Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/2z6xkXbqv_ekGa4urD7tLYHp_WU.roa
File: 2z6xkXbqv_ekGa4urD7tLYHp_WU.roa (raw, json)
Hash identifier: cih/LiMXO2nwHU+ROMdWyTr/X5GT5kWdEpR1MMI2ySE=
Subject key identifier: DB:3E:B1:91:76:EA:BF:F7:A4:19:AE:2E:AC:3E:ED:2D:81:E9:FD:65
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 018A0E54612F40054EC63A778F61AE1DE37A
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/2z6xkXbqv_ekGa4urD7tLYHp_WU.roa
Signing time: Sat 19 Aug 2023 15:05:25 +0000
ROA not before: Sat 19 Aug 2023 15:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39758
IP address blocks: 89.36.21.0/24 maxlen: 24
193.203.204.0/23 maxlen: 23
93.115.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:54:61:2f:40:05:4e:c6:3a:77:8f:61:ae:1d:e3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: Aug 19 15:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db3eb19176eabff7a419ae2eac3eed2d81e9fd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:3b:0b:72:0f:02:0e:1e:90:db:79:cb:7e:
c0:e1:d9:a9:c7:d9:c1:32:5b:3b:c5:2d:ff:08:44:
d8:c5:7c:4c:7b:2b:51:27:58:7c:ea:ea:1e:f2:b1:
a6:00:f1:bd:38:b0:0d:12:88:03:51:42:47:ff:2e:
d3:11:bf:ff:33:ba:c3:03:76:70:d3:6b:2d:1e:b1:
8c:f2:88:c4:b1:cf:46:69:1d:a2:6b:ed:13:6a:71:
73:07:32:fe:91:c8:45:ac:d4:da:fb:b4:05:09:dc:
68:68:ea:1f:f5:00:21:ae:44:b8:cb:bb:db:d2:34:
c9:d8:49:d4:62:9a:69:53:5a:00:b0:4d:05:d5:50:
04:3c:45:12:f3:89:35:43:5f:22:14:24:8c:36:98:
18:ae:46:26:b6:65:b2:af:97:55:bd:66:4d:0a:b6:
73:61:5a:76:4d:36:2d:09:b6:a8:dc:f3:91:7f:21:
47:c8:ba:70:00:2f:b3:07:73:33:41:83:0e:7c:37:
79:3f:f2:ee:9e:1b:ba:be:9e:bb:23:ae:96:48:21:
25:cc:83:4b:1b:1c:b2:3b:f9:15:65:96:d1:73:3d:
45:89:8b:f9:78:af:e9:84:a1:30:d4:de:bd:24:ac:
55:25:38:b3:07:e2:22:3e:40:56:2a:27:f5:f4:37:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:B1:91:76:EA:BF:F7:A4:19:AE:2E:AC:3E:ED:2D:81:E9:FD:65
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/2z6xkXbqv_ekGa4urD7tLYHp_WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.21.0/24
93.115.248.0/22
193.203.204.0/23
Signature Algorithm: sha256WithRSAEncryption
14:cd:ee:37:01:d7:d0:2c:0f:5b:5f:00:31:72:5c:63:54:92:
af:8d:d7:5f:e7:37:00:69:47:5b:0c:e6:3d:85:c0:33:b6:3a:
58:85:39:c7:a3:58:10:c7:49:26:12:14:85:ea:a5:bc:47:b4:
e9:2f:73:f3:a7:5c:4c:ec:4c:0f:75:8b:a4:e6:38:d4:a7:ad:
cd:2d:76:7a:34:70:7b:c4:77:11:c5:47:fc:06:96:3e:4e:6e:
57:ff:f9:f0:89:f3:97:c3:2a:99:f4:57:5e:9e:41:ef:7a:bc:
dd:d1:7d:eb:69:47:21:f2:d7:f7:56:83:d7:af:15:aa:50:a2:
72:64:1f:df:ba:28:01:5b:d2:02:62:3f:2e:b6:48:df:65:ae:
36:f5:50:74:d0:94:4d:d4:78:d1:0f:5e:5d:24:17:68:b7:57:
45:1c:0e:f0:3f:25:57:94:f1:97:d5:01:d4:c7:45:a6:d9:6a:
e7:2a:80:b2:ac:ca:e2:73:02:d5:a8:ca:c9:73:ff:04:7d:b2:
d2:01:7f:f2:3c:e5:2a:7f:1d:16:7d:13:d8:2c:f7:2e:5c:d9:
c9:7b:7c:97:24:59:25:67:e9:67:0a:9e:94:cb:25:74:ab:37:
fd:df:e6:09:33:86:94:84:ec:77:f4:c2:07:f7:0d:72:19:4f:
43:cd:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:40:17 2025 by rpki-client