Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/4No-RV70VYPprGbilfZK449S1jE.roa
File: 4No-RV70VYPprGbilfZK449S1jE.roa (raw, json)
Hash identifier: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=
Subject key identifier: E0:DA:3E:45:5E:F4:55:83:E9:AC:66:E2:95:F6:4A:E3:8F:52:D6:31
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 01942067C95574CA7627F679ADC698E2583D
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/4No-RV70VYPprGbilfZK449S1jE.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48109
IP address blocks: 89.31.192.0/21 maxlen: 21
89.31.192.0/24 maxlen: 24
89.31.193.0/24 maxlen: 24
89.31.194.0/24 maxlen: 24
89.31.195.0/24 maxlen: 24
89.31.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c9:55:74:ca:76:27:f6:79:ad:c6:98:e2:58:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0da3e455ef45583e9ac66e295f64ae38f52d631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:f2:5f:59:12:95:07:b8:c5:57:04:b6:c3:
2e:3b:4f:d2:0a:30:fd:53:a1:fb:e5:13:34:81:22:
d2:92:62:38:53:c4:ad:bc:a8:e9:8b:c4:a8:46:2b:
9a:72:e7:70:e0:0b:9d:5e:fb:06:bb:01:96:1b:a3:
e5:69:c8:20:4f:0f:71:35:55:c8:0c:59:d1:f3:26:
9a:ac:60:f1:d2:64:b2:48:89:63:56:a4:d4:b6:cc:
20:ef:8a:bc:5f:78:96:3f:f2:10:4f:6a:81:e6:45:
8a:9a:af:f9:e0:b7:aa:e1:58:31:90:5b:7f:b7:b7:
93:79:b9:90:bd:14:c6:1d:95:1b:11:c3:aa:c3:81:
f0:39:2d:1e:22:6a:23:9a:0a:77:26:b6:02:bc:fe:
1a:a4:30:9e:ee:71:39:04:68:9e:ff:57:ba:2d:24:
6c:57:ba:31:c7:7c:f4:da:07:5e:77:a9:87:9f:1d:
b7:cd:83:11:4e:9e:78:b6:d1:64:a4:e3:ba:c9:85:
e3:98:1a:fd:9a:ab:c6:25:9a:87:10:c3:3c:02:75:
5f:31:9d:88:83:05:39:de:70:de:c3:50:2f:b3:2c:
2f:0e:b8:30:4d:e4:6c:50:6b:b1:86:7f:ff:44:4b:
9f:5f:2b:e6:8d:00:3c:77:2a:0f:74:c2:2e:c0:6c:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DA:3E:45:5E:F4:55:83:E9:AC:66:E2:95:F6:4A:E3:8F:52:D6:31
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/4No-RV70VYPprGbilfZK449S1jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.192.0/21
Signature Algorithm: sha256WithRSAEncryption
64:a2:22:41:40:5b:6c:9b:dd:07:da:99:25:18:8e:d1:e4:05:
c9:24:75:ea:33:92:52:d7:2d:eb:8b:0e:ec:4f:bf:77:4e:19:
f5:6e:73:97:47:ce:f8:6b:f5:67:3d:cd:9a:8a:d4:30:ac:2c:
d2:c6:9e:37:53:69:5f:13:3d:22:d4:c1:b8:b7:3e:21:73:c9:
cb:f6:11:29:03:c1:f9:ae:90:09:ac:bc:e7:5b:da:10:d0:d5:
b2:8b:ac:01:23:41:fe:0c:77:5f:8a:b7:3c:bb:d2:b8:ce:40:
8f:ef:dd:ef:87:cb:85:47:b5:c9:42:6d:7c:57:3b:81:ca:ad:
2d:ba:bb:25:f3:01:3e:2d:5e:f2:7e:09:a9:04:fb:d5:86:49:
c8:0a:97:7d:0f:8f:27:dc:05:39:26:5e:9f:71:78:70:5c:34:
e4:cd:a3:a0:d8:fb:6f:7b:64:81:f7:1b:7f:38:0d:6e:ff:c6:
ac:60:e0:79:a4:31:5b:2c:fc:f9:32:fc:cd:26:c9:22:ba:03:
0b:f2:ef:1c:35:39:f1:96:04:f9:29:e2:ad:e4:db:14:e6:f2:
68:b1:0c:80:53:c5:d3:8b:56:d6:e3:04:d3:9b:c6:64:f5:57:
83:24:b6:cc:12:96:3c:f1:71:7a:24:48:ff:9e:83:4e:a0:0d:
44:35:6a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:55 2025 by rpki-client