Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa
File: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (raw, json)
Hash identifier: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=
Subject key identifier: 8F:51:1D:E4:BB:C7:7D:97:C4:C4:4C:D0:E9:AB:12:78:BA:A7:12:8F
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 019423D7326E4DD3B7A906D2D01FA8C27E3B
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 89.108.128.0/24 maxlen: 24
89.108.129.0/24 maxlen: 24
89.108.154.0/24 maxlen: 24
89.108.176.0/22 maxlen: 22
89.108.176.0/24 maxlen: 24
212.101.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:32:6e:4d:d3:b7:a9:06:d2:d0:1f:a8:c2:7e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f511de4bbc77d97c4c44cd0e9ab1278baa7128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:1a:de:80:c1:2b:41:96:b3:3a:47:1d:03:
96:66:be:9e:23:bd:14:ae:b4:6a:60:d5:ec:8e:22:
25:90:cd:ea:fd:88:58:04:bd:0e:c1:d6:03:e2:5c:
57:b6:8f:9a:ab:be:bb:eb:56:9d:c0:f4:b0:f9:b9:
53:5f:0e:f4:d4:55:62:98:73:a8:70:ab:0d:6e:f8:
95:62:a6:05:5f:61:27:68:e3:38:97:d5:dd:66:8e:
b6:23:80:d0:7e:4d:68:80:1d:f6:a5:95:fa:b6:ed:
e0:eb:da:3d:6c:c3:e9:d0:c8:4e:57:df:93:8d:0f:
55:af:07:8b:a2:9a:5c:7f:c4:0d:c9:ae:1d:73:63:
18:73:26:8d:e0:11:0c:7f:07:50:46:18:79:95:b4:
93:9f:ad:cc:cd:4e:35:a5:a8:c5:03:e4:95:59:a3:
9b:66:49:f5:7c:bb:72:91:49:2a:c1:f2:50:45:d8:
b6:c1:a1:62:87:2c:1a:57:bb:67:dc:bd:09:5f:03:
58:d9:db:26:ad:a3:07:65:82:4e:87:68:18:69:7d:
7b:bf:a2:40:81:dd:54:5f:b2:52:80:bc:12:44:ea:
74:9e:b2:5a:fc:d6:24:6b:87:1e:5c:7e:32:bd:e9:
2f:99:78:a4:96:63:fe:ff:a8:6c:f7:b8:54:3d:1e:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:51:1D:E4:BB:C7:7D:97:C4:C4:4C:D0:E9:AB:12:78:BA:A7:12:8F
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.128.0/23
89.108.154.0/24
89.108.176.0/22
212.101.249.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f2:9c:05:43:08:e3:9d:5d:1e:02:7f:c7:d6:b9:cd:fa:6e:
58:cd:28:f8:c4:b8:e9:fc:92:38:94:d8:16:27:d3:07:05:32:
d3:33:70:5c:5a:cb:42:f6:21:05:51:64:a2:99:06:58:cd:32:
1e:ed:ce:94:6f:1b:f2:cf:40:85:4f:57:9b:a1:8e:c9:8e:1b:
89:e2:96:b3:fb:2f:38:02:2a:fd:d0:ba:8c:69:72:28:c2:76:
46:be:1c:31:ce:91:24:e3:86:25:70:b4:47:4c:a4:02:9c:dc:
e2:0c:2b:90:32:f4:1f:64:97:02:5a:31:86:71:9a:15:69:ec:
c3:52:ab:f7:08:f4:b8:2f:0d:ce:1f:40:12:e7:af:43:1e:81:
1b:ac:b9:e6:7e:4c:5f:14:47:da:63:10:18:16:7c:43:73:bd:
70:df:26:41:2b:6b:8f:c0:f1:f0:02:f6:6b:66:50:1c:32:76:
ac:3a:50:aa:73:24:88:1b:4c:3f:c7:87:57:a6:6a:45:6d:e1:
01:68:fa:bb:c0:c3:2f:dd:46:cd:f4:bb:5f:d4:e2:91:e2:49:
b4:07:0d:fc:11:aa:0d:da:7e:50:e6:c1:1e:eb:30:0e:8c:ab:
6e:87:19:f4:50:1c:db:47:18:dd:b5:ec:e7:d4:99:ab:7d:c1:
25:95:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:40 2025 by rpki-client