Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa
File: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (raw, json)
Hash identifier: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=
Subject key identifier: 4E:7A:96:89:94:AB:24:FE:45:64:B8:03:95:79:3E:89:A1:62:E6:4F
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F3C3A906A86E343577828F5D54B41
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa
Signing time: Wed 01 Jan 2025 13:47:39 +0000
ROA not before: Wed 01 Jan 2025 13:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42679
IP address blocks: 89.164.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3c:3a:90:6a:86:e3:43:57:78:28:f5:d5:4b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e7a968994ab24fe4564b80395793e89a162e64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:0a:9a:f3:84:c5:40:db:47:4f:d8:a1:62:
88:85:49:2c:9f:63:94:40:ba:8a:8c:6b:c8:4e:de:
84:6c:85:21:fb:a4:32:c9:31:45:e6:a7:fa:6e:bf:
70:63:86:94:76:91:46:89:ce:6c:e6:16:10:a2:fb:
ff:41:2c:cd:11:c4:b6:f5:4b:1c:98:26:85:2f:97:
83:88:55:a5:32:6a:f1:a4:18:da:13:bf:dd:d6:9d:
1a:41:2d:a8:20:db:21:5e:42:cd:6a:e2:57:d6:9c:
0a:ec:8a:18:d1:a5:f5:80:01:43:4a:21:df:96:d9:
cc:21:96:8d:33:37:a3:f9:15:c8:f0:55:83:12:e1:
ea:10:a9:a8:78:ed:6d:86:1c:2c:a4:82:b0:e9:ef:
c3:3b:f3:0f:5b:23:b9:14:9a:7b:35:d4:1d:4c:61:
0d:73:cf:d2:f6:17:15:dc:05:62:12:e5:03:77:a2:
33:29:ac:d1:1e:44:89:1d:34:e4:e5:89:51:96:ee:
08:d9:1a:08:b4:d9:28:22:98:e4:6b:08:2f:83:40:
22:8d:bc:c2:b5:d3:d1:c7:99:d5:42:12:49:52:88:
70:4a:8d:c0:6a:e9:d5:d0:b9:9a:c9:72:4b:80:d5:
f0:ee:d5:bd:0f:2a:8b:89:19:ae:74:d2:b6:24:7e:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:96:89:94:AB:24:FE:45:64:B8:03:95:79:3E:89:A1:62:E6:4F
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.164.96.0/24
Signature Algorithm: sha256WithRSAEncryption
89:99:1c:5b:95:fd:a7:75:2a:1d:c3:9e:82:5d:b7:33:c0:8b:
c5:e6:2d:1c:a7:22:76:a3:58:da:41:3e:21:a1:5a:a4:32:8d:
4e:a7:c7:24:7e:8d:e5:cf:f1:9e:23:a9:d3:64:ef:dc:bb:21:
10:a7:89:41:5d:84:7f:dd:83:33:72:9c:b8:fd:9f:ec:67:75:
9d:e4:de:a7:0e:c4:21:7e:f3:d0:47:98:d8:52:46:0f:60:4d:
68:9f:13:ef:49:f0:8c:65:f5:ed:cd:e7:56:02:cc:4f:cf:7e:
13:32:fa:53:d8:e9:49:c0:2b:60:7e:3c:84:d7:0d:17:37:52:
95:96:3e:0c:e9:fd:13:32:53:f2:c2:e0:27:d5:8e:40:65:e5:
e8:af:44:14:ac:e2:8b:b9:55:b5:12:d8:2f:8e:aa:35:ad:55:
17:85:e5:65:44:69:63:e2:44:ec:f9:fb:a1:39:f0:7b:0f:bb:
65:9b:78:40:e7:f7:a5:b1:bb:a8:75:60:07:9e:8a:5c:e2:2f:
c2:71:16:bd:88:43:58:d0:da:e7:d9:ef:12:1c:e2:ad:17:ed:
7c:e3:d6:bf:02:e6:88:1d:35:04:1c:2d:ca:8f:7f:f0:a9:9f:
d3:30:8b:8c:49:45:91:10:e7:21:bc:e6:a1:ca:2f:28:81:0d:
50:b8:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:32 2025 by rpki-client