Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/ixsq-klPD3xAbG_HI69FVWZ8mm0.roa
File: ixsq-klPD3xAbG_HI69FVWZ8mm0.roa (raw, json)
Hash identifier: WGRJe8aX0lzBWDvnPAeQYXi1nyf35DAjeiWX7iFguNc=
Subject key identifier: 8B:1B:2A:FA:49:4F:0F:7C:40:6C:6F:C7:23:AF:45:55:66:7C:9A:6D
Certificate issuer: /CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Certificate serial: 1851FE95
Authority key identifier: 70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/ixsq-klPD3xAbG_HI69FVWZ8mm0.roa
Signing time: Wed 22 Jun 2022 06:47:44 +0000
ROA not before: Wed 22 Jun 2022 06:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50144
IP address blocks: 185.13.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408026773 (0x1851fe95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Validity
Not Before: Jun 22 06:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b1b2afa494f0f7c406c6fc723af4555667c9a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:3b:d7:4e:05:7c:8f:42:d4:1a:85:51:07:
9c:4a:4f:6d:18:f0:22:1e:c4:62:8d:cd:58:a3:98:
ab:b4:21:e7:25:82:e6:9c:50:bd:e8:be:a4:f0:fa:
bc:6e:e1:a4:eb:24:d3:64:8d:44:cf:05:ff:d4:f6:
87:25:ce:ff:45:9c:e7:4b:9c:f3:03:10:47:80:6a:
4d:a9:cf:60:d5:b1:c1:ca:dd:ee:b7:37:86:68:ca:
e5:92:20:6b:05:7b:1b:28:36:aa:84:f1:a4:bb:de:
55:50:95:1c:a2:75:c4:46:e0:89:0f:7f:08:b7:63:
68:d7:e3:9d:65:47:f9:ea:4c:cc:23:c9:06:2c:c7:
98:fa:c8:fb:52:9b:e8:3b:5c:f9:36:8e:98:90:10:
62:05:f3:86:7a:9d:54:80:2d:0a:56:a5:10:45:22:
0b:72:5e:fc:9a:a0:e8:e5:31:4b:43:40:f0:97:5a:
a8:4d:ae:68:d1:ac:0c:45:c4:d2:d4:18:e8:51:7c:
7b:63:f7:51:7f:77:6e:49:f3:f9:53:0b:85:76:c0:
f0:db:79:c8:93:81:9a:a1:fb:7e:83:2d:89:d1:9f:
cc:08:b9:5f:eb:6b:0a:d5:83:5f:7f:1e:0c:93:46:
99:04:4e:e5:11:49:34:13:9f:d5:92:20:40:c8:b1:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:2A:FA:49:4F:0F:7C:40:6C:6F:C7:23:AF:45:55:66:7C:9A:6D
X509v3 Authority Key Identifier:
keyid:70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/ixsq-klPD3xAbG_HI69FVWZ8mm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/cE6wMksWcpndYGTbvzQNL5nEAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.89.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b8:2e:1e:a1:c3:72:a7:f4:29:1e:b5:80:39:ec:eb:eb:5d:
3c:32:16:97:6d:03:4a:c1:2e:0e:5b:35:d8:59:2e:54:87:55:
8d:7a:13:e2:68:05:cc:da:3b:d4:ea:b0:f4:c6:dc:1e:b1:41:
08:b5:90:6e:ce:05:3e:db:af:86:e4:96:e7:79:7e:30:df:c2:
40:f4:51:e9:ee:ce:7d:a2:c8:e8:26:11:c1:16:bd:8a:e4:9b:
a5:30:1c:74:af:5f:d8:7a:2f:87:00:3b:26:38:59:f1:09:18:
7b:55:d1:a6:79:44:f1:a0:9a:48:8a:eb:0e:7a:c5:d4:f4:d1:
dc:11:b2:38:5e:73:71:5f:cc:15:ed:41:89:0f:4b:10:80:95:
e5:5b:d2:99:9e:a6:32:57:2a:98:e5:d0:fa:6d:01:91:31:d9:
fd:4d:38:58:04:04:1f:92:20:de:8a:a9:ca:27:a5:1f:5e:8d:
52:57:a0:22:90:3c:ed:c0:78:b8:4c:ca:d1:41:5b:25:3b:9d:
2d:c5:1f:db:d9:d6:fd:a6:2f:b6:76:cb:23:1f:67:11:6d:bc:
75:3c:ce:3b:d6:3a:49:e4:08:2a:f6:4f:dc:1b:35:b5:15:05:
fb:45:b1:f0:2c:c6:a2:c4:65:a5:40:5c:2f:df:89:63:f1:42:
17:fa:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:11 2025 by rpki-client