Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/sl7TzsJMLtZS3s2jz-noRKwhjlw.roa
File: sl7TzsJMLtZS3s2jz-noRKwhjlw.roa (raw, json)
Hash identifier: fk88ROGh0DGV8g1spIaJZGsnIBf5SY0tTKTtdZFIeXI=
Subject key identifier: B2:5E:D3:CE:C2:4C:2E:D6:52:DE:CD:A3:CF:E9:E8:44:AC:21:8E:5C
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 01821AC79330D7EA33CF9E7AF68895018B4B
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/sl7TzsJMLtZS3s2jz-noRKwhjlw.roa
Signing time: Wed 20 Jul 2022 08:44:23 +0000
ROA not before: Wed 20 Jul 2022 08:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:c7:93:30:d7:ea:33:cf:9e:7a:f6:88:95:01:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jul 20 08:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b25ed3cec24c2ed652decda3cfe9e844ac218e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:b2:e3:53:8a:9e:42:32:40:b2:67:c2:ff:
24:59:f7:d6:1e:46:4c:ee:24:d1:15:7c:7a:7c:08:
d2:1b:6f:2c:3f:8a:58:5e:58:5e:b8:d3:0f:46:df:
d1:5a:73:1c:3c:d1:e8:dd:0c:07:99:01:a5:f9:4c:
3e:64:2d:f1:49:35:94:0b:93:c9:40:3a:5a:a7:f7:
8a:62:98:91:a4:61:1e:a9:c5:fb:54:ff:6d:77:4a:
3b:60:13:02:3b:93:3f:c6:70:2f:84:93:dc:e3:10:
3b:1e:08:02:03:0f:30:20:13:af:d5:45:d6:0d:b7:
a9:89:4d:0e:53:8c:9e:83:58:0a:06:af:2e:84:56:
dd:58:d1:a5:88:bd:9c:d6:55:82:37:0d:bb:93:70:
ea:dd:d5:63:30:8c:95:94:d3:2f:19:30:94:db:85:
a6:d6:86:a2:8e:ef:ab:45:30:5c:0e:29:3b:81:1e:
83:6a:68:16:aa:d8:1c:4b:f7:0e:cc:49:a5:2a:46:
e8:18:57:db:b0:5e:fc:d3:1d:f0:5d:47:e3:b0:e1:
0b:6d:c8:04:ce:db:29:49:fa:c4:20:04:42:9a:b3:
f5:5b:60:da:9d:3f:ef:f8:16:e0:3b:39:08:40:42:
8a:83:f1:c8:38:92:19:a1:48:66:ea:60:50:c8:8e:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:D3:CE:C2:4C:2E:D6:52:DE:CD:A3:CF:E9:E8:44:AC:21:8E:5C
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/sl7TzsJMLtZS3s2jz-noRKwhjlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.74.0/24
94.137.76.0/24
94.137.78.0/23
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
59:eb:45:fe:99:33:ba:33:d4:cd:53:bf:b1:41:da:56:8d:a9:
3e:33:14:9f:8f:64:4e:35:a0:47:0c:1a:b5:ee:b1:a7:a7:a1:
8a:24:cb:16:04:c2:eb:b1:ed:51:e5:9f:b9:13:0e:d4:ef:62:
cc:d8:d4:b9:92:c8:5e:9f:20:ab:38:63:67:48:26:f9:d8:6b:
14:5d:bf:15:64:05:37:c9:3c:fb:c2:16:9a:d7:25:fe:2c:01:
b8:f0:c8:5e:69:8c:ac:86:75:e1:03:8b:b4:f6:8b:fa:80:b2:
73:f1:63:cb:2a:11:b4:3b:44:87:04:4d:ec:99:a4:c9:f2:9c:
a9:03:f9:da:de:36:ef:29:b5:01:f0:22:2e:53:26:0e:c1:fd:
18:da:b7:40:e3:84:b7:91:92:c1:b4:42:08:77:5f:9c:39:4c:
86:ca:2d:b5:a6:60:66:de:9a:2d:f0:f8:6a:62:ea:70:f4:99:
52:ff:8d:1f:55:d2:02:84:de:55:8a:ec:12:8a:4d:a3:33:90:
80:df:19:e2:e7:09:de:df:40:c7:a1:0f:76:8e:ce:55:23:90:
7e:fb:98:f9:ed:a3:a0:b4:5d:46:c0:c6:a6:d3:45:e8:a3:ae:
f9:22:40:50:c3:de:50:10:07:04:bd:35:9e:07:15:df:ab:ae:
80:2e:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:59 2025 by rpki-client