Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/liShckzg-y_pGqAmNFUsqPtV5XQ.roa
File: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (raw, json)
Hash identifier: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=
Subject key identifier: 96:24:A1:72:4C:E0:FB:2F:E9:1A:A0:26:34:55:2C:A8:FB:55:E5:74
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D654F111D6B8B08D5D8B4E0A2063EF
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/liShckzg-y_pGqAmNFUsqPtV5XQ.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62386
IP address blocks: 89.25.35.0/24 maxlen: 24
94.155.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:54:f1:11:d6:b8:b0:8d:5d:8b:4e:0a:20:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9624a1724ce0fb2fe91aa02634552ca8fb55e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:7f:f4:df:8b:df:20:05:c4:a5:57:c4:62:
a7:2b:d5:cf:69:ff:2e:e4:7b:03:4f:c5:f8:87:ee:
ac:e6:ed:a2:d6:6f:0f:40:5a:56:d8:ea:3e:c5:8f:
a2:5d:f2:81:a2:8e:eb:3a:81:0b:30:65:2c:56:ac:
99:a3:22:b3:ed:f1:22:16:66:8a:75:5b:b3:94:69:
91:b6:3a:ef:9c:ed:13:2c:4a:46:df:c1:ee:e9:b9:
65:2c:2d:aa:f9:1b:78:c7:5b:b8:fc:29:9e:6e:f1:
53:a3:1c:40:d9:ce:89:c4:0d:76:db:7a:c4:0d:c9:
3e:bc:62:88:77:ff:4f:6f:ad:27:c1:13:18:59:5d:
63:df:39:31:e6:56:cf:48:8b:ae:40:20:2a:46:a0:
ab:6a:23:7e:0a:ac:ec:e0:0d:1b:a8:60:04:0b:e0:
dc:f2:4a:65:ab:63:d0:d7:e3:ac:d0:95:e4:c1:bb:
93:c6:a4:ce:8f:9c:fa:f5:62:57:65:0d:1b:e8:b1:
62:b0:7c:28:dc:68:bd:41:75:63:90:97:99:d4:91:
be:04:c6:40:a7:eb:2b:56:c9:88:e7:7d:a0:b6:4f:
5c:2d:97:3e:61:fe:7c:2c:06:b1:4b:08:55:76:3c:
22:03:c2:63:94:5f:2f:dd:28:10:36:07:99:5f:40:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:A1:72:4C:E0:FB:2F:E9:1A:A0:26:34:55:2C:A8:FB:55:E5:74
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/liShckzg-y_pGqAmNFUsqPtV5XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.35.0/24
94.155.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:18:05:a5:63:20:03:98:dd:8a:c0:d7:8b:3b:58:99:68:34:
18:60:bd:97:42:8d:54:85:55:88:e4:4c:18:46:41:79:da:3a:
44:89:d2:30:14:27:88:2c:23:6b:47:48:f0:01:b1:7c:b3:95:
19:5d:15:e0:dd:60:ff:98:4b:48:a3:cd:e0:e5:f7:9a:d2:86:
9d:d3:3a:02:41:ac:c6:d0:6c:c8:0d:17:2c:aa:98:fb:da:79:
0e:89:f7:f6:b5:50:7b:8e:f3:a4:33:8a:1d:72:74:7a:d7:94:
45:32:52:fb:b4:c5:56:5d:7d:f9:9a:5a:02:9b:0e:1b:55:e4:
1d:36:bc:9e:ee:41:4d:0f:c5:be:a8:e6:01:11:65:26:1d:b8:
cd:42:df:f1:a9:31:6e:e8:fd:e6:66:5a:54:07:82:0e:a3:a3:
8a:98:ef:e5:d9:9e:e3:55:5d:ec:5d:c1:c8:0b:01:92:bc:32:
19:a5:a5:6e:99:3e:ba:84:aa:6a:9a:eb:e9:4c:aa:c8:d5:89:
54:87:bb:06:e7:b2:65:ff:aa:87:21:41:cd:bb:7c:1a:50:d6:
88:36:47:4e:f4:51:d2:be:9e:e2:4c:0c:fa:1e:71:fd:05:9b:
98:7d:f9:95:b7:8f:26:fd:78:53:34:91:b1:a0:35:2f:06:39:
df:c1:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:06:17 2025 by rpki-client