Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/s8IxW5tuKoaeGci5PMMsvkBpqVA.roa
File: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (raw, json)
Hash identifier: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=
Subject key identifier: B3:C2:31:5B:9B:6E:2A:86:9E:19:C8:B9:3C:C3:2C:BE:40:69:A9:50
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 01941FFA6AC355B87F51D883B06D069E9D61
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/s8IxW5tuKoaeGci5PMMsvkBpqVA.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215264
IP address blocks: 89.187.93.0/24 maxlen: 24
2a14:2540::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6a:c3:55:b8:7f:51:d8:83:b0:6d:06:9e:9d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c2315b9b6e2a869e19c8b93cc32cbe4069a950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:d2:3a:98:3c:89:43:3c:84:90:c2:26:6f:
a0:26:51:92:65:67:25:2f:73:de:1d:bc:64:8f:2d:
01:2c:bc:ce:f6:fa:f5:3e:1c:94:ea:94:73:9a:7d:
5b:ad:e0:18:d6:1d:c5:c1:8c:44:58:dc:62:94:2c:
71:bf:65:74:14:1d:77:33:3f:bb:bc:ee:a8:6f:27:
3f:ec:11:43:34:18:be:2c:e2:e4:23:0c:58:c1:d0:
08:26:e0:b5:81:2f:c4:4a:ae:b1:0d:2c:48:00:da:
65:fc:a5:48:75:91:41:a9:f2:e8:2a:a1:c6:15:30:
04:9d:bb:da:75:c5:67:a2:df:33:3a:4b:5c:84:5e:
bd:9c:39:09:a9:cd:35:99:82:28:16:d9:9c:1c:ee:
4a:ea:6e:1d:c3:39:5a:d9:7b:a9:a2:65:24:e9:dd:
6c:f0:47:56:56:fe:1e:cb:2e:c7:7d:19:4b:fd:13:
f4:8b:ee:07:c2:a2:d4:57:d1:20:9e:76:8d:bc:cf:
c6:5d:c6:c7:73:3f:45:79:5c:37:da:6b:df:ec:de:
06:22:6e:90:70:7b:97:15:c0:a0:23:ba:40:3a:7b:
cd:ce:02:f7:a9:2b:9f:c4:36:f1:8e:84:9a:a2:8a:
8f:6f:79:d7:50:db:58:de:b6:7e:10:66:04:b9:99:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C2:31:5B:9B:6E:2A:86:9E:19:C8:B9:3C:C3:2C:BE:40:69:A9:50
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/s8IxW5tuKoaeGci5PMMsvkBpqVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.93.0/24
IPv6:
2a14:2540::/29
Signature Algorithm: sha256WithRSAEncryption
49:a4:9d:24:b1:84:7d:19:87:5d:32:41:b9:03:d8:25:76:3a:
0d:57:01:70:1c:f9:98:f6:52:d2:2b:03:60:c8:9c:bd:6f:30:
9f:60:99:eb:20:8a:75:e1:42:41:6d:3a:9d:0f:2f:52:03:7f:
d9:f0:45:4a:46:88:c1:a5:ad:9a:f6:e6:3a:61:04:2f:56:9a:
21:4b:b1:0b:87:0a:ba:cb:f3:1e:b5:1b:ec:31:da:f6:6e:ee:
4c:17:c1:55:4c:2d:b3:ad:c9:22:98:f9:fc:fb:7f:5c:51:62:
6e:d3:9f:96:fc:1e:fe:39:e0:5a:b1:5a:27:19:d2:b1:3d:34:
ea:8f:5d:93:ec:25:22:73:63:be:f3:16:d0:aa:28:f0:c0:4c:
b7:88:fb:62:47:1c:a8:a2:bc:d9:4f:fe:8f:de:a2:07:f5:61:
a5:7e:34:eb:cb:fd:db:ab:1e:42:c0:b7:83:8a:1a:bf:15:ae:
32:ed:b1:04:48:5b:20:fb:fc:17:71:63:21:80:22:8e:cd:aa:
d7:f6:c7:f4:2e:09:72:0e:f9:58:06:ca:65:49:91:98:41:b1:
bb:a1:99:fe:0c:9f:a4:98:4b:38:58:f3:a4:75:ed:4f:68:af:
96:9a:b0:4b:28:c9:cb:61:a3:49:e3:cf:0f:4e:eb:aa:d2:6a:
2d:be:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:35 2025 by rpki-client