Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/reLkqggetUctFOKXfyoXX7VB7AA.roa
File: reLkqggetUctFOKXfyoXX7VB7AA.roa (raw, json)
Hash identifier: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=
Subject key identifier: AD:E2:E4:AA:08:1E:B5:47:2D:14:E2:97:7F:2A:17:5F:B5:41:EC:00
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 0194258FA740C4A22248910988E8755FB5B1
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/reLkqggetUctFOKXfyoXX7VB7AA.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 89.150.63.0/24 maxlen: 24
194.176.117.0/24 maxlen: 24
195.5.104.0/24 maxlen: 24
2a13:14c0::/32 maxlen: 48
2a13:14c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a7:40:c4:a2:22:48:91:09:88:e8:75:5f:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ade2e4aa081eb5472d14e2977f2a175fb541ec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:37:b5:98:8d:64:da:4f:5e:26:78:8b:1a:
73:9e:de:ba:d1:f3:18:ea:ec:bf:58:05:d5:72:1a:
07:c6:f4:a0:71:4c:b8:77:95:95:b7:3e:fa:d8:df:
b9:98:2b:ca:b4:86:5f:c9:f7:47:3c:a4:c3:e8:e9:
a1:ca:46:a9:66:ed:4b:b9:52:90:0f:a4:71:98:86:
27:50:0c:5f:09:01:83:da:e2:68:b1:31:0f:a3:1c:
ee:08:23:a1:9c:e7:2e:02:f2:6e:7b:a2:2f:9c:e9:
03:93:6b:3b:d2:d5:c7:95:dc:91:66:0e:2c:80:5c:
b5:de:14:22:9c:ea:e3:19:40:61:cb:88:66:f9:aa:
22:88:71:22:b4:27:7f:79:18:a7:14:03:59:26:a9:
5e:da:e8:b5:e2:06:e4:18:dd:f2:fc:9d:83:d5:4e:
d7:a1:0f:da:f7:8a:15:25:d6:7e:4a:d8:e9:1e:24:
ea:d0:10:72:3b:8f:9b:18:c3:e3:05:a8:c4:c9:58:
f1:db:04:52:bc:b2:15:0e:b4:d5:0c:c3:80:e5:f0:
c8:e3:4a:f5:7f:5f:6a:6b:b7:a9:38:04:41:30:37:
9b:d4:61:b7:d5:df:69:f8:a9:de:f6:0e:09:58:20:
9e:70:b6:7b:60:2d:da:b4:8a:eb:28:9a:fb:a9:cd:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E2:E4:AA:08:1E:B5:47:2D:14:E2:97:7F:2A:17:5F:B5:41:EC:00
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/reLkqggetUctFOKXfyoXX7VB7AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.63.0/24
194.176.117.0/24
195.5.104.0/24
IPv6:
2a13:14c0::/31
Signature Algorithm: sha256WithRSAEncryption
11:3e:b9:f0:eb:6d:e5:7b:2c:7d:6e:c2:57:49:5f:85:fe:e6:
38:5a:d8:a2:57:33:fd:d1:bd:6e:6d:dd:a6:3a:65:18:f1:72:
45:d2:00:f6:f7:74:b3:73:1b:55:05:da:2d:65:d3:c5:a2:2f:
2a:51:e8:b1:fd:23:ef:de:9b:5a:23:55:a2:cf:fb:39:eb:46:
50:be:f2:ef:c7:df:bc:c8:f0:02:a7:e3:e8:f9:31:55:06:40:
c0:e8:41:ca:37:73:4a:92:5e:99:ef:70:b0:a5:38:e2:c1:cb:
6c:33:f3:9d:0e:1c:05:14:92:0e:2a:83:7c:13:a0:f2:89:69:
ed:bb:85:b3:08:c4:7a:d9:79:96:de:fd:eb:af:88:5c:64:38:
e4:f2:f9:24:04:3a:d0:53:eb:75:74:85:ab:5e:0e:f7:a0:54:
1a:0c:a0:e9:84:f4:08:7a:ff:d6:90:d9:7a:01:14:cb:ce:1a:
a2:52:96:50:52:d5:99:ed:8e:58:b3:ed:5a:5e:f7:db:3a:a1:
a7:93:e9:40:fa:7e:dd:48:73:76:7e:05:2a:b4:68:83:dd:1c:
4d:36:e3:c5:b0:e7:a8:65:fe:c2:33:30:15:79:97:a4:0e:31:
0c:ec:3a:14:aa:1b:5c:fa:db:4e:0e:c4:7f:56:89:44:65:62:
fa:3e:fa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:02 2025 by rpki-client