Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/7lIUr_Swfy_cYx7ZANQi1Ifvejg.roa
File: 7lIUr_Swfy_cYx7ZANQi1Ifvejg.roa (raw, json)
Hash identifier: qStb6hqXCGtg9eabvOyFW1eaXW6r82CZQOMHO7VtUnM=
Subject key identifier: EE:52:14:AF:F4:B0:7F:2F:DC:63:1E:D9:00:D4:22:D4:87:EF:7A:38
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 01856F6FFE40AFA939A33A76095716571B94
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/7lIUr_Swfy_cYx7ZANQi1Ifvejg.roa
Signing time: Sun 01 Jan 2023 22:24:48 +0000
ROA not before: Sun 01 Jan 2023 22:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 185.198.91.0/24 maxlen: 24
185.198.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fe:40:af:a9:39:a3:3a:76:09:57:16:57:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 22:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee5214aff4b07f2fdc631ed900d422d487ef7a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:a4:58:0d:d9:99:95:f5:0d:7c:13:2b:71:
52:5e:c1:30:11:08:d9:89:46:23:a4:1e:6a:07:06:
d0:63:10:7f:c7:a9:90:65:9e:03:2e:ec:ee:7c:9b:
4b:30:cb:da:53:3c:9d:97:1e:d2:00:7f:f8:b4:37:
bb:46:ac:aa:ec:52:7e:6a:02:10:8e:c3:2e:3c:52:
94:81:04:36:cc:db:c3:e1:58:f1:8b:c7:7a:e1:8e:
70:1a:87:f9:b2:8d:12:e1:82:78:a5:f4:ca:77:2b:
80:be:18:6e:f3:cf:f7:d2:45:a5:a4:b2:a3:ae:3f:
1f:1b:d4:83:ed:90:21:17:16:61:ae:f8:cf:54:38:
cd:06:5b:9e:6f:a3:80:4a:6e:bd:7e:44:0c:c2:5c:
50:00:0b:be:ff:d0:4b:ea:0a:0a:0d:9e:18:c7:bb:
06:68:52:cc:6f:f4:ec:58:80:71:19:9e:a9:39:d4:
15:34:5c:5b:f0:04:8f:92:73:50:a4:a2:0e:48:dd:
e3:20:f5:5b:ff:9f:08:62:6f:8f:ed:eb:13:be:52:
68:b7:21:ee:6a:c1:45:01:b4:b7:86:b5:fa:e6:3b:
af:e0:cf:61:97:b3:44:a4:53:84:1f:3f:f2:a6:26:
cd:a9:58:c8:2e:38:a3:c5:48:51:ab:08:f3:cd:3b:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:14:AF:F4:B0:7F:2F:DC:63:1E:D9:00:D4:22:D4:87:EF:7A:38
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/7lIUr_Swfy_cYx7ZANQi1Ifvejg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.89.0/24
185.198.91.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:77:70:27:75:51:4e:b9:76:e2:b8:14:30:06:73:c4:82:cc:
1e:a1:69:8d:5e:2c:f5:fe:c9:6d:88:02:97:91:df:86:aa:e5:
ab:18:46:92:fa:6d:44:2e:4c:29:1b:af:7b:ad:3a:58:13:5c:
4a:b7:1e:98:c9:8a:2c:27:1d:63:94:d2:98:cb:71:5e:1b:eb:
57:d0:0f:ee:33:cb:f3:fc:d7:3e:f6:7a:3a:4f:2d:b3:be:2d:
b1:7e:be:5f:ce:fe:94:55:86:c8:92:85:e1:77:9c:27:7e:ae:
eb:c8:eb:d8:fc:3c:b4:aa:9f:e7:d1:3f:25:ca:98:ab:36:6f:
bd:6d:8b:3b:00:61:fd:ef:0a:4b:29:7f:c4:26:da:90:13:be:
95:dc:4d:38:f7:0b:03:e4:60:06:cc:b7:df:76:a9:10:0b:4e:
cc:0d:4b:ef:70:20:4a:63:53:0a:dc:41:f7:07:11:02:f9:18:
13:2c:ff:70:33:61:b9:e2:61:23:86:d0:4b:1e:48:f5:81:53:
69:6b:8a:cf:0d:c0:da:d1:ad:d7:69:c6:3f:75:f1:1b:d6:50:
01:5f:5b:41:63:1c:b5:32:db:8b:19:03:94:f0:77:f6:a8:5f:
9a:2c:84:75:a9:b3:2a:35:19:a5:63:68:6f:8f:f3:ab:77:23:
15:41:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:41 2025 by rpki-client