Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa
File: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (raw, json)
Hash identifier: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=
Subject key identifier: A4:4F:CC:3D:64:8E:D8:AB:46:6F:F7:75:14:73:69:29:89:AD:51:D5
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 019425FD42E7FC4131354ED702A2279FF94E
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41088
IP address blocks: 89.190.64.0/19 maxlen: 19
89.190.85.0/24 maxlen: 24
2a00:bfe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:42:e7:fc:41:31:35:4e:d7:02:a2:27:9f:f9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a44fcc3d648ed8ab466ff7751473692989ad51d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:27:56:92:43:e8:7c:45:60:fc:dd:c1:90:
43:d8:29:9b:18:f0:6c:3d:6d:b8:4b:46:16:7e:ce:
b8:03:bf:b5:b0:d7:dc:b4:92:4e:27:46:65:0b:29:
bd:63:06:16:6c:77:e8:77:a3:34:0c:73:18:c1:8a:
a4:78:20:26:2e:13:ec:cb:50:57:83:bc:22:50:99:
20:1e:89:b2:d6:62:dc:d2:d7:af:57:f6:59:67:a1:
86:53:9b:1e:57:fd:01:49:9b:d6:34:e8:73:cb:71:
28:8d:6b:d2:98:d5:aa:df:f1:e4:59:3e:03:35:b2:
db:0e:4e:8b:86:db:27:94:f8:b4:99:07:69:3f:61:
41:c4:f0:bf:a0:3e:8d:14:09:78:e4:40:1b:c3:92:
4c:6f:4a:b2:67:b0:84:33:89:9f:e5:11:c7:56:ca:
ee:be:ae:df:b6:cd:eb:0e:c5:04:f2:0e:60:fc:70:
d9:fe:4c:45:84:79:2b:d9:fe:f8:44:26:06:db:c5:
cc:81:d8:b2:01:7f:cd:ec:98:11:c8:e2:63:28:0e:
49:f1:bb:68:72:e8:24:86:d2:48:63:f6:61:36:77:
75:27:11:c1:d0:1f:36:57:cf:b5:94:90:ef:2b:80:
3d:e8:8f:ba:db:3b:b2:06:62:30:6f:a2:ee:91:00:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4F:CC:3D:64:8E:D8:AB:46:6F:F7:75:14:73:69:29:89:AD:51:D5
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.64.0/19
IPv6:
2a00:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
10:40:7a:4b:fb:54:00:e1:c7:f8:fe:eb:e0:2a:af:ca:bc:90:
74:bf:de:df:4e:a6:83:ce:b4:a4:40:50:03:39:30:6f:4c:12:
47:e3:cd:96:37:0a:aa:bc:25:11:7c:21:ee:58:3b:db:ce:f0:
c2:9b:79:9d:20:28:1b:c7:73:45:29:5d:02:11:38:85:e2:28:
ae:19:22:9d:d8:5c:61:ea:35:46:45:a2:b1:be:e3:04:9f:20:
13:c7:32:dd:08:17:3a:83:d7:8b:17:84:ab:ec:d1:69:42:cc:
eb:c2:80:2b:f2:9c:aa:c0:9e:94:64:38:0d:31:8f:8d:36:36:
52:f1:13:4f:b1:4f:ae:36:49:e7:0d:0d:0c:af:02:a1:62:bd:
34:3d:46:50:be:49:60:30:d7:84:47:13:33:b2:30:92:c4:00:
07:c6:ae:99:7f:67:ab:1a:a0:d5:75:6c:33:a7:dd:ce:e6:64:
49:74:06:03:8c:77:ed:d7:a5:02:7f:d0:2a:a7:3c:9d:00:22:
f1:28:ac:7c:2d:57:b7:e2:e8:c7:57:18:4d:28:ad:5c:df:99:
c3:96:d9:38:7c:40:03:ae:c7:c4:85:9d:37:7e:7d:8f:66:3a:
16:ad:ae:a5:d9:3e:72:db:9e:00:31:1d:48:13:4c:5a:1a:28:
7f:ed:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:36 2025 by rpki-client