Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/2pl2Sl-diunsZv-X1xDfcacZESQ.roa
File: 2pl2Sl-diunsZv-X1xDfcacZESQ.roa (raw, json)
Hash identifier: SGZLc6KSJvJiXyci/DBhSPsrTj4/6Xpxbx5tcaKgogE=
Subject key identifier: DA:99:76:4A:5F:9D:8A:E9:EC:66:FF:97:D7:10:DF:71:A7:19:11:24
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01961B1040388651AB27D8B0C08A2382C728
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/2pl2Sl-diunsZv-X1xDfcacZESQ.roa
Signing time: Wed 09 Apr 2025 14:59:31 +0000
ROA not before: Wed 09 Apr 2025 14:59:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 89.23.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:10:40:38:86:51:ab:27:d8:b0:c0:8a:23:82:c7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 9 14:59:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da99764a5f9d8ae9ec66ff97d710df71a7191124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:33:96:99:b2:7a:16:1d:96:0d:70:47:c0:
56:f7:13:db:d7:ad:68:68:d1:24:57:22:cf:31:52:
73:db:c4:57:eb:d4:97:8e:5a:3b:a2:29:ad:05:47:
d5:3c:3c:6d:6a:70:45:a8:52:e0:1f:d0:e5:d5:c0:
b5:ee:d7:ec:db:ef:de:73:a5:ee:bb:79:d7:a3:69:
42:ec:7d:89:7d:16:8b:58:15:1b:76:2d:9d:e7:54:
6e:ff:0a:2f:48:f4:a7:6c:bb:e7:6d:f5:e4:62:2f:
1a:00:dd:93:a5:9c:a6:e1:c8:0d:93:03:d2:33:8f:
bb:8c:cb:00:4f:e5:e0:5f:8c:ce:41:77:7e:88:76:
4a:43:2b:3f:2c:34:7d:47:5f:fc:84:62:9c:51:b0:
a1:8c:41:a0:98:c5:7c:75:30:62:27:98:50:a4:df:
de:f7:8e:3c:b9:36:58:1c:06:c4:de:85:38:a5:e6:
9d:e6:bf:a7:7a:5d:6e:f4:9a:96:cc:39:5e:7f:c7:
0d:ba:ec:4c:07:d8:ad:0f:8e:e5:ec:0b:da:73:0c:
c0:f7:5d:4d:db:fa:e3:d2:82:df:d8:7f:7b:4f:b5:
bf:63:84:70:f1:6b:1b:3f:40:2a:53:e7:3f:cf:be:
c5:15:d6:f4:f5:cf:ef:1a:98:c1:cb:30:51:04:94:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:76:4A:5F:9D:8A:E9:EC:66:FF:97:D7:10:DF:71:A7:19:11:24
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/2pl2Sl-diunsZv-X1xDfcacZESQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.119.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:73:04:ac:57:5d:5e:38:ee:d2:c3:fa:6a:6c:e7:a4:7c:be:
c0:de:c1:69:0a:a2:3d:ed:ac:d0:b9:02:6b:9c:bf:56:54:76:
d0:f5:03:8f:57:96:46:7e:35:4d:1f:c4:5c:fd:ac:44:e4:81:
d4:e6:33:a2:c3:fc:48:48:aa:38:67:fa:54:bf:f5:35:18:0b:
78:33:70:84:3f:c0:95:7c:e3:32:5b:47:47:be:29:4c:d0:e1:
2a:f2:54:1a:2c:af:12:10:0b:f2:33:d6:a5:08:d7:bf:5e:3c:
10:c0:d3:64:eb:c3:eb:06:1c:8c:b7:02:82:1b:45:75:2a:56:
8f:2e:74:03:1c:aa:81:a0:5a:5f:57:95:6c:24:cc:0e:f3:72:
6a:36:59:e6:64:54:cc:4d:25:6b:81:85:f4:3c:c0:f1:b9:44:
74:6f:c7:94:c2:e8:ad:61:5a:6d:a3:e2:15:9c:7f:09:6b:05:
02:c8:85:24:3c:b3:64:f4:06:d0:62:bf:ee:9b:f3:85:79:b5:
2a:ca:3f:86:29:7f:ee:b4:da:dd:11:08:35:c2:c6:f9:58:1c:
bc:3d:1b:20:5f:51:f7:8a:a6:1d:6c:ed:e8:81:70:2d:1b:6e:
03:f2:27:9d:a6:82:09:63:12:10:5d:a1:3f:7e:cf:ae:8c:0c:
4e:cf:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net