Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ieQTx6CP3a7pTIIHIMrrAAmEFz0.roa
File: ieQTx6CP3a7pTIIHIMrrAAmEFz0.roa (raw, json)
Hash identifier: QqFs1HPccubP6WhcXS31Mxveg00kkTXlQBLQNg73HiQ=
Subject key identifier: 89:E4:13:C7:A0:8F:DD:AE:E9:4C:82:07:20:CA:EB:00:09:84:17:3D
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01949DE5205C183A239F42BA94DB6798CF98
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ieQTx6CP3a7pTIIHIMrrAAmEFz0.roa
Signing time: Sat 25 Jan 2025 14:37:06 +0000
ROA not before: Sat 25 Jan 2025 14:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
109.122.254.0/23 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:e5:20:5c:18:3a:23:9f:42:ba:94:db:67:98:cf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 25 14:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89e413c7a08fddaee94c820720caeb000984173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:de:b4:fb:74:7f:c9:4a:33:3f:67:b4:e5:
63:2c:a9:44:91:2f:cd:ff:38:f1:72:cc:6f:7f:25:
d7:9b:dc:82:00:9c:43:b9:e5:54:4d:c0:50:68:5e:
f4:be:b7:f0:a1:5d:0e:b5:e1:fd:ac:84:7e:e6:2d:
d2:5d:ab:67:be:1d:1f:dc:33:df:a7:f7:07:62:7e:
0f:e3:cf:0d:04:4b:80:ef:02:59:3e:74:51:90:88:
70:26:80:1e:81:63:b3:d8:8b:c3:63:f1:d4:b3:ba:
b5:2c:93:06:2a:91:c0:c5:38:8c:16:ce:23:8d:13:
a0:39:49:ed:7f:0f:f9:11:fc:26:75:de:a5:bf:8a:
59:9f:11:e0:d0:13:6a:8f:99:33:8d:83:97:ff:d5:
2d:e4:90:83:ca:32:80:87:a5:c2:6a:8b:70:5c:d2:
f8:6a:72:e4:0a:29:6f:4b:34:9b:79:b4:b9:ea:10:
e5:36:36:01:73:12:be:d9:a9:c0:d1:f5:5d:7c:f0:
5f:e1:82:2f:8f:0c:0f:67:fd:d9:21:e3:37:24:24:
53:67:3e:83:ca:d4:a9:a8:ba:53:4e:2f:ba:1d:b8:
a5:04:82:1d:d2:fd:73:ac:58:2d:0a:1b:0d:17:2a:
12:a0:53:5e:6f:61:42:d5:25:ff:17:94:59:9a:77:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:13:C7:A0:8F:DD:AE:E9:4C:82:07:20:CA:EB:00:09:84:17:3D
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ieQTx6CP3a7pTIIHIMrrAAmEFz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
89.46.217.0/24
109.122.254.0/23
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:11:20:0e:53:0b:27:0f:7d:b3:22:4d:3a:13:4a:91:d0:97:
4c:95:db:d7:99:36:65:58:c5:fc:bc:b5:08:28:22:40:15:70:
bf:f2:24:c3:d9:41:ad:96:eb:6c:9f:72:6b:bd:ef:f4:49:ad:
0d:51:19:b5:6d:6c:52:10:7d:a0:be:05:93:1a:4e:53:54:94:
4e:80:e8:34:94:dc:ab:06:ff:b8:f4:07:96:a4:c3:07:8b:41:
12:e7:5b:bc:58:60:77:8c:0f:0d:99:13:38:16:d4:85:30:98:
47:58:2c:ed:b4:8e:e3:61:5e:e5:dd:da:dc:8e:ba:22:4d:1d:
b2:0f:9e:fb:66:de:01:cc:14:af:06:99:05:79:78:fe:45:ea:
bf:6d:6d:52:9a:5f:a5:56:1b:eb:be:f8:74:26:62:68:92:c2:
d3:c5:25:13:b8:b3:56:ad:94:80:31:35:99:35:a0:38:20:a6:
b5:e0:b9:2a:00:fb:cb:50:5e:2e:b4:e8:26:88:7c:dd:fa:26:
af:75:bb:12:d7:7a:de:44:1a:47:33:e9:fc:72:f3:13:a8:74:
4c:60:a3:1e:17:b6:47:56:5a:7d:5d:03:1a:f2:b1:a7:59:32:
a5:80:6c:6d:a4:8d:80:0e:ef:60:0b:86:54:4a:3e:46:d6:73:
43:db:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:50 2025 by rpki-client