Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/UJLmCw34qWtSEnk-TuMcHNiR5vk.roa
File: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (raw, json)
Hash identifier: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=
Subject key identifier: 50:92:E6:0B:0D:F8:A9:6B:52:12:79:3E:4E:E3:1C:1C:D8:91:E6:F9
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 0194266BF99ED892D20E00952DCE9673BF1C
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/UJLmCw34qWtSEnk-TuMcHNiR5vk.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209377
IP address blocks: 152.89.4.0/22 maxlen: 22
152.89.4.0/24 maxlen: 24
2a09:2c40::/29 maxlen: 29
2a09:2c40:a::/48 maxlen: 48
2a09:2c40:b::/48 maxlen: 48
2a09:2c40:c::/48 maxlen: 48
2a09:2c40:d::/48 maxlen: 48
2a09:2c40:e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f9:9e:d8:92:d2:0e:00:95:2d:ce:96:73:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5092e60b0df8a96b5212793e4ee31c1cd891e6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:f8:39:2e:2a:66:8b:74:a5:d7:23:30:27:
8f:80:da:2b:1d:d2:1c:aa:fb:af:1e:8b:5e:c5:f9:
1e:ee:4e:25:78:b6:40:da:6f:8e:9f:79:53:08:5f:
d9:c4:fc:0a:dd:34:cd:ee:5f:07:0f:73:e1:99:5c:
f7:cc:ee:54:dc:a1:86:f4:94:c1:e7:0a:13:e1:a2:
dc:40:76:a7:15:4f:1f:62:81:41:0d:3a:de:8c:3f:
f9:8a:5c:31:93:36:2b:6e:91:ae:e0:ac:0b:c2:37:
c5:6e:a9:f1:c4:08:e4:36:8a:56:3f:2e:3f:d7:eb:
7b:49:ab:26:ab:49:a5:97:59:73:e4:9a:b6:51:ca:
57:e0:87:07:18:bf:99:e2:91:2f:4b:84:7d:6d:5b:
4d:74:69:b6:fd:21:f3:56:d8:10:cb:c6:6f:31:b1:
75:88:93:73:45:c0:47:0d:2d:e1:d1:e5:fa:8f:a9:
d8:a0:b4:cb:71:18:e7:83:17:8e:8a:c7:30:90:8d:
06:50:ab:73:20:d1:04:97:69:ba:ba:5e:98:9c:ce:
c8:ef:b5:68:0e:7c:34:cf:04:b8:36:83:43:61:32:
79:33:e0:21:64:53:64:7e:85:f9:c7:79:b8:89:e0:
49:f4:50:bc:d6:cd:ee:da:57:a2:cc:21:31:bb:24:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:92:E6:0B:0D:F8:A9:6B:52:12:79:3E:4E:E3:1C:1C:D8:91:E6:F9
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/UJLmCw34qWtSEnk-TuMcHNiR5vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.4.0/22
IPv6:
2a09:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
ab:f0:af:89:2c:dd:72:3f:23:e2:e1:22:91:d1:f2:de:e7:9d:
e1:a3:9a:ae:a1:79:aa:5b:1c:eb:8d:b2:48:9d:64:e8:a2:65:
0c:bd:18:47:a9:1c:d2:2a:f9:47:20:86:c1:f0:27:d1:45:45:
0a:92:10:52:3b:e9:2c:15:03:39:44:5a:ac:6f:25:dd:13:bf:
c8:4e:18:3f:a5:e3:5d:9f:6c:a9:4f:a7:a2:cc:92:f4:d3:61:
62:6b:0a:aa:31:dc:de:c2:72:03:70:6e:7f:60:3f:ac:4c:70:
b6:e7:4f:ba:c3:02:fa:fe:52:ed:cc:b3:d7:b1:2a:ef:83:36:
8b:96:76:e4:fa:50:0b:2f:84:80:89:be:81:75:c4:e0:a2:da:
cf:62:98:d5:9c:55:77:10:b5:f6:43:19:9a:d9:1e:ad:a7:57:
56:ca:a0:d9:aa:43:69:ad:78:49:a6:0c:b6:44:14:95:6c:e4:
ba:1e:7e:50:a3:cc:bb:21:d8:b7:dd:8e:b2:4b:4e:a6:03:96:
3f:d4:c9:d0:9b:1b:67:88:9c:4e:e8:fc:bb:9c:e2:8e:f4:40:
5e:13:f1:2b:eb:79:c9:1e:6f:c6:cb:46:10:e7:5b:27:d7:8a:
4d:d1:ad:42:bf:d2:20:e9:0f:d3:8b:84:64:12:95:be:4b:05:
dd:3b:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:29 2025 by rpki-client