Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/q8tiVzR2M8JNscZ0-IBwYYD8R-A.roa
File: q8tiVzR2M8JNscZ0-IBwYYD8R-A.roa (raw, json)
Hash identifier: Ry4i8/b9DWacTiSi6UZZ4x1A46beZr9aflF/J7YkplM=
Subject key identifier: AB:CB:62:57:34:76:33:C2:4D:B1:C6:74:F8:80:70:61:80:FC:47:E0
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 03C62F6F
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/q8tiVzR2M8JNscZ0-IBwYYD8R-A.roa
Signing time: Sat 01 Jan 2022 04:56:10 +0000
ROA not before: Sat 01 Jan 2022 04:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204810
IP address blocks: 89.150.47.0/24 maxlen: 24
89.150.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63319919 (0x3c62f6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jan 1 04:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abcb6257347633c24db1c674f880706180fc47e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:da:72:1f:59:f8:18:8f:5f:9c:00:d3:a1:
b1:0c:38:56:51:33:b0:ca:5a:42:bf:92:d3:1f:e7:
48:97:0a:ff:00:86:27:53:56:23:6b:0d:56:fd:30:
61:bf:9c:71:b9:04:16:16:58:5b:7b:37:a4:13:46:
54:b2:61:7b:97:a1:bc:03:73:f9:41:5f:72:70:2d:
41:ed:ca:f7:a2:26:19:8a:64:23:77:98:19:5d:d4:
cf:3d:89:92:53:b5:ba:d6:55:28:cb:0f:cb:14:4d:
3a:ca:84:6c:03:9f:45:d7:76:30:29:0a:4a:1a:b3:
06:83:dc:ee:c8:0f:d1:35:d4:9f:05:ec:11:01:d2:
4b:ac:26:35:3c:93:72:48:65:92:6a:73:ea:77:27:
d8:5f:e4:f7:46:e2:ea:98:8b:86:11:72:2f:20:40:
80:d1:fe:d9:d6:2f:96:b9:84:b9:a5:33:b8:d7:3f:
f3:f8:e1:7c:73:05:06:88:c6:8f:59:24:56:11:39:
43:a7:64:71:f6:44:bb:e5:a2:24:9e:10:44:1f:e1:
4e:6c:1a:f9:bc:1f:4e:f5:27:a4:29:68:18:3b:36:
8e:32:17:d2:50:f1:a0:eb:53:0c:81:24:55:89:75:
2d:43:f0:7c:26:6c:0a:69:8d:f1:c6:1d:fa:e4:ad:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:62:57:34:76:33:C2:4D:B1:C6:74:F8:80:70:61:80:FC:47:E0
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/q8tiVzR2M8JNscZ0-IBwYYD8R-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.46.0/23
Signature Algorithm: sha256WithRSAEncryption
49:54:d3:1f:24:65:a6:46:7e:39:34:93:67:25:3c:b2:ee:e5:
c6:1b:fc:b7:a9:f8:83:f5:f1:8b:8a:76:47:bc:c4:4a:e7:18:
c6:34:c8:88:b0:8f:dd:43:4c:ec:e0:a2:5f:5f:b9:3e:98:71:
da:5d:ab:2d:63:8a:af:f7:c3:d2:74:37:6c:ec:73:c3:43:76:
83:5b:66:3a:02:de:ac:9f:1b:1e:6c:1d:75:6f:38:82:64:3e:
e7:82:fd:3e:02:8b:a2:e4:f0:4f:b7:0b:e5:5e:fc:13:47:2c:
f5:0a:ba:2f:54:6c:bf:7d:6d:4d:fe:0d:1e:d5:f6:a9:c0:a7:
e6:21:e2:e7:96:09:d0:d1:68:92:22:20:d4:fc:df:d6:91:9f:
2c:b0:13:06:70:2e:1a:bc:f8:dd:bb:9a:dd:81:ff:c2:60:96:
d7:af:22:7f:2e:e2:0e:b9:e7:b6:90:99:7c:52:71:3e:45:a7:
ec:1d:f5:11:7d:71:46:43:37:a7:cc:f9:d1:a8:28:04:16:d2:
d1:7a:37:98:a8:b6:85:a8:93:98:78:02:f0:9c:28:b2:70:27:
91:d0:2f:d7:23:1a:b8:87:ef:fd:38:e0:36:30:70:c3:47:85:
f7:86:21:2d:aa:85:62:de:af:77:af:75:ea:52:42:6f:e0:59:
54:fd:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:43 2025 by rpki-client