Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/x6WyfN8IVN62gZgewVASQApkl9g.roa
File: x6WyfN8IVN62gZgewVASQApkl9g.roa (raw, json)
Hash identifier: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=
Subject key identifier: C7:A5:B2:7C:DF:08:54:DE:B6:81:98:1E:C1:50:12:40:0A:64:97:D8
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 019423D7342E321D4F83A312F08C7B5C8903
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/x6WyfN8IVN62gZgewVASQApkl9g.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201544
IP address blocks: 89.108.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:34:2e:32:1d:4f:83:a3:12:f0:8c:7b:5c:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7a5b27cdf0854deb681981ec15012400a6497d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:c4:c7:ab:4d:6c:30:c3:13:55:a3:16:95:
82:f3:9c:be:c9:e3:66:b2:cb:a1:c6:9a:31:63:18:
ba:ce:f0:8d:b1:7e:f4:e6:1d:bf:a5:fb:89:6d:95:
0f:3e:6f:73:78:1f:be:68:54:b8:c9:c6:ff:6c:ae:
f5:1b:a6:79:41:df:80:0a:5b:43:c2:0c:bd:50:0f:
8e:f9:35:c1:b9:4d:1b:bf:e5:ef:04:d1:be:8b:c0:
38:59:7f:32:af:d1:16:95:5b:80:03:6b:4e:37:64:
b3:ea:13:f5:c7:51:1e:6c:66:6c:f5:ce:1b:39:33:
5b:8e:6c:c3:30:33:0d:75:28:69:4b:84:e7:1a:73:
c6:2f:de:28:95:f6:4a:88:68:82:21:64:e7:ae:05:
d9:67:ba:e6:a1:37:18:02:36:7b:d3:67:1f:bb:e3:
e6:19:26:39:7e:0c:b5:c6:d2:7f:e9:49:84:03:09:
01:40:45:d1:9b:87:13:6e:8d:13:e9:4e:cb:31:e0:
d6:2c:1a:30:ac:79:5c:34:00:28:02:11:5f:4c:c4:
73:a3:cd:1b:f4:4f:ec:02:ae:68:eb:da:e4:b4:66:
6e:39:b5:68:c9:12:56:08:0c:06:3f:11:bb:14:29:
ab:d0:b5:23:af:6b:2b:82:f2:1b:eb:01:23:7f:dd:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:B2:7C:DF:08:54:DE:B6:81:98:1E:C1:50:12:40:0A:64:97:D8
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/x6WyfN8IVN62gZgewVASQApkl9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.134.0/24
Signature Algorithm: sha256WithRSAEncryption
07:01:3e:6c:95:5e:fb:83:93:7d:55:d6:bd:a4:f2:4c:fb:f8:
ff:ec:18:fe:2b:59:55:90:fc:66:58:b0:33:ae:86:f7:60:76:
e3:dd:45:07:5f:07:71:bc:5a:56:be:88:90:d9:40:07:d4:51:
ba:06:d1:09:12:3b:f2:4a:bd:b1:12:ae:0f:41:1e:a7:2d:38:
1c:08:70:22:88:ac:a3:78:5e:dd:fc:4c:97:63:bf:a8:0d:b7:
9e:6c:b9:c5:db:f3:b7:cb:36:06:1c:bd:39:14:92:08:52:22:
3e:0b:c6:86:28:4f:48:a0:2b:6d:24:24:ad:ce:6f:3b:72:2c:
1a:fe:a4:b3:32:7c:6b:dc:f4:7d:fa:76:2d:ab:ee:01:86:c7:
e3:f6:35:80:d5:62:3a:c0:46:09:85:ff:8a:30:30:eb:7c:93:
c4:43:b0:c7:cd:4a:05:fb:7f:77:e9:11:a1:91:d1:be:00:ba:
56:2f:52:f5:33:f4:04:6f:2e:b6:a3:e5:0f:b7:58:08:b9:bb:
b2:e3:15:89:a2:83:35:76:28:70:e5:48:66:23:e1:f2:41:1d:
14:b1:44:7f:b0:61:b6:63:a2:08:5a:e4:84:b3:1a:f1:1e:e0:
35:43:8c:60:a5:09:cc:54:53:2b:89:8e:90:e5:56:94:f8:1f:
92:f9:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:55 2025 by rpki-client