Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/LIbev3ORdUSnyY1pEHH1iNbxdc0.roa
File: LIbev3ORdUSnyY1pEHH1iNbxdc0.roa (raw, json)
Hash identifier: uvnDd7NWuMeBUzFlZVHQp+ZSop+crVOB1D84TlDFTcI=
Subject key identifier: 2C:86:DE:BF:73:91:75:44:A7:C9:8D:69:10:71:F5:88:D6:F1:75:CD
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 01856F6FFF119052D223BED5288D32AE54BB
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/LIbev3ORdUSnyY1pEHH1iNbxdc0.roa
Signing time: Sun 01 Jan 2023 22:24:48 +0000
ROA not before: Sun 01 Jan 2023 22:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53889
IP address blocks: 185.198.91.0/24 maxlen: 24
185.198.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:ff:11:90:52:d2:23:be:d5:28:8d:32:ae:54:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 22:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c86debf73917544a7c98d691071f588d6f175cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:4d:5c:3e:29:bd:47:c5:05:0e:82:e9:6f:
f9:52:ff:d5:7b:93:fb:4c:d7:6a:18:1f:dc:d9:aa:
44:79:01:e4:61:8d:38:2d:e3:fc:5a:92:5b:6e:21:
77:05:76:01:1d:39:53:d3:9c:35:5c:3b:a0:b9:7e:
54:6d:f4:11:70:df:a9:66:78:c3:ef:07:32:db:ca:
cf:87:7f:da:90:46:41:40:c0:14:06:16:8f:87:b6:
61:e7:b9:f2:5d:ec:f4:e9:1a:68:0d:c5:6f:a7:36:
1f:30:4d:ff:c0:99:53:cd:c1:3d:c0:64:f4:88:ee:
fa:ac:4f:25:8f:16:c9:cd:7d:3c:b9:aa:91:ce:fb:
98:6f:4f:66:dd:2e:52:c8:15:f5:0b:82:fa:2e:b7:
e9:03:1b:07:72:c6:82:10:82:b8:a7:2e:c9:e3:75:
c9:bf:42:01:19:89:4a:02:cb:c3:91:aa:8a:09:42:
82:7c:a1:a4:65:a2:13:35:65:85:8d:11:8d:1b:ba:
20:cd:ba:e0:9b:29:24:84:8e:c4:9c:24:8a:25:97:
54:a9:3f:50:8c:45:c1:3c:23:19:0b:29:2d:16:f9:
a8:dd:d1:e1:4f:6e:8a:a2:24:12:d1:6d:4a:80:7b:
10:ca:73:f1:2d:6f:b7:7b:bd:76:f2:4e:6e:e3:97:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:DE:BF:73:91:75:44:A7:C9:8D:69:10:71:F5:88:D6:F1:75:CD
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/LIbev3ORdUSnyY1pEHH1iNbxdc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.89.0/24
185.198.91.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:06:5f:dd:97:08:31:55:c0:1d:90:b8:5d:45:22:f8:06:30:
46:5a:23:d8:b2:cb:72:43:3c:a0:1c:57:1d:94:78:18:95:81:
46:dc:2f:e8:60:a5:0f:7a:7a:13:07:48:f3:ec:1f:dd:16:7a:
51:a2:ea:38:8d:bb:d0:af:2f:02:6d:e1:97:2e:4d:f0:09:f5:
5a:3e:72:e4:a4:73:6e:cb:6e:ae:1c:36:73:2d:73:0a:e9:97:
f6:ab:de:3a:17:69:8b:86:eb:d9:1d:28:60:92:81:be:c0:ec:
fa:db:c9:5d:a0:f0:6c:29:22:a9:bf:24:84:f4:ff:da:4b:3c:
fd:fd:72:02:85:20:ad:15:e9:e1:d4:f0:1b:c9:e6:f8:49:f2:
f8:53:be:40:92:f6:87:46:c0:ad:3a:fa:a4:40:da:0f:da:08:
7c:02:30:20:04:f5:cf:99:3f:32:b9:3b:28:cc:fb:33:58:7c:
5b:bd:22:29:7b:b2:65:ca:1e:88:23:12:09:fa:fd:75:d3:ba:
fe:0b:e7:b6:1b:55:fd:af:b2:98:f1:0c:35:ae:6c:ab:ee:29:
19:82:e7:de:b4:e1:f0:fe:7a:3b:e1:af:4d:ce:8c:a8:60:49:
13:8e:12:06:19:e0:f5:3e:cc:63:5f:2b:be:aa:51:ad:fe:49:
03:3b:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:47 2025 by rpki-client