Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa
File: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (raw, json)
Hash identifier: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=
Subject key identifier: AE:B2:7D:A0:94:C4:2A:35:98:DF:A1:FF:FB:26:F1:32:BC:5A:F0:05
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019427B5B8953EE73269E0942B7DCE1CF385
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49493
IP address blocks: 89.26.160.0/20 maxlen: 24
89.26.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b8:95:3e:e7:32:69:e0:94:2b:7d:ce:1c:f3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb27da094c42a3598dfa1fffb26f132bc5af005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:16:cd:39:9d:e7:c2:6f:dc:6a:c3:6b:4c:
b4:a2:23:66:41:da:e1:2c:c6:30:f2:73:d0:e9:fd:
3c:f9:50:d9:32:05:a8:56:56:bd:34:7e:69:8b:9d:
bd:f2:cc:d2:db:ae:c3:a6:9b:20:44:88:90:2f:f8:
e8:37:6d:d3:01:10:0f:ca:be:fb:da:3d:e8:ad:a2:
b1:ac:ec:92:a5:64:f0:c4:0c:93:1b:96:78:8e:c8:
79:01:b8:23:73:b5:7d:d1:6d:a6:6a:94:de:2c:ce:
7c:23:27:f3:59:3b:28:41:24:27:c4:1d:71:c8:d6:
b0:d9:91:39:a2:e1:9a:ca:4d:5f:44:bb:8a:ce:04:
ae:48:78:bb:88:a2:84:37:d7:a6:15:69:b0:d3:4b:
6f:32:46:ae:8c:e7:23:4d:a8:27:c7:5b:fb:3b:91:
98:35:9d:10:ff:3c:b5:17:1d:67:79:5c:30:cc:55:
3b:e3:b9:5d:11:17:12:f4:1c:09:88:36:94:ad:7d:
9a:54:26:39:60:bf:24:9e:55:60:74:53:9f:04:87:
af:4f:82:8d:4f:16:4a:3b:24:a5:ec:a2:8c:a9:87:
f8:a1:be:aa:bb:1f:cc:c9:02:68:66:86:e8:e6:95:
04:07:c9:a5:fd:43:1b:ff:4d:3f:6a:99:40:4c:95:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B2:7D:A0:94:C4:2A:35:98:DF:A1:FF:FB:26:F1:32:BC:5A:F0:05
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:8b:2a:be:d4:cd:4a:36:e7:22:b5:0e:36:a4:0d:f4:44:37:
64:a3:38:fd:6f:42:1d:17:ec:e8:07:b5:c5:d9:25:08:27:e2:
c5:aa:ab:8f:11:71:77:98:17:eb:0b:10:02:5e:a9:35:06:aa:
62:56:9a:c1:f9:e0:94:18:b2:71:4d:e5:ce:ae:2c:2a:db:fd:
39:52:60:28:25:bb:23:fe:4e:f9:0e:42:f7:76:96:fd:f3:2c:
c0:88:eb:3d:86:84:44:8d:10:f2:1c:86:ef:63:6b:d3:e1:72:
c5:9d:1f:3f:54:84:57:ea:7b:26:1f:47:ab:c5:13:33:db:30:
ce:93:aa:84:d8:71:0c:63:e9:4a:a9:b5:46:84:43:a2:b8:c6:
46:68:a4:57:89:25:70:a6:7f:57:6d:e1:26:2b:d3:b9:f0:d2:
05:9a:45:56:ee:7d:07:10:4a:a7:7a:a5:bd:8d:bb:98:6d:4f:
cf:bc:88:75:e7:8c:91:be:44:30:9a:5c:e4:79:b0:af:55:13:
74:fc:6c:aa:51:bb:a8:82:82:e7:99:88:f8:ef:5d:76:8a:49:
f2:c2:70:14:1d:d9:ba:2b:03:37:1c:ac:c2:88:fd:0e:81:9f:
cb:1d:59:80:7c:40:34:03:bb:42:45:8b:cc:7b:a8:f8:77:80:
31:78:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:53 2025 by rpki-client