Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/k05adWa2w3LbPzFD5PPS-Y4ZXXA.roa
File: k05adWa2w3LbPzFD5PPS-Y4ZXXA.roa (raw, json)
Hash identifier: 7eE5wXY945/zBdqk2rQqMculQCT1SLNeLpVd4m3kvgQ=
Subject key identifier: 93:4E:5A:75:66:B6:C3:72:DB:3F:31:43:E4:F3:D2:F9:8E:19:5D:70
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019423D728BE93AF3663DF0BF938A7BD246C
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/k05adWa2w3LbPzFD5PPS-Y4ZXXA.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 939
IP address blocks: 89.105.196.0/24 maxlen: 24
89.105.219.0/24 maxlen: 24
89.105.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:28:be:93:af:36:63:df:0b:f9:38:a7:bd:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=934e5a7566b6c372db3f3143e4f3d2f98e195d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:89:5c:0c:54:ce:0b:a2:5e:81:87:bf:31:
5a:87:ab:42:3f:51:7e:ed:f8:be:f1:37:b3:ac:23:
f9:d7:65:06:e0:57:46:54:2f:44:20:98:2a:13:e2:
9e:e3:cb:f5:31:62:c5:0f:c9:d2:7c:1a:e5:20:41:
46:cf:0e:7e:5e:0e:6a:09:20:06:09:dd:ff:3e:9c:
86:50:05:92:ab:04:5d:fd:c8:11:eb:de:a1:92:15:
4e:c8:af:59:e6:34:e5:72:ae:4b:8b:f8:12:12:57:
d3:09:21:ee:3e:74:ac:34:1e:d0:e9:b1:ed:d5:0f:
41:67:4e:f2:75:4a:75:89:42:2c:f5:01:1e:4d:64:
e5:21:f4:63:ea:2e:60:c9:0f:79:33:9f:89:31:b2:
9c:b4:3a:34:2f:97:c0:0e:ac:07:a1:b2:d9:d3:f7:
1c:3e:68:00:74:3f:17:cc:ce:16:cf:1d:60:dd:e8:
b8:3d:89:3b:b1:68:cf:69:e7:dc:e7:21:5c:64:b3:
10:cc:1b:c4:a0:0e:b1:64:ae:fe:bc:5d:7e:24:fc:
c9:4d:a8:3d:a4:88:2b:46:39:9a:fd:51:75:88:23:
bf:82:25:10:02:d7:9c:d2:a6:c7:11:fa:42:90:98:
3e:22:e0:f3:c9:06:e0:62:84:61:05:05:04:10:60:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:5A:75:66:B6:C3:72:DB:3F:31:43:E4:F3:D2:F9:8E:19:5D:70
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/k05adWa2w3LbPzFD5PPS-Y4ZXXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.196.0/24
89.105.219.0-89.105.220.255
Signature Algorithm: sha256WithRSAEncryption
09:44:a4:32:2f:e4:c3:a9:44:aa:6b:09:95:c8:64:c9:77:8e:
31:01:26:ae:4e:2a:41:b1:9d:8b:ce:59:c4:f7:8e:06:f4:19:
75:1c:e8:60:96:53:9a:27:e5:e2:a8:73:58:97:fd:ad:2b:b5:
e4:87:4e:d4:5b:e1:cb:7e:84:3e:1a:89:0a:35:18:8f:a2:86:
0d:19:a8:b8:c4:c1:79:09:a8:9f:21:13:2a:f7:4a:68:4b:99:
43:a3:92:8c:38:16:3d:b2:ba:9a:3e:69:65:50:7d:be:37:e1:
52:aa:a8:95:6c:89:71:f8:9e:7c:11:12:ef:e9:43:08:61:c3:
3e:ea:8b:0e:6c:4b:f3:b6:90:84:b9:14:23:43:c8:28:14:49:
48:68:f5:13:92:e5:01:59:9b:96:28:73:5a:20:42:86:e9:69:
61:3a:8c:26:80:a5:78:3f:55:73:1f:89:53:cd:f3:f0:6d:91:
7a:b6:02:b4:f9:bd:9b:4a:4b:ca:c6:7b:dd:f4:ca:f9:0e:ef:
6f:b0:01:ec:84:38:2b:b6:44:da:08:f4:51:6d:13:8f:f5:77:
d8:cd:d8:d2:23:18:5c:95:22:0f:02:88:13:bc:af:4c:97:60:
5b:0f:22:9b:b4:64:a6:fd:0d:e1:13:9a:3a:9c:0e:d5:e5:b8:
39:8a:bd:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:08 2025 by rpki-client