Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/BeECX5eJFfyGwemrzzJizOKE4xI.roa
File: BeECX5eJFfyGwemrzzJizOKE4xI.roa (raw, json)
Hash identifier: LnKd8SA4nwF4lOHNh/WuPipE/qVLC5TOIq7F+R9q7zE=
Subject key identifier: 05:E1:02:5F:97:89:15:FC:86:C1:E9:AB:CF:32:62:CC:E2:84:E3:12
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 019423D6FE9DF1C55EE7BFB61EB849502A70
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/BeECX5eJFfyGwemrzzJizOKE4xI.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25319
IP address blocks: 89.32.224.0/20 maxlen: 24
89.32.226.0/24 maxlen: 24
185.108.180.0/22 maxlen: 24
185.108.180.0/24 maxlen: 24
185.108.181.0/24 maxlen: 24
185.108.182.0/24 maxlen: 24
185.108.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fe:9d:f1:c5:5e:e7:bf:b6:1e:b8:49:50:2a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05e1025f978915fc86c1e9abcf3262cce284e312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:9d:a6:42:44:2a:62:29:08:f9:c9:5c:1b:
52:7c:8e:96:3f:b9:1f:b2:10:f1:80:a9:65:a8:47:
f7:b6:d7:a4:e0:79:1a:3e:ed:72:06:83:37:d5:d5:
4b:0a:34:1a:66:35:da:76:a7:e4:c6:28:53:4e:ca:
3b:df:b6:90:3f:5a:c9:e3:fa:03:fe:61:77:53:4d:
21:15:8b:f6:25:bc:bf:ba:b7:c1:c2:32:b3:02:ca:
64:60:99:3a:a8:e8:e8:b8:8f:a9:35:f2:b2:a0:79:
2e:ed:a9:f2:0e:9a:94:ff:3c:be:a6:5c:a8:5d:ad:
d4:40:c8:4d:de:be:63:37:52:65:c2:ae:90:59:0b:
96:ab:fb:bd:64:4d:79:06:cc:d4:ab:1b:aa:a7:c6:
34:9e:0b:1f:34:2c:fa:9a:89:4b:5b:1b:f7:7a:06:
b1:da:a8:0c:6a:33:49:9f:55:f5:4f:07:27:26:1c:
d9:80:1e:18:c3:7a:4d:16:21:78:d7:80:61:de:d6:
c7:3e:2f:79:af:c7:68:eb:a8:35:1c:35:c5:63:a0:
3d:70:a1:2a:05:23:d9:a1:c0:ea:b4:c7:e7:e4:0b:
a3:e3:29:05:bd:d6:d8:68:61:3c:22:2b:06:d6:ec:
98:d0:3d:b2:05:5d:55:08:83:51:84:f5:ed:5b:98:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:02:5F:97:89:15:FC:86:C1:E9:AB:CF:32:62:CC:E2:84:E3:12
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/BeECX5eJFfyGwemrzzJizOKE4xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.224.0/20
185.108.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b6:78:c3:9d:b3:37:49:15:49:44:c0:fd:a6:e0:80:c1:56:
7e:b6:a8:7b:cf:0f:ca:b6:e0:90:0a:30:8b:26:06:fa:a4:be:
88:bb:9c:d0:1a:31:9d:2e:57:99:a3:f0:ec:ba:08:72:57:8b:
78:3a:e5:43:a2:b8:54:3c:c6:01:50:33:95:b8:8c:98:04:6b:
9f:b3:ff:aa:a6:71:48:4b:e6:3b:47:3d:70:e0:16:d0:1e:ed:
83:d5:28:06:e9:a7:1f:46:83:ea:e5:5b:80:21:4a:8e:c4:e6:
a5:23:7a:af:0f:80:e6:7d:1c:99:88:2a:74:8a:3b:ab:ca:5c:
9a:21:36:67:53:d2:e2:53:66:83:08:10:5a:6c:e4:fc:61:c2:
f3:dc:1d:99:6b:24:46:38:54:d2:53:da:90:77:d4:1d:5f:95:
07:f9:08:f8:8f:a8:cc:67:73:b9:4b:f6:14:4a:7c:7c:80:eb:
c3:ab:3b:cf:33:78:11:33:46:d6:1f:27:ce:ef:26:9a:cb:e7:
c0:22:d3:24:22:bb:85:fd:2f:9c:d9:ac:20:3b:ca:63:b2:2a:
be:13:50:f8:40:84:4c:14:19:86:f7:6c:3d:6a:b1:8f:49:01:
d9:dd:c2:ae:a3:d2:fd:41:4f:6e:50:ca:80:75:53:f5:0b:62:
a5:6e:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:52 2025 by rpki-client