Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/6IskESCQ5fcR4Myfphyy0K_XVG4.roa
File: 6IskESCQ5fcR4Myfphyy0K_XVG4.roa (raw, json)
Hash identifier: Wnki8Y+UPqYHKVls3LsBOmyxzJU3AmkXVbenWkyhUMk=
Subject key identifier: E8:8B:24:11:20:90:E5:F7:11:E0:CC:9F:A6:1C:B2:D0:AF:D7:54:6E
Certificate issuer: /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial: 2BA5953C
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/6IskESCQ5fcR4Myfphyy0K_XVG4.roa
Signing time: Wed 20 Apr 2022 14:01:36 +0000
ROA not before: Wed 20 Apr 2022 14:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31323
IP address blocks: 89.223.1.0/24 maxlen: 24
87.249.55.0/24 maxlen: 24
92.255.40.0/23 maxlen: 23
89.104.118.0/24 maxlen: 24
2a02:28f8:2::/48 maxlen: 48
2a02:28f8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732271932 (0x2ba5953c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912e418225da95d6a21302407923ff94549572b
Validity
Not Before: Apr 20 14:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e88b24112090e5f711e0cc9fa61cb2d0afd7546e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:f5:49:a1:ea:45:d0:cd:c4:fe:9c:b0:a7:
44:f0:0b:3b:00:b4:0d:9e:04:49:29:62:34:f4:3a:
5a:88:a3:92:30:2a:c3:3a:21:23:14:ea:eb:35:1b:
41:14:d7:dc:39:42:3a:fb:a3:1a:19:30:68:a2:8e:
6b:28:63:1f:69:5a:a5:1c:74:e5:34:6f:9b:d5:36:
13:fd:ed:a4:5a:05:91:2a:0d:b2:6c:52:44:de:56:
c9:c2:27:b6:db:0f:53:89:d2:b3:97:00:5b:2c:63:
2c:92:28:03:74:08:6b:47:ea:6c:01:36:53:5a:7c:
7c:d9:6b:fa:1c:f9:79:81:2f:2f:8b:05:21:1f:6d:
d4:2e:46:9c:26:d1:4f:43:c7:12:dd:d1:19:32:50:
0c:2e:36:33:84:64:e8:fd:c2:ba:95:72:a9:8f:77:
93:8e:f5:0d:60:99:38:79:51:a8:54:6a:8e:df:46:
20:7f:7f:e6:1f:91:1c:d4:42:62:68:88:66:76:2f:
37:9a:07:72:49:f6:40:32:ba:1b:47:98:86:d7:d6:
0b:00:38:2d:b8:81:74:e2:62:5b:4d:2a:d7:27:58:
60:fc:52:e4:bf:29:88:d3:42:fe:85:b4:2f:86:04:
6d:73:74:70:34:42:0e:f4:c7:1b:e6:1b:e9:25:44:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8B:24:11:20:90:E5:F7:11:E0:CC:9F:A6:1C:B2:D0:AF:D7:54:6E
X509v3 Authority Key Identifier:
keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/6IskESCQ5fcR4Myfphyy0K_XVG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.249.55.0/24
89.104.118.0/24
89.223.1.0/24
92.255.40.0/23
IPv6:
2a02:28f8::/48
2a02:28f8:2::/48
Signature Algorithm: sha256WithRSAEncryption
9b:cf:45:57:2f:03:60:d7:0a:25:90:e6:c8:0b:24:d4:fc:69:
e2:e4:b2:cd:7a:ee:e6:ee:b7:25:b9:08:a7:74:87:3b:22:1c:
27:45:76:b1:eb:af:6c:a9:5b:0d:94:c4:76:4d:7e:d3:35:6d:
0d:68:6e:00:02:79:29:4b:ff:0b:bc:be:48:6b:94:7f:32:9e:
f9:11:c9:e3:b8:5d:2a:5e:3f:20:76:29:e0:21:62:cd:2f:45:
26:2e:1a:dd:49:28:e8:bc:65:6c:d0:0e:6c:c9:ab:06:7e:f2:
cd:63:69:25:13:be:8b:8c:0c:62:b4:18:16:15:7a:db:83:9a:
5f:d3:9f:cf:19:99:ef:87:81:7c:fe:04:38:00:61:e5:33:b5:
0c:fa:9e:f0:81:95:c2:63:30:1d:d9:12:2f:ba:fd:c9:71:0e:
ed:b0:5a:7b:43:bc:aa:68:d8:c0:80:f6:ec:1b:b5:19:f1:87:
5a:66:a1:fc:80:b7:5c:01:ed:f6:6f:42:86:9a:02:03:88:36:
44:e7:3b:52:5d:4c:6d:61:13:ae:a5:46:8f:80:09:e1:f6:3e:
ad:78:25:00:5b:13:d4:48:fe:ff:e6:c1:26:f9:e4:66:12:e6:
61:9a:7f:44:4e:1b:31:66:41:12:63:88:c7:f9:ae:2d:41:41:
ec:d0:53:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:37 2025 by rpki-client