Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/IkkZLrIA9bPBAWRnI31VHJMeTe4.roa
File: IkkZLrIA9bPBAWRnI31VHJMeTe4.roa (raw, json)
Hash identifier: ee1mHybN7/LIXuLEWtH6jE0gHsH+qx0UvqYRNKUs6eA=
Subject key identifier: 22:49:19:2E:B2:00:F5:B3:C1:01:64:67:23:7D:55:1C:93:1E:4D:EE
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BA0BC36
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/IkkZLrIA9bPBAWRnI31VHJMeTe4.roa
Signing time: Mon 27 Jun 2022 09:07:40 +0000
ROA not before: Mon 27 Jun 2022 09:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195083318 (0xba0bc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 27 09:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2249192eb200f5b3c1016467237d551c931e4dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:d8:6e:42:5f:44:de:e7:8e:d9:d2:1f:74:
47:0e:f6:90:73:aa:26:be:65:21:cf:5d:f4:27:80:
95:3c:da:5b:ab:cd:92:28:f4:eb:f2:1c:86:5c:c7:
e2:12:b1:65:f9:eb:b8:62:66:06:06:46:d2:50:98:
04:57:f6:a9:4e:71:80:97:b0:39:98:7c:22:a1:7a:
f4:5a:65:58:40:15:c8:4c:91:55:01:7c:aa:db:5c:
17:85:f1:c4:65:59:65:69:49:2e:a1:a0:d8:49:8f:
33:bf:73:23:07:63:0c:53:ca:51:1e:34:e0:d2:65:
fa:a2:97:8a:2b:0f:dd:ab:a7:cd:f2:69:a3:01:00:
be:8e:37:77:05:51:0c:97:5f:86:6d:f5:1d:6a:65:
40:44:93:63:7a:d6:0a:0e:1a:a4:15:0b:b9:aa:bc:
72:52:38:18:64:b1:d3:31:0e:f6:12:5e:9e:9f:0d:
fc:45:2d:12:59:84:03:02:7a:44:29:2a:5d:43:f2:
d3:9c:e2:99:ea:a0:4c:a9:43:51:95:8d:7a:a9:92:
72:09:e1:b0:92:4c:be:9e:4a:71:33:d7:21:23:7c:
ae:4f:0a:8a:df:af:f0:8f:f2:6b:3c:72:ff:93:20:
ca:cb:54:84:00:96:6d:11:2c:82:54:d1:b4:66:89:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:19:2E:B2:00:F5:B3:C1:01:64:67:23:7D:55:1C:93:1E:4D:EE
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/IkkZLrIA9bPBAWRnI31VHJMeTe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.132.0/24
89.116.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e9:72:98:f5:8b:26:21:6c:46:21:0d:5e:ec:64:b5:c2:7f:
6b:ed:6e:49:b2:c4:8c:60:45:ad:58:36:c6:db:aa:7d:b8:3c:
1e:79:12:0c:37:3a:5d:fe:3e:28:ca:58:24:d2:b8:7d:fa:d2:
e1:da:49:77:80:57:89:8f:c0:25:01:f1:21:23:55:90:a4:1a:
32:f8:7b:1d:ab:fb:7f:6a:05:8d:d0:68:26:ca:46:2f:48:91:
29:74:ff:d2:a6:16:a0:fc:5b:7f:87:f7:12:8b:eb:78:83:08:
48:8b:2b:b2:75:d9:b1:48:be:0f:85:7b:c3:e7:3d:2b:c0:30:
ea:58:73:a3:87:7e:d0:3c:ba:f2:ad:b1:b3:ea:39:3c:fa:05:
79:78:28:94:5a:c4:5a:e1:04:7a:e4:29:a8:83:5f:c3:00:c1:
85:08:3e:a0:d3:e8:e4:87:f3:f9:1e:1c:89:fb:cd:38:b9:75:
6e:f0:5d:47:3a:db:64:13:56:55:c1:5f:97:bc:9a:5d:cb:bd:
63:82:28:6e:f5:ec:c2:29:c1:78:83:b4:79:e7:40:da:46:bb:
b4:a8:01:78:6e:50:eb:23:6c:f2:ee:4d:3c:01:46:0f:ba:ca:
e7:bb:59:c8:9d:1a:5f:95:2e:c7:0b:30:5f:ec:57:5e:7e:30:
da:6c:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:24 2025 by rpki-client