Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YhE2J0Qtiwl1PIV18yUHGVJK38o.roa
File: YhE2J0Qtiwl1PIV18yUHGVJK38o.roa (raw, json)
Hash identifier: bcRWg38JNBmpEbmqZiEhGmAlqs/GQq27gDSzEp5JrTY=
Subject key identifier: 62:11:36:27:44:2D:8B:09:75:3C:85:75:F3:25:07:19:52:4A:DF:CA
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ACDEBF7732011846602A4989644D3
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YhE2J0Qtiwl1PIV18yUHGVJK38o.roa
Signing time: Sun 01 Jan 2023 11:15:02 +0000
ROA not before: Sun 01 Jan 2023 11:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21502
IP address blocks: 89.157.88.0/21 maxlen: 21
89.157.96.0/19 maxlen: 19
2a00:6200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:cd:eb:f7:73:20:11:84:66:02:a4:98:96:44:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62113627442d8b09753c8575f3250719524adfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:a5:26:f9:c1:ca:ae:db:73:ce:04:02:f0:
73:c4:0c:98:34:c0:a4:8b:38:b7:63:88:ce:24:ce:
d5:69:bf:85:d2:b1:d2:a2:88:d9:ce:7b:11:72:df:
55:23:63:fa:95:0c:7f:48:9c:42:67:3d:7f:fc:1b:
ac:a1:57:8e:62:57:8a:2c:f9:f9:5a:f7:49:f7:c0:
98:18:a9:68:a6:ba:64:f9:fc:f8:88:49:5c:e4:f8:
a1:43:97:43:ac:39:f9:60:e9:07:dd:35:9d:f5:66:
fe:c8:5e:84:84:10:aa:e1:37:cb:28:65:e4:36:c8:
e3:6c:09:e4:b3:26:02:be:21:15:27:3a:92:16:26:
9d:7a:4d:7b:3b:5c:af:fb:24:54:7d:79:1f:84:e0:
38:d7:10:29:e7:88:dc:2d:71:e0:05:26:40:df:3a:
5b:5c:c2:51:e1:20:2a:63:63:2b:13:f7:6f:1c:9a:
5b:2d:09:71:6c:7e:b2:00:42:83:37:b6:23:2e:13:
a3:a0:24:e2:37:1e:5f:01:fe:f8:a6:fe:a1:b1:94:
e4:6e:26:f6:d1:1e:c7:f7:2c:e8:8e:c9:78:69:4d:
ac:81:b0:28:1f:b4:46:62:fc:81:56:40:85:10:9b:
46:55:e9:87:ea:7d:c9:a3:06:7e:ef:1c:59:53:e1:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:11:36:27:44:2D:8B:09:75:3C:85:75:F3:25:07:19:52:4A:DF:CA
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YhE2J0Qtiwl1PIV18yUHGVJK38o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.157.88.0-89.157.127.255
IPv6:
2a00:6200::/29
Signature Algorithm: sha256WithRSAEncryption
08:6b:c9:04:f6:24:35:0a:b8:b3:b6:83:cc:29:aa:4a:f7:d4:
85:59:bd:0e:97:96:83:af:e3:57:59:71:13:eb:7b:8d:61:47:
b4:e2:65:55:7e:d7:a5:61:0a:bb:d0:3c:f9:f4:fc:d7:2c:0c:
cb:db:60:4d:fe:bc:99:ef:07:87:f2:52:a4:01:7b:14:c4:ff:
b6:cf:78:27:e5:18:a6:43:9d:08:e0:2b:a4:af:60:1b:5b:f8:
11:0d:32:5c:bb:5c:0b:a5:0b:03:dc:e3:a1:b0:1b:8f:88:33:
61:c0:cb:b5:77:f5:e8:46:4f:be:c0:08:1f:3c:23:ea:50:89:
61:a1:a1:49:53:5b:70:7e:45:b9:cd:54:c9:72:f8:71:00:24:
db:6d:b5:e4:f1:48:38:07:98:cf:34:f0:7e:19:16:0c:69:4d:
65:2f:32:de:18:6b:b7:64:7f:67:75:7d:9b:36:a0:24:d1:66:
08:bc:c8:21:69:0c:9b:60:6c:ac:e9:63:b6:a3:72:39:b3:b8:
43:aa:f6:07:0d:fa:4b:33:56:b6:5b:c5:91:68:ba:c9:f1:e5:
03:7b:6a:4d:85:0d:a9:d1:e7:cf:bc:18:57:f3:57:f4:5d:b1:
a5:46:ac:a2:fc:e7:da:a5:66:7c:f3:8e:01:3d:2e:a2:00:da:
d0:7c:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:40:24 2025 by rpki-client