Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/rXYQihXZcHzDYDPfOCw2uf0QxOs.roa
File: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (raw, json)
Hash identifier: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=
Subject key identifier: AD:76:10:8A:15:D9:70:7C:C3:60:33:DF:38:2C:36:B9:FD:10:C4:EB
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 01942748173799869BBFBE7B17F239DEA8CA
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/rXYQihXZcHzDYDPfOCw2uf0QxOs.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209358
IP address blocks: 152.89.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:17:37:99:86:9b:bf:be:7b:17:f2:39:de:a8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad76108a15d9707cc36033df382c36b9fd10c4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:0d:72:be:e4:ba:a0:fa:2d:bf:99:1f:8c:
74:2e:82:e4:9e:1f:85:00:1e:dc:d5:b6:87:e1:16:
1d:f1:a8:b5:9c:d8:74:0d:d3:55:80:03:b0:4e:36:
82:dd:58:b6:32:72:8f:16:fc:33:b5:88:b9:7d:04:
45:05:81:ba:e6:38:88:ad:00:12:47:ae:37:c1:cb:
32:ea:47:af:88:92:bb:2e:c5:0f:9a:80:49:a5:a9:
b3:8f:52:4f:ff:51:a3:82:28:15:97:dc:3a:eb:9f:
26:df:2a:c3:30:19:f3:03:1e:42:8b:4d:1b:1e:89:
4a:69:e1:e3:5e:2f:d9:e0:2d:4c:18:db:8d:9e:47:
7d:f8:95:eb:cc:3a:f4:a0:ae:80:c1:d5:d4:3d:13:
2f:ef:03:85:84:80:46:aa:7c:ab:64:a9:16:74:94:
da:af:b2:51:2f:f4:94:90:9f:6f:4b:3a:4e:49:2e:
44:a0:c0:bf:79:b6:24:2b:ba:0d:ee:61:d3:96:14:
12:ce:d3:f0:18:bf:04:b9:9e:42:74:fd:a1:c4:d3:
af:cb:97:5f:1e:c3:53:57:35:3d:d0:19:86:9e:cb:
a2:05:55:04:0f:f8:14:ac:ee:db:48:21:dc:05:c2:
dd:05:27:44:0c:e6:03:76:90:c6:c9:d1:d5:48:ae:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:10:8A:15:D9:70:7C:C3:60:33:DF:38:2C:36:B9:FD:10:C4:EB
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/rXYQihXZcHzDYDPfOCw2uf0QxOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.68.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ce:db:7d:1e:b8:85:a8:c5:71:fb:37:6e:b5:33:ac:4d:35:
80:45:6d:df:69:94:99:b4:d9:60:2a:86:e1:22:28:8a:aa:9f:
fd:5d:d3:d4:44:be:ed:4e:4f:9c:38:66:4b:1a:0a:7c:dc:04:
6b:23:49:b8:4a:84:df:21:e7:24:46:dd:06:cf:13:83:2f:da:
72:6c:c1:a5:0a:07:ae:07:7c:07:41:3c:39:8d:2d:70:51:be:
b3:a3:b4:24:b4:a8:a8:10:93:a8:d7:9e:63:84:c1:9e:d3:8e:
a1:de:ce:9f:ef:a3:0c:1a:4b:17:50:a8:6f:95:0a:6f:f7:07:
d9:51:42:1d:84:9a:9d:45:97:b2:ca:43:cf:cc:3d:40:c9:32:
b3:f7:10:e8:3e:71:d6:55:da:d3:38:b6:49:fc:1d:48:f5:53:
a4:96:84:f5:22:65:91:f0:c3:85:32:c2:98:02:e6:47:25:c4:
9a:9f:a7:2a:2d:11:5d:6f:7b:ef:4a:12:c3:c8:cf:2c:b6:07:
ed:f9:85:e4:64:f3:a0:a5:9f:ed:76:88:30:97:95:f1:a3:da:
e1:7e:ab:68:3d:bd:cc:6a:4c:13:da:4f:6f:89:9b:d4:4e:2b:
d8:2b:e6:39:2d:30:a1:b9:2d:29:ff:95:38:60:a4:8d:e1:2d:
01:67:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:17 2025 by rpki-client