Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/sxEAKY_aMKRnBM4SpkFRvHo38bo.roa
File: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (raw, json)
Hash identifier: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=
Subject key identifier: B3:11:00:29:8F:DA:30:A4:67:04:CE:12:A6:41:51:BC:7A:37:F1:BA
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019508E4BB7FDFD9B1B5ACB08A07F306248B
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/sxEAKY_aMKRnBM4SpkFRvHo38bo.roa
Signing time: Sat 15 Feb 2025 09:16:02 +0000
ROA not before: Sat 15 Feb 2025 09:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213669
IP address blocks: 89.22.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:08:e4:bb:7f:df:d9:b1:b5:ac:b0:8a:07:f3:06:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Feb 15 09:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b31100298fda30a46704ce12a64151bc7a37f1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:94:7a:dc:ee:90:35:1a:1e:d3:3f:a0:7a:
68:fe:64:a8:3f:c3:54:8f:56:66:01:b8:14:b7:e4:
3c:d1:d8:8c:37:b8:a9:4d:db:e7:96:eb:b8:57:8f:
6e:65:95:93:04:d2:f5:71:0e:b9:7d:aa:13:14:69:
9e:5e:8c:aa:88:72:00:63:a6:2c:15:f4:7b:19:72:
0e:8c:ce:83:fc:50:7c:76:dc:f4:68:da:33:0b:3f:
e4:f0:d4:87:3c:37:3a:91:82:0d:c2:2e:04:16:49:
47:70:9d:3a:61:02:fd:22:a2:49:41:7e:58:71:78:
be:df:8c:dd:47:d4:4e:a9:5f:bf:cb:e4:35:6d:95:
1c:85:4b:77:f1:1b:ac:cb:d7:bc:8b:29:cc:d3:9c:
11:88:1a:71:ca:c0:53:ef:19:fd:7a:3f:36:7e:0a:
88:b3:27:55:d4:e6:47:be:87:7c:2d:ce:16:3b:64:
91:7f:25:e7:cb:90:7a:12:c1:a3:be:97:e4:f8:45:
70:c5:fa:48:52:fe:ba:86:fd:b1:f9:44:c4:02:e5:
2d:3a:a5:73:21:49:16:a0:a5:9a:20:81:c2:34:5e:
5b:4e:82:64:2f:39:ea:a8:c8:11:87:e5:ba:5b:d9:
9a:4e:76:35:02:1c:4a:54:7d:26:66:26:39:29:38:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:00:29:8F:DA:30:A4:67:04:CE:12:A6:41:51:BC:7A:37:F1:BA
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/sxEAKY_aMKRnBM4SpkFRvHo38bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.195.0/24
Signature Algorithm: sha256WithRSAEncryption
93:83:94:c3:0d:bd:31:c5:cd:4c:8a:74:89:73:e0:e4:e9:17:
b2:cf:b8:1f:92:70:ce:fa:22:77:c0:e7:2b:6f:80:ee:ce:37:
77:29:f1:33:7c:eb:82:73:b8:a5:19:76:f1:b4:79:b5:1a:ce:
65:97:7c:a8:82:c1:08:f0:fc:a5:bb:56:71:20:ec:65:f0:4b:
97:87:0a:60:65:da:cd:5a:7a:49:10:24:72:1c:79:ed:83:d2:
50:7d:22:22:55:0c:7d:27:56:17:a4:69:09:6b:65:b1:81:1a:
b9:85:91:1c:9b:55:1e:fe:da:71:a6:3e:d4:d1:04:4c:29:8d:
35:d8:45:0f:ee:d1:10:78:4c:b0:1c:bc:e8:ac:e3:87:f3:54:
7e:aa:1f:d0:d0:8c:5e:90:8a:99:2d:68:ad:40:04:a6:f2:b2:
40:93:ed:55:59:e4:55:a2:f1:22:bf:f5:ff:e3:d6:8d:db:ce:
04:e2:34:f1:de:04:86:f8:c1:bf:eb:f2:31:4c:3c:99:19:13:
c8:e5:4f:be:f3:8e:34:73:01:58:41:b5:d9:7f:1d:d7:18:70:
a9:2c:1f:72:b6:88:4a:ad:11:d5:cd:2c:9e:a7:9e:ef:b9:2f:
f8:f6:5d:92:d6:1d:f9:70:0b:cb:ed:d0:63:ab:b4:73:1d:e4:
e3:1f:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:53 2025 by rpki-client