Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/tbUJNdzqV1cqj6cepbLRJaiPbU4.roa
File: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (raw, json)
Hash identifier: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=
Subject key identifier: B5:B5:09:35:DC:EA:57:57:2A:8F:A7:1E:A5:B2:D1:25:A8:8F:6D:4E
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 01942746E4B0A8A9749AAD5A5377FD749E57
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/tbUJNdzqV1cqj6cepbLRJaiPbU4.roa
Signing time: Thu 02 Jan 2025 13:49:05 +0000
ROA not before: Thu 02 Jan 2025 13:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202108
IP address blocks: 89.31.138.0/24 maxlen: 24
89.31.140.0/24 maxlen: 24
89.31.142.0/24 maxlen: 24
89.31.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:e4:b0:a8:a9:74:9a:ad:5a:53:77:fd:74:9e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Jan 2 13:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5b50935dcea57572a8fa71ea5b2d125a88f6d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:83:30:a1:ce:3c:19:fa:72:d2:4e:de:85:
49:f2:0f:d6:d8:94:1f:92:e7:c6:01:eb:bb:bd:ed:
da:54:f1:ac:be:8e:07:27:ca:9f:b1:22:24:a5:30:
51:68:e3:48:bf:30:52:fc:38:00:e7:3a:bc:37:2d:
d7:2b:25:58:ce:6a:53:33:17:23:f3:e0:f4:4e:0d:
8f:0e:bd:dc:18:25:ef:d8:be:a7:09:88:c2:c5:7e:
d7:4b:c8:a1:f5:49:9c:a7:44:f0:27:91:23:30:9b:
3b:74:b8:f3:3e:c4:f9:ed:b6:b3:c0:33:35:3f:34:
21:99:eb:51:94:00:17:93:71:72:8a:1e:49:9b:a7:
82:a2:87:13:82:36:ad:15:e2:8a:4a:42:53:3e:b4:
ce:63:09:3e:34:48:93:ab:a0:19:6e:87:34:39:bc:
fc:06:68:1f:9e:7c:7c:78:ff:f0:f6:7c:59:c1:5b:
c5:2e:c8:85:11:9e:92:97:a3:a9:7f:bc:03:49:bd:
96:cb:91:3f:05:70:1c:9b:5b:51:24:0e:d2:ed:95:
84:bc:69:61:67:bc:a5:29:51:7a:1b:d0:99:1f:37:
13:be:91:ac:a5:8c:0e:88:43:34:54:0a:3b:c1:90:
01:39:f7:c9:20:ea:f6:7c:6d:79:9a:38:cb:ca:25:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:09:35:DC:EA:57:57:2A:8F:A7:1E:A5:B2:D1:25:A8:8F:6D:4E
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/tbUJNdzqV1cqj6cepbLRJaiPbU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.138.0/24
89.31.140.0/24
89.31.142.0/23
Signature Algorithm: sha256WithRSAEncryption
87:88:06:dc:41:bf:95:bf:46:69:f3:11:9a:c3:9a:ff:e4:3d:
c2:77:0b:c4:e8:75:12:64:16:e1:fc:e9:d1:32:ed:58:36:a7:
4b:95:5f:54:79:f6:32:49:6b:d4:0d:e5:32:04:49:91:11:f9:
b5:7f:70:a8:47:c7:95:e4:d7:b6:35:18:ec:63:b7:5d:c6:f1:
e1:da:c4:a5:58:38:10:f7:6e:d7:3e:f5:8b:5d:00:c9:68:62:
a6:dd:72:02:0e:d2:71:e3:82:2b:f6:c3:01:a2:a3:7c:5c:62:
36:0c:49:54:7d:ae:f6:ba:fa:b1:17:a4:3f:da:ed:a5:50:71:
a8:02:5e:d4:42:9e:a6:5b:fe:0b:10:15:3e:5a:ff:61:9a:33:
cc:29:af:4d:2d:b4:a8:c0:8f:b6:2c:66:5a:1f:b3:60:bb:10:
e8:a3:f2:b3:c1:64:95:8a:98:2f:17:e4:dc:8b:c0:84:69:86:
c0:c1:34:6b:f9:a5:af:69:f8:71:22:d9:28:2b:2a:dd:cd:23:
85:1a:40:bd:fd:81:ff:09:9c:ab:e1:49:ff:c2:74:31:bc:90:
d0:85:f3:43:c7:b0:95:fe:2a:ee:a6:21:31:1e:0c:0d:cc:9a:
07:d2:ce:19:7b:ad:b2:e4:bc:05:af:68:fc:f5:d0:be:9f:d7:
60:58:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:04 2025 by rpki-client