Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa
File: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (raw, json)
Hash identifier: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=
Subject key identifier: AC:4D:8B:CB:45:75:FA:83:7E:56:D6:63:1A:CD:AC:86:91:7F:70:3F
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B83AE7D88CE9DD8B8EF7E24443149
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13195
IP address blocks: 89.6.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:83:ae:7d:88:ce:9d:d8:b8:ef:7e:24:44:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac4d8bcb4575fa837e56d6631acdac86917f703f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:23:e6:7f:c1:a2:e9:6d:04:39:ff:ed:5a:
a2:7a:6d:d0:1b:8c:2e:48:ad:38:be:70:c4:b6:d5:
38:a0:a5:45:16:dc:8e:1a:34:4e:42:d8:56:44:5b:
e8:a6:4b:43:3a:f7:be:7a:95:1a:c0:a0:15:79:9d:
21:23:21:60:1a:0f:0c:0c:60:5f:06:fe:fe:14:f3:
16:cf:c2:75:53:1e:12:b8:aa:e7:e9:e5:2b:1b:dc:
ef:cc:8c:21:94:aa:a2:57:bd:cf:63:d1:12:5c:14:
e2:66:bd:1e:e9:80:67:33:81:2c:91:b4:fb:d1:9b:
53:9f:79:0d:c2:12:9a:75:22:6d:1a:ab:c9:52:38:
0e:ae:48:24:49:11:d7:c3:c3:cc:20:44:b2:af:98:
1d:73:40:73:4c:93:ad:67:be:d7:fe:16:42:9e:0c:
1c:03:ae:86:fa:f6:6a:0e:4f:96:a0:ed:cf:0d:8e:
f9:1c:3e:fb:4e:f6:cd:0e:98:e0:bc:cf:60:b7:c2:
6e:f3:75:2a:ac:1f:e4:fd:09:1f:2c:df:1a:51:75:
68:af:fc:5b:3d:04:c9:8f:67:b2:0a:7c:1b:3e:36:
e5:9f:8f:94:73:6a:0e:37:79:2e:8b:6e:c7:ef:7e:
05:8b:40:01:f7:43:6c:65:0a:f0:e9:66:7d:76:0a:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4D:8B:CB:45:75:FA:83:7E:56:D6:63:1A:CD:AC:86:91:7F:70:3F
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.6.160.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d7:25:e6:d7:b9:b2:7a:17:52:ae:0f:7b:6f:45:a1:9c:d9:
72:0e:71:f3:09:ce:6d:2d:eb:5a:7e:ff:d2:73:19:4b:27:6f:
5d:62:62:97:c2:df:7c:09:6e:a5:2a:1d:ba:0b:41:b1:01:62:
9b:fa:b5:41:78:46:ee:73:67:86:86:71:88:90:c9:6f:83:04:
24:93:e9:de:fc:28:dc:5d:b8:fa:e3:22:f5:ec:b6:b3:52:55:
d4:26:49:ec:a7:2b:c8:b0:60:c6:52:a9:a1:0b:ff:7d:d4:e1:
3a:30:3c:a0:2b:21:f3:fb:46:95:bb:93:36:0a:2c:40:ae:a5:
41:22:a5:e5:59:0e:14:5f:bd:f7:6f:6d:21:aa:89:67:df:af:
e5:9d:a8:2f:fc:59:c5:89:e4:fb:a9:a5:c5:c9:cf:cb:8d:bf:
38:e0:6a:b7:9d:6d:b2:b5:ff:0c:96:99:a4:09:92:57:40:65:
d8:bd:c3:f1:49:bb:1d:54:85:bf:19:2e:54:e4:46:20:b3:cc:
d3:3f:3c:76:e8:5e:ac:83:db:7e:f0:cc:59:ab:4e:62:5e:07:
44:ad:2e:a4:be:28:59:dd:f8:1e:b0:7c:b4:77:e4:ea:53:06:
35:31:1e:9a:d8:dc:77:de:15:48:e4:81:26:00:99:d3:3e:46:
58:8f:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:25 2025 by rpki-client