Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/k8Tsh2igTKK0UWxKZTZKxjOauZg.roa
File: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (raw, json)
Hash identifier: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=
Subject key identifier: 93:C4:EC:87:68:A0:4C:A2:B4:51:6C:4A:65:36:4A:C6:33:9A:B9:98
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019427B60E21145EB638443917EEC04115F2
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/k8Tsh2igTKK0UWxKZTZKxjOauZg.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47860
IP address blocks: 89.188.160.0/24 maxlen: 24
89.188.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0e:21:14:5e:b6:38:44:39:17:ee:c0:41:15:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93c4ec8768a04ca2b4516c4a65364ac6339ab998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:e1:6b:4c:4a:30:11:f5:3d:dc:50:37:36:
e2:e6:a6:9c:87:9a:ce:0e:90:70:ef:c2:6a:cc:40:
63:7c:c4:69:fd:64:9f:93:ff:5d:34:4a:f3:3c:71:
6c:20:c6:33:54:d4:99:32:39:7e:9b:39:08:bd:04:
c6:f3:6e:95:10:87:de:98:c5:99:f1:be:62:11:0a:
32:33:5c:51:77:9b:e4:c0:2c:0f:43:59:b7:b2:6e:
c9:f3:42:e2:00:16:86:bf:4a:64:47:ce:d1:95:5f:
14:92:56:f0:63:33:d5:40:c1:09:db:de:03:b8:82:
bb:3a:ca:26:91:e3:92:0b:83:3f:95:e0:97:48:7f:
6c:58:1a:84:87:cd:5c:d6:38:74:1e:db:87:40:37:
57:bf:65:3e:03:05:51:7d:d0:7b:39:27:9c:75:7d:
84:bb:a1:6f:c4:a3:ba:08:c4:40:c0:b3:31:f0:3a:
da:3a:b9:f4:eb:bb:89:17:4b:17:cb:3d:6b:2c:3e:
eb:b1:86:da:08:ea:96:0a:eb:d5:2f:6f:e6:42:7d:
d1:04:f6:eb:1d:8a:4b:b1:db:fe:aa:47:4f:91:1f:
7a:ec:27:89:e3:1c:5e:19:59:a1:f9:5b:cf:a5:64:
a7:4d:6f:29:cc:72:df:1a:c8:6e:34:4c:76:3b:47:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:EC:87:68:A0:4C:A2:B4:51:6C:4A:65:36:4A:C6:33:9A:B9:98
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/k8Tsh2igTKK0UWxKZTZKxjOauZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.160.0/24
89.188.180.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:63:df:75:4f:18:30:01:94:1b:bd:70:0a:37:13:8a:c0:a3:
eb:e1:29:05:56:ee:1e:06:38:6a:2e:ee:5e:7b:bc:28:5a:43:
5c:f4:62:a7:73:e6:72:61:8f:66:d9:4b:38:0a:d5:2e:6d:de:
0b:e3:17:2c:11:54:22:54:2f:dd:c9:0f:46:d3:af:2f:f2:ce:
56:b3:25:6d:87:79:0d:6c:89:9a:23:11:30:0a:19:d5:84:1d:
bf:de:d2:c2:1c:2e:af:61:aa:fc:f2:fe:63:02:9c:ee:3f:e2:
da:e2:79:94:a8:72:90:45:db:18:15:ab:9c:b4:92:77:92:cd:
32:d4:fc:f6:17:03:e4:c8:86:a6:26:5e:a7:7e:de:e8:e6:32:
e8:89:ce:a9:8d:19:16:3d:08:f6:7a:ab:e2:e7:0d:b9:29:f5:
9a:d6:9a:c9:41:f4:1c:2d:e0:2d:b7:ae:8c:ea:be:f8:8b:2e:
73:1f:8b:a4:1c:f3:33:84:81:d0:76:bb:f2:f8:b8:96:81:67:
fe:d1:f5:68:f9:5d:dd:55:88:3b:97:53:d6:8f:65:60:08:78:
8f:2d:5a:d4:82:6e:45:e3:fe:6f:17:90:89:31:f3:81:17:5b:
ed:6d:41:2e:29:51:2e:44:b8:40:d2:3e:e9:da:68:05:91:58:
fb:c4:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:26 2025 by rpki-client