Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/dUjWdWqHZ3bB28SlJrHRKXOFumI.roa
File: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (raw, json)
Hash identifier: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=
Subject key identifier: 75:48:D6:75:6A:87:67:76:C1:DB:C4:A5:26:B1:D1:29:73:85:BA:62
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019420D64F8101C2F687803594E21AAAAD28
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/dUjWdWqHZ3bB28SlJrHRKXOFumI.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202719
IP address blocks: 89.190.50.0/24 maxlen: 24
89.190.54.0/24 maxlen: 24
212.96.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4f:81:01:c2:f6:87:80:35:94:e2:1a:aa:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7548d6756a876776c1dbc4a526b1d1297385ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:75:d7:7b:1b:d5:16:e5:6b:7f:61:c6:5a:48:
6a:61:29:a6:d2:cc:f7:fa:6c:e1:a9:d3:9e:8c:20:
2b:81:c3:a7:2f:33:b1:8a:9b:ef:03:be:25:ae:ca:
80:8f:27:1a:ef:20:70:3c:53:e1:f8:49:59:77:12:
a5:1c:44:03:7d:3a:19:63:25:77:11:de:9b:0d:42:
56:86:17:dc:85:c3:af:ec:2e:6b:04:cd:00:ba:dc:
4e:db:b0:c1:57:ef:98:98:02:4e:63:f9:d6:73:bd:
5d:df:2c:79:4c:1e:ca:68:c2:d9:7e:c3:64:87:06:
fd:bf:08:72:9e:54:91:a3:8b:32:73:0b:0c:db:eb:
13:81:9d:2f:2d:1d:10:59:92:3a:ec:77:70:6c:62:
95:0e:24:09:b1:14:18:76:92:02:e2:46:d0:3a:c5:
5f:97:db:6d:8b:bb:e2:b1:7c:a0:6b:39:8d:cf:c9:
e9:43:b2:91:df:d6:ed:22:41:5e:0e:5d:b8:ca:aa:
10:97:4a:91:a2:73:d8:50:2e:0e:56:e9:b1:f5:16:
0b:74:2f:ad:d8:74:88:a0:fe:58:e4:16:41:93:76:
c7:22:90:21:49:f9:1a:50:23:4b:e0:3c:5f:d3:ec:
f9:ed:4b:78:41:4c:e4:a8:b6:5f:68:7b:90:3b:1e:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:D6:75:6A:87:67:76:C1:DB:C4:A5:26:B1:D1:29:73:85:BA:62
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/dUjWdWqHZ3bB28SlJrHRKXOFumI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.50.0/24
89.190.54.0/24
212.96.167.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d1:c4:e0:a0:65:ad:a6:41:a7:81:63:87:a4:72:6e:32:d3:
3c:13:d1:a4:fe:21:2f:da:57:43:d2:7b:58:78:b3:b3:31:81:
5e:07:67:ac:bc:4b:cc:61:93:a4:01:29:ba:f1:c9:10:cd:f8:
eb:d3:31:bd:67:42:42:f2:97:1b:ba:53:b3:47:65:04:ff:a2:
2f:2c:5e:df:bb:e7:80:f3:d6:50:3f:ba:59:63:07:86:de:a7:
7e:16:09:4f:5d:3f:d7:9b:f4:2e:9d:d3:9b:2b:c5:48:1f:dd:
f9:29:9c:5c:b0:a5:5c:40:4f:40:42:cb:e1:69:94:a1:da:2f:
3b:07:a4:31:83:96:4b:a9:04:74:dc:d1:36:dd:1f:d2:ac:75:
eb:02:e5:df:89:e2:ce:d3:61:91:f0:d9:c8:e1:fb:6e:8f:de:
01:ce:6e:64:ec:6a:d9:86:f2:73:1e:eb:0a:dc:fe:ee:7b:db:
89:bd:d0:05:9d:06:8e:7b:5d:f8:5b:5b:bc:4f:13:c7:8e:f3:
98:55:66:b8:b1:25:dc:5e:1a:a2:21:eb:29:1d:6f:1c:24:d1:
0d:b6:3a:00:e1:70:d3:6f:c9:d5:cb:f3:39:af:fb:38:53:ef:
d7:5b:7a:cf:fc:d7:17:c6:d1:d5:4c:8c:5e:e2:15:16:82:60:
af:f6:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:30:09 2025 by rpki-client