Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ihbJj35SfiNKgMjoDGpV06NT6KE.roa
File: ihbJj35SfiNKgMjoDGpV06NT6KE.roa (raw, json)
Hash identifier: KkvSmx3se5Nm7pPGtEV1SFiEuCL5NXpB0XReHMuUTd8=
Subject key identifier: 8A:16:C9:8F:7E:52:7E:23:4A:80:C8:E8:0C:6A:55:D3:A3:53:E8:A1
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0195F144C1A7805406494F90981E3B9D2A03
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ihbJj35SfiNKgMjoDGpV06NT6KE.roa
Signing time: Tue 01 Apr 2025 12:12:49 +0000
ROA not before: Tue 01 Apr 2025 12:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56694
IP address blocks: 89.23.96.0/22 maxlen: 22
89.23.100.0/24 maxlen: 24
89.23.101.0/24 maxlen: 24
89.23.102.0/24 maxlen: 24
94.125.191.0/24 maxlen: 24
185.39.206.0/24 maxlen: 24
212.67.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:44:c1:a7:80:54:06:49:4f:90:98:1e:3b:9d:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 1 12:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a16c98f7e527e234a80c8e80c6a55d3a353e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:a7:8a:58:69:08:60:6d:9e:af:d7:4f:e2:
20:2c:ca:9d:4c:05:30:a5:09:8d:cc:53:a7:4c:92:
7b:2c:dd:a1:83:31:07:17:e9:23:e0:0b:ef:d1:fa:
46:7d:57:15:2b:09:b6:09:26:d1:17:28:1c:0e:fd:
82:f1:b4:87:f2:9a:b0:4b:7c:fb:49:79:48:3e:a1:
be:25:91:4f:02:69:cd:b4:cc:55:b3:a1:e5:9a:f3:
4f:57:55:76:80:4e:0d:4f:3e:b4:4c:f1:bc:ba:b2:
47:8c:54:60:ba:b8:66:63:cd:7d:98:66:c3:03:6d:
07:b0:76:a4:8c:47:e7:3f:85:f4:e4:46:84:57:d8:
6e:fa:81:8a:4a:e7:26:65:d1:05:9c:ff:6b:fc:5c:
9e:cd:e6:65:c4:b6:02:5c:87:62:78:77:9e:f8:1e:
de:49:22:e2:cf:63:bc:22:92:76:21:fe:d2:ab:da:
be:69:b3:f5:32:71:65:77:11:b0:79:9d:46:ea:27:
a8:6c:90:a6:5a:94:6b:4b:fe:e3:04:44:3d:ce:03:
15:ae:02:da:ff:48:8d:f4:92:d1:26:4a:ca:23:7e:
3b:3f:8a:00:bb:8a:06:c4:3c:92:4e:1b:9a:a6:70:
e9:34:29:40:36:c2:9a:1b:32:46:e2:9d:37:56:99:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:C9:8F:7E:52:7E:23:4A:80:C8:E8:0C:6A:55:D3:A3:53:E8:A1
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ihbJj35SfiNKgMjoDGpV06NT6KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.96.0-89.23.102.255
94.125.191.0/24
185.39.206.0/24
212.67.17.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3c:7e:7c:03:0e:58:de:78:0a:ed:b4:57:77:ce:10:a6:1e:
e5:cd:9c:7a:ba:f4:6c:bc:24:ec:2c:94:07:0b:06:8b:23:d4:
0f:77:72:43:40:c2:67:b3:a5:12:c3:a8:41:e3:99:fb:16:6d:
bf:9b:47:f3:22:e3:1e:ae:6f:bc:37:29:91:2a:a1:a3:9c:6e:
d4:7a:62:e2:43:a4:20:d4:be:c6:fd:bc:ff:85:ce:62:80:89:
93:95:01:f7:05:44:6b:67:8a:b7:29:2c:11:d8:53:02:73:a0:
f7:95:f1:2e:32:21:14:41:af:53:62:43:01:49:a1:c5:ac:fd:
5e:d5:2b:5d:01:cd:b6:23:ba:2a:be:26:98:76:75:f5:00:d4:
b9:6a:27:3f:dc:17:d0:e2:34:2c:dc:2e:f2:dd:ff:5c:2d:09:
c7:c6:c6:90:40:c6:e0:83:82:c0:d1:28:91:f9:f9:b8:18:a6:
20:72:4b:8c:b5:8a:d5:c9:8d:1b:c1:db:a9:9f:84:fb:27:44:
da:aa:54:97:96:ae:c0:f4:ba:d0:15:98:96:e6:2f:66:2f:ed:
64:b9:6f:9c:b3:e4:cd:e4:4b:ba:e4:fe:e1:78:97:5d:b8:fc:
ee:96:da:38:72:8a:b6:c5:96:52:54:98:ed:6d:d2:a4:96:c4:
06:77:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net