Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/IbAXF7_BZKW2r-Xr_Kzv3uX0k6w.roa
File: IbAXF7_BZKW2r-Xr_Kzv3uX0k6w.roa (raw, json)
Hash identifier: bz5O5o9xT1Ed5U2LzOhIFcs1dsrQHTvrHkNaPObt7rI=
Subject key identifier: 21:B0:17:17:BF:C1:64:A5:B6:AF:E5:EB:FC:AC:EF:DE:E5:F4:93:AC
Certificate issuer: /CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Certificate serial: 018CC6B90916B4401FF3ED576942469A0A3E
Authority key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/IbAXF7_BZKW2r-Xr_Kzv3uX0k6w.roa
Signing time: Mon 01 Jan 2024 20:31:04 +0000
ROA not before: Mon 01 Jan 2024 20:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50563
IP address blocks: 152.89.182.0/23 maxlen: 23
152.89.182.0/24 maxlen: 24
152.89.180.0/24 maxlen: 24
152.89.180.0/23 maxlen: 23
152.89.180.0/22 maxlen: 22
152.89.183.0/24 maxlen: 24
152.89.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:09:16:b4:40:1f:f3:ed:57:69:42:46:9a:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Validity
Not Before: Jan 1 20:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21b01717bfc164a5b6afe5ebfcacefdee5f493ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:ce:68:63:ff:f8:10:65:7d:46:30:63:70:
65:e9:4a:c2:d5:5f:92:39:45:3d:31:57:92:0b:8a:
d6:13:b6:05:2f:cd:19:fd:51:95:9f:25:98:cf:b2:
60:18:71:29:72:1f:f8:56:27:fd:6c:66:87:e6:ca:
d8:94:0f:f9:b9:30:c7:31:79:e4:2c:fa:24:57:06:
53:75:78:46:1d:12:5f:7c:c3:bc:4b:c0:01:20:b9:
b8:a2:51:8b:91:07:0f:e3:4b:e9:64:f1:f3:ba:ab:
d1:02:36:ef:24:61:3f:68:e3:65:73:8b:a3:2d:fa:
7e:00:2d:61:b6:dd:25:96:ae:fb:6f:e3:73:08:69:
63:30:13:0d:90:81:5a:49:70:9b:94:dc:ad:d8:03:
22:f2:97:a8:d2:bc:aa:da:53:41:dd:5c:a3:de:88:
7c:59:0d:44:f6:ff:43:52:50:db:00:fd:ea:8f:83:
f5:3a:97:a1:95:a2:44:69:72:0c:67:01:0a:49:09:
f3:60:64:44:87:ed:aa:3a:66:55:c1:77:59:95:c9:
34:52:d6:e4:2f:f8:a0:24:c6:83:33:f3:38:b9:33:
57:d6:14:97:28:0a:10:11:3b:f5:64:a9:71:4a:84:
29:07:88:30:d0:43:58:d9:be:d5:c9:c8:8f:a8:ce:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:17:17:BF:C1:64:A5:B6:AF:E5:EB:FC:AC:EF:DE:E5:F4:93:AC
X509v3 Authority Key Identifier:
keyid:13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/IbAXF7_BZKW2r-Xr_Kzv3uX0k6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:5e:76:41:73:49:16:23:e6:fd:7a:d7:96:fd:9e:d7:00:72:
f6:16:b6:54:fc:ca:36:39:15:d7:18:30:e7:0b:39:af:21:ba:
3a:0f:c7:bb:91:82:f1:35:c0:02:c1:f1:c6:a9:ab:45:99:76:
5e:2b:62:57:2a:6e:b0:a3:6c:39:70:1e:5c:6b:e4:60:94:09:
60:bb:ed:a1:79:08:f4:5a:55:6b:94:15:e2:60:96:6f:a5:ef:
2b:c1:88:54:e5:0a:91:16:0c:63:08:a1:2e:b8:67:ce:1a:d8:
c0:50:cc:c9:ac:00:bf:4f:f6:85:a5:59:f9:84:60:12:eb:8d:
be:a8:a7:a3:aa:4f:88:2e:6a:a5:de:9d:e7:22:96:88:b7:fb:
9e:2e:bb:30:ab:d0:91:f6:37:12:8f:39:c7:9f:13:fc:6e:ec:
ee:d8:1e:61:84:23:81:7f:91:5e:fd:9d:a2:72:54:22:2a:fe:
17:78:a2:e4:a8:8b:e4:01:41:3a:30:10:9d:4d:13:14:c6:0c:
df:29:ef:63:71:3c:bd:6c:4a:28:cf:fb:78:50:a5:79:e3:1e:
b1:f0:c1:5b:12:21:72:92:20:e0:3b:ee:91:eb:b1:9b:6c:33:
39:e9:c0:7b:9b:ff:46:76:4e:1d:c1:a6:e4:58:cc:e1:68:83:
49:4c:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:38 2025 by rpki-client