Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/zIyF6WCsg1mIqqDiHuiI8Bfjz-c.roa
File: zIyF6WCsg1mIqqDiHuiI8Bfjz-c.roa (raw, json)
Hash identifier: GiLMiSSv/ElFnz6/RbK5FLOJhn+IiKyQwm6YpaAwRTk=
Subject key identifier: CC:8C:85:E9:60:AC:83:59:88:AA:A0:E2:1E:E8:88:F0:17:E3:CF:E7
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0190948D6B8DA011988A807050B42B8D7AB0
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/zIyF6WCsg1mIqqDiHuiI8Bfjz-c.roa
Signing time: Mon 08 Jul 2024 22:53:34 +0000
ROA not before: Mon 08 Jul 2024 22:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.99.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:94:8d:6b:8d:a0:11:98:8a:80:70:50:b4:2b:8d:7a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jul 8 22:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc8c85e960ac835988aaa0e21ee888f017e3cfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:4a:e5:f9:20:c8:ca:68:ec:5d:db:af:5f:
d7:ed:0c:58:c0:fb:88:56:4d:0b:fc:1b:55:79:3e:
57:55:97:af:13:22:d0:27:0b:99:dc:0c:3c:72:87:
a4:16:49:a4:e3:14:ff:62:0c:0d:4b:68:be:5b:78:
70:6e:1e:de:7a:45:d2:ba:ba:4c:66:d2:34:24:4c:
bf:6e:d9:8f:f4:0a:dd:e2:af:f8:b2:ba:02:6f:e1:
24:69:b3:1c:6a:13:66:4d:1f:ae:81:6c:4f:32:8b:
39:52:3a:8e:b6:ce:c8:31:58:be:8e:cb:10:16:ca:
91:66:24:50:f6:74:ec:83:83:c2:d2:9b:36:dd:67:
f2:b6:50:83:cf:4c:15:15:f7:dc:bb:52:85:fb:c2:
ef:7b:55:24:12:98:01:ae:f1:b7:de:41:ff:80:a9:
07:49:e3:b7:b1:cc:c7:aa:a5:87:0c:98:b0:f2:c4:
5e:b6:c4:b1:08:4c:e0:8a:be:1c:67:fb:b2:44:87:
e9:09:5f:71:6c:55:a1:8a:cc:1b:79:44:c4:3c:b5:
59:b0:3e:16:92:82:d7:ba:52:9b:d9:8e:e6:ba:76:
f9:5e:1c:82:7e:90:b0:fe:6c:b0:d9:54:d2:71:4b:
42:d5:59:e3:22:2b:0f:1a:7e:25:97:5a:9f:e9:21:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:85:E9:60:AC:83:59:88:AA:A0:E2:1E:E8:88:F0:17:E3:CF:E7
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/zIyF6WCsg1mIqqDiHuiI8Bfjz-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.99.0/24
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
47:71:c9:7c:11:0c:c1:e6:54:53:ce:41:f4:ad:e0:cd:df:4f:
bf:6d:15:d5:46:48:c4:13:87:79:ce:e3:2c:02:ca:82:36:85:
fd:66:1c:1f:67:71:cf:75:58:5c:78:3d:65:f3:0c:d5:df:17:
3a:7f:e0:c1:33:9e:41:48:99:2d:d8:1c:c8:2d:50:2b:e0:85:
8e:21:37:5b:c3:50:25:cc:7a:5f:e3:88:96:eb:98:4b:77:1b:
44:bb:77:46:63:65:b6:0f:32:8b:ae:e1:6d:3b:97:c1:c0:b4:
46:53:d4:91:22:03:2a:6b:bc:d2:d2:fe:f6:2e:4d:79:42:4e:
6c:14:f8:ea:bc:44:a4:ba:c1:bd:49:d0:f4:22:17:b9:8d:4c:
02:d9:a0:34:e7:10:82:c6:bb:fb:13:dc:0d:f4:5d:6c:49:66:
9b:98:eb:cb:75:ba:45:72:66:d7:ab:27:3a:89:aa:16:48:26:
5a:c0:be:15:2e:90:6b:6d:f0:2b:9f:35:4a:9f:07:03:da:3f:
f4:ac:b5:7b:ab:f0:cc:ef:fa:a7:a5:81:16:4a:cf:87:8d:4a:
6e:66:fa:2f:dc:1c:ca:78:fe:67:c6:5d:81:f8:63:05:c4:c6:
e2:61:5d:42:dd:7d:6a:16:a5:4d:19:26:ca:49:fe:07:78:69:
21:60:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:51 2025 by rpki-client