Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Ce5IsGi58acPBmo3AY5Hz_0OwWQ.roa
File: Ce5IsGi58acPBmo3AY5Hz_0OwWQ.roa (raw, json)
Hash identifier: Q5NwV37KYAWatXcpHzgypTEmjz3nsuGzJQpvK7et0JM=
Subject key identifier: 09:EE:48:B0:68:B9:F1:A7:0F:06:6A:37:01:8E:47:CF:FD:0E:C1:64
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0190C75414B421F5D7FA9B1904488F077C1C
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Ce5IsGi58acPBmo3AY5Hz_0OwWQ.roa
Signing time: Thu 18 Jul 2024 19:31:34 +0000
ROA not before: Thu 18 Jul 2024 19:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.72.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c7:54:14:b4:21:f5:d7:fa:9b:19:04:48:8f:07:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jul 18 19:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09ee48b068b9f1a70f066a37018e47cffd0ec164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:df:f2:25:61:86:92:39:75:34:2f:0b:46:
20:3b:c5:68:26:29:b5:b4:23:a5:9f:66:74:d0:d3:
69:d2:75:2e:2f:06:0f:34:33:8b:0b:fc:89:27:de:
36:4c:45:cd:25:2c:e9:a1:64:53:d5:2f:af:7c:9b:
e7:65:fa:22:c1:45:2e:1f:8a:bf:5f:50:64:eb:cc:
06:f3:2c:3b:5a:7c:4b:50:cb:de:7b:73:4c:e8:12:
a1:24:a2:b5:d3:db:e8:0c:da:1b:41:08:1e:57:c0:
d5:b0:54:97:70:f3:b0:a0:be:77:cf:08:83:ee:26:
23:07:cc:24:62:d8:ee:f4:cd:1d:5d:05:6f:10:f8:
95:83:cc:e3:b4:7b:e7:f9:77:7f:21:3c:d0:26:0a:
d0:ab:1d:f4:b4:d1:52:5a:20:b8:61:2f:09:79:4e:
3c:98:30:5c:bd:d0:99:5c:6e:1c:66:93:e1:90:9d:
14:ae:d6:e5:76:7c:65:57:24:1d:93:0c:d3:ae:ac:
83:c1:41:37:e9:57:42:5c:10:dd:98:f7:28:3a:32:
66:ff:fb:c9:5d:6c:88:f8:53:7d:b8:42:40:69:65:
79:f8:8c:11:5d:cd:a5:cf:01:31:4c:4b:75:37:93:
fc:f2:10:ed:01:e3:a5:fa:64:1a:dd:ce:17:93:2c:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:48:B0:68:B9:F1:A7:0F:06:6A:37:01:8E:47:CF:FD:0E:C1:64
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Ce5IsGi58acPBmo3AY5Hz_0OwWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
3b:54:52:eb:9a:ef:7d:72:4a:02:3f:32:aa:57:0f:45:29:4f:
63:0f:dd:f7:d1:05:4e:bc:5b:a4:d8:d7:71:ad:6f:85:91:1d:
97:af:de:25:8c:ff:6c:d5:8d:8b:e5:60:48:61:be:bd:09:5d:
44:2e:05:50:c9:d2:4d:8c:f2:f7:25:ca:ab:54:74:9c:25:5c:
a3:35:9e:2b:9c:10:51:c0:88:b2:13:8b:e5:b6:6f:1a:57:1f:
2d:3b:36:8d:4e:dc:07:c6:e5:08:83:cb:2a:df:f1:de:4f:0a:
fb:74:b3:0b:79:29:0d:9b:3a:d0:3a:20:9b:c6:8a:5d:27:15:
ce:a6:17:aa:b5:12:46:b6:7f:8a:d4:df:a2:1d:ac:28:ec:3e:
4d:08:48:b7:48:90:41:3d:49:76:1e:52:a7:b0:1b:62:f3:e3:
4f:4e:0d:17:6a:6c:50:40:08:dc:6c:d2:0c:22:aa:93:e9:69:
df:dc:d5:bb:bb:ae:57:17:b5:c7:51:ab:f2:2a:37:b3:22:61:
1b:cd:8b:25:68:2a:85:e9:4a:39:a0:93:e1:6e:e3:08:22:8d:
77:63:bd:d9:8d:17:3b:a0:21:f4:c5:58:ea:78:bc:bc:1f:2a:
8a:4a:33:0f:0f:8c:72:dd:a8:95:f0:66:c3:e3:68:f2:0e:0e:
27:d5:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:31 2025 by rpki-client