Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/46sQ4Fe-myTUAZ1cVd8T7DiztDY.roa
File: 46sQ4Fe-myTUAZ1cVd8T7DiztDY.roa (raw, json)
Hash identifier: zb9987u/3/OdbRU+oey/SmrJsHqaTaP8Y4SDC3TcHXQ=
Subject key identifier: E3:AB:10:E0:57:BE:9B:24:D4:01:9D:5C:55:DF:13:EC:38:B3:B4:36
Certificate issuer: /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial: 01942143F2549DB4542FEE0142B6FBFFF489
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/46sQ4Fe-myTUAZ1cVd8T7DiztDY.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41381
IP address blocks: 89.105.64.0/21 maxlen: 24
89.105.72.0/22 maxlen: 24
2a01:7000::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f2:54:9d:b4:54:2f:ee:01:42:b6:fb:ff:f4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ab10e057be9b24d4019d5c55df13ec38b3b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:95:ee:e6:ac:20:51:d2:9d:76:26:62:ae:
52:ba:20:0a:1e:16:15:b7:3a:fd:10:d7:1d:84:2b:
ec:a0:d4:43:f1:84:47:09:2c:22:ff:fe:66:d8:d8:
4d:f6:b0:06:42:68:d5:01:83:38:b4:6a:0f:e8:2d:
f0:9d:d6:ea:e9:6a:a6:0c:64:41:1d:69:eb:75:2a:
2e:35:9c:4c:cd:87:a1:ed:bd:c1:71:9a:87:4d:a1:
5d:a9:25:90:f6:45:28:09:68:6e:53:75:7f:0f:ce:
84:4c:8b:7f:b3:34:91:be:5a:d8:3f:24:90:e0:ec:
b4:cf:85:15:db:5d:f4:bb:f2:89:a4:e0:3a:2f:97:
2c:d3:dc:44:c2:d5:0e:f4:96:c5:d4:00:b2:3f:e4:
5b:ff:8c:e1:e4:fc:f2:76:89:b3:39:e5:8d:81:88:
de:32:90:57:cc:b8:fe:fb:bb:6b:e9:05:e6:d6:62:
54:1b:e8:42:08:a0:f2:a5:0c:d0:bc:70:c6:b4:92:
11:1c:59:05:a5:e8:43:65:7f:bb:93:46:52:fb:c9:
06:2a:e1:fe:53:b8:bd:66:c2:d3:db:48:14:64:57:
ce:67:47:90:6f:1a:bd:02:9d:8d:73:87:2f:42:55:
7d:c4:de:c2:39:40:af:8c:ea:1a:4d:cb:2c:42:8e:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:10:E0:57:BE:9B:24:D4:01:9D:5C:55:DF:13:EC:38:B3:B4:36
X509v3 Authority Key Identifier:
keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/46sQ4Fe-myTUAZ1cVd8T7DiztDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.64.0-89.105.75.255
IPv6:
2a01:7000::/32
Signature Algorithm: sha256WithRSAEncryption
8b:38:5a:b8:48:75:dc:cf:c3:3e:bc:76:eb:d2:d1:79:7a:d3:
ba:ac:81:0a:ad:6b:5e:b2:b2:48:f7:d4:e7:dc:78:a2:3d:e5:
8e:21:95:5f:2e:21:ed:89:38:70:ff:1a:e3:84:a2:bd:a0:ac:
62:99:1e:0f:a1:79:88:f9:fc:66:c0:43:3f:55:9c:ac:62:9d:
a8:93:b6:96:dd:21:3e:f3:5a:55:3d:ac:7e:ce:21:d1:37:2b:
19:83:f6:26:f9:9f:9c:26:00:56:1d:b0:68:c4:5a:8c:d0:5b:
9d:72:4e:73:6f:64:32:79:b7:31:3a:c8:a3:de:70:93:97:30:
3c:76:24:ae:fa:37:77:b4:84:8f:b1:bb:3a:df:41:b8:d5:43:
3e:37:6d:ce:75:d6:08:67:ab:26:54:20:0a:4e:0a:e7:24:bb:
b4:82:92:79:f2:4c:2d:70:14:aa:32:82:cb:4e:56:82:d5:e0:
90:24:f0:53:ed:d6:4e:a3:9c:1d:50:3c:b5:c0:b9:bc:36:68:
47:da:2f:16:26:6e:ec:13:16:39:14:c2:41:d0:7d:49:1d:8e:
07:38:f2:bd:4f:9a:8c:99:2f:d6:9f:5d:6b:7d:31:cd:27:37:
05:b8:e5:a2:e9:5a:23:4e:d2:1f:85:73:9f:72:fa:c0:5a:4c:
1d:2b:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:25 2025 by rpki-client