a:cf:
07:0b:4c:74:68:9c:07:bf:d6:24:77:62:f6:ff:e6:ec:45:e3:
60:01:c5:d1:74:20:8d:b0:e9:00:71:7a:9a:24:c7:48:09:50:
14:64:08:ef:e8:56:fe:1a:fe:0e:d6:16:7d:2b:3d:11:32:55:
25:0f:8c:91:9c:af:f7:ab:df:2e:59:2f:d2:e2:4f:7b:5b:fe:
12:c0:ca:5f:d7:72:ba:8c:af:4e:27:23:17:e9:fd:2e:d0:64:
cb:7f:49:d8:80:d1:8b:17:d9:b4:d1:49:2d:7a:64:a7:5b:9c:
82:74:a7:f4:d1:f2:89:2a:c4:75:78:c6:f7:aa:da:4f:8f:ce:
a0:8c:bf:c9:49:79:c6:e5:97:56:7b:41:63:bd:13:24:b0:03:
48:f5:f7:af:88:4b:e5:95:23:f5:c4:b1:21:aa:08:a1:97:7a:
46:d6:98:58:75:5d:30:bc:a6:c7:9d:86:fa:37:34:73:62:80:
5b:1c:86:07:b7:1f:cc:fb:18:df:da:d6:3d:88:76:93:59:1f:
d4:b8:4a:e3:d8:e7:80:a7:5f:57:b6:f1:a8:00:77:30:23:39:
a4:63:71:fb:dd:18:67:f4:a1:ad:e0:d3:23:03:e2:9b:ec:a6:
b6:be:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:05 2025 by rpki-client on console.sobornost.net