Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/SqfxLbseieQhwcVr-MzB6FNxfsA.roa
File: SqfxLbseieQhwcVr-MzB6FNxfsA.roa (raw, json)
Hash identifier: t62RUsBNfW0Gc5vux8EM8y4VzwfqkMkghL9uP34DbXQ=
Subject key identifier: 4A:A7:F1:2D:BB:1E:89:E4:21:C1:C5:6B:F8:CC:C1:E8:53:71:7E:C0
Certificate issuer: /CN=b3d2595ee861126a87a7203782c5f59e02261e81
Certificate serial: 01856C65C1F85D361FB94E350488389A48DF
Authority key identifier: B3:D2:59:5E:E8:61:12:6A:87:A7:20:37:82:C5:F5:9E:02:26:1E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9JZXuhhEmqHpyA3gsX1ngImHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/SqfxLbseieQhwcVr-MzB6FNxfsA.roa
Signing time: Sun 01 Jan 2023 08:14:46 +0000
ROA not before: Sun 01 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57523
IP address blocks: 152.89.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:c1:f8:5d:36:1f:b9:4e:35:04:88:38:9a:48:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d2595ee861126a87a7203782c5f59e02261e81
Validity
Not Before: Jan 1 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa7f12dbb1e89e421c1c56bf8ccc1e853717ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:88:65:48:7e:84:38:60:cb:0e:c1:99:ce:
2e:94:2e:b9:28:c7:9c:b3:8d:c3:cc:8d:88:3d:f5:
92:4d:35:be:f4:90:02:5f:f0:5b:75:37:d0:ad:b8:
cb:53:cb:50:e5:0a:4f:b1:54:0f:ab:2b:d1:c7:a1:
6e:6f:64:ea:b2:0c:18:80:50:23:e1:7a:af:85:96:
da:5d:41:13:70:c4:14:24:0a:01:b4:a2:8f:06:8d:
69:8f:9b:fa:eb:26:8d:60:0b:3a:e3:38:d1:c9:28:
df:89:e3:97:1e:89:37:c4:9a:35:00:06:2f:51:54:
5e:13:e0:d1:ec:27:67:d4:11:f5:dd:0f:c2:f6:3b:
ec:b4:98:2d:91:27:82:22:20:b7:50:7b:af:0c:b1:
71:93:b6:ef:8a:8c:e5:dc:02:fd:6c:a4:3a:42:a8:
de:8e:6e:8d:2a:c6:bd:c2:b6:1e:52:66:8b:0b:87:
be:b5:e3:9c:f3:e9:7d:4e:4b:f5:96:9b:75:cd:89:
ef:53:de:32:c2:85:88:fd:80:97:56:99:de:71:04:
69:3c:71:72:ca:a9:fe:aa:82:10:ab:c3:5e:45:f9:
a7:df:f5:24:f6:3f:fa:fe:2b:fd:df:6d:f1:40:0d:
e9:41:e5:6b:b4:fc:20:98:81:a2:8d:17:35:2f:b2:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:F1:2D:BB:1E:89:E4:21:C1:C5:6B:F8:CC:C1:E8:53:71:7E:C0
X509v3 Authority Key Identifier:
keyid:B3:D2:59:5E:E8:61:12:6A:87:A7:20:37:82:C5:F5:9E:02:26:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9JZXuhhEmqHpyA3gsX1ngImHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/SqfxLbseieQhwcVr-MzB6FNxfsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/s9JZXuhhEmqHpyA3gsX1ngImHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.198.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e1:0c:a3:ff:3a:f7:50:53:ca:4d:4c:7f:ed:65:0d:2a:1a:
23:30:1f:2b:8c:05:ff:d4:bc:7f:11:bb:54:e1:8c:20:f8:5e:
e9:1d:cc:a1:8d:f6:87:97:8d:1a:76:4a:9b:fe:4c:f2:4c:96:
c7:15:72:44:0c:c6:d7:66:3b:eb:6b:cf:fd:8b:ab:05:4c:a4:
39:b2:dc:7d:09:80:c0:75:e2:38:81:f7:b8:b3:6c:db:29:22:
e5:ec:10:74:f1:26:3b:6b:3e:11:8a:d7:8d:3f:f6:11:cd:9e:
00:a0:84:f5:d7:53:cd:56:04:93:2d:32:16:e6:c0:62:4d:f5:
97:a3:68:bc:f7:65:c2:d3:c8:0e:8c:9b:f0:c9:60:e3:51:e9:
4b:58:d4:23:5c:12:5f:fb:af:ef:5c:89:b7:cf:42:5f:53:0c:
b5:13:9e:40:cb:5d:73:f7:65:85:12:d1:31:8a:31:c9:0b:37:
57:d2:bd:ba:f5:cd:09:7b:63:bb:eb:6f:ed:5a:2b:5a:81:e5:
6b:c5:d6:06:f4:88:ad:3a:96:3a:56:7b:b6:4e:e5:f0:a7:71:
ea:06:0a:ec:e5:d7:54:29:fa:fd:aa:e7:07:81:af:6a:6a:fb:
2d:6b:5a:fc:25:99:19:7c:1a:23:f2:c5:05:d0:12:d3:48:17:
d3:ac:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:37 2025 by rpki-client