Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/D51z5aqcGfbYxrmHnqXiaxbj1iI.roa
File: D51z5aqcGfbYxrmHnqXiaxbj1iI.roa (raw, json)
Hash identifier: rY17htjKQL5QjMNoDlI7vE+zKUzgeHTLMRR2ZWB0b2o=
Subject key identifier: 0F:9D:73:E5:AA:9C:19:F6:D8:C6:B9:87:9E:A5:E2:6B:16:E3:D6:22
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C285E05CDFB8340F93BB1C09B9193
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/D51z5aqcGfbYxrmHnqXiaxbj1iI.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 89.248.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:5e:05:cd:fb:83:40:f9:3b:b1:c0:9b:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f9d73e5aa9c19f6d8c6b9879ea5e26b16e3d622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:09:b5:8b:64:cf:f4:2b:46:6b:9b:fd:49:
21:0b:42:bd:f7:6b:1d:c1:b5:66:3b:de:01:ff:15:
04:e6:65:d0:64:26:33:d6:fd:d0:d9:ea:42:8d:f2:
b6:77:0f:7f:a6:6b:37:0d:e7:10:94:d3:24:50:8a:
41:6b:ea:31:3c:f8:b2:32:97:47:54:2f:6a:6e:fb:
18:0c:17:5c:64:d5:ba:22:d2:f2:c6:ee:15:98:f6:
73:f3:c3:74:6c:c1:1b:20:7c:ce:c7:d1:7e:fd:c3:
f8:3b:66:8d:f9:84:ef:76:70:20:56:af:44:a7:12:
e0:10:5f:45:eb:d3:91:c2:28:bb:77:cd:2a:81:96:
88:dc:a7:89:34:20:3f:7a:ed:ba:48:fa:95:d3:f9:
3c:d7:9c:31:bd:db:3b:fb:7a:31:15:2a:2a:1c:4d:
b3:81:57:be:3b:8b:ba:b0:31:97:fb:b3:9c:e8:ef:
dd:9c:b6:1a:5a:ce:7c:57:74:2d:ec:0f:97:4d:cb:
bf:fa:ba:12:f9:59:0c:c8:8b:e9:7e:11:b1:62:b1:
da:82:76:b9:29:d1:35:fe:89:be:ad:5e:89:2d:65:
db:98:3e:23:88:e0:ff:6c:98:1a:29:bd:ca:5d:f9:
76:4a:97:1d:57:8b:19:cb:53:ce:7d:00:45:60:15:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:73:E5:AA:9C:19:F6:D8:C6:B9:87:9E:A5:E2:6B:16:E3:D6:22
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/D51z5aqcGfbYxrmHnqXiaxbj1iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.71.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e4:36:cc:33:b5:3b:b8:d4:be:3a:c7:5c:ed:47:44:14:7a:
dc:5a:0c:7c:ff:8b:0c:f0:d6:d2:4f:19:fc:48:62:95:09:35:
95:c5:59:cc:7b:0b:f5:1d:f2:fe:e3:95:62:e9:d4:fd:b9:83:
40:6e:87:18:a0:08:65:60:fc:37:4b:c4:3d:4e:9c:63:c3:31:
b9:2f:67:5c:d8:48:6f:9c:b0:01:b9:72:ee:aa:af:2c:dd:6f:
84:e3:a4:d6:f5:24:b9:f6:e7:e3:70:9a:4f:f2:33:46:98:31:
13:f6:fe:a1:30:ae:3f:a6:52:50:1f:ba:79:6e:85:b3:15:7a:
d2:a8:24:2c:59:88:23:47:f8:cb:33:68:59:eb:75:0c:3b:72:
f3:b3:ef:ab:e8:bc:52:cc:da:4b:ce:85:a0:f6:43:a9:b3:80:
5a:3b:d1:65:a6:3b:f5:f8:5d:a5:72:1b:5c:b8:ac:c8:13:3e:
d1:6d:71:00:04:4c:f9:96:f1:41:5f:41:9c:66:45:ac:dd:be:
ac:5b:67:40:75:90:67:b1:7f:ef:37:b6:59:4f:91:8f:0b:70:
0d:46:22:5d:83:66:b5:ad:9d:f3:a4:a2:9d:21:8c:94:2d:ef:
6e:02:a2:60:63:0b:9d:f9:c9:e1:1c:39:fd:db:33:1c:82:6d:
fa:60:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:07 2025 by rpki-client