Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/5m85a6z_82pxvCFTAubCZE3IDRY.roa
File: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (raw, json)
Hash identifier: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=
Subject key identifier: E6:6F:39:6B:AC:FF:F3:6A:71:BC:21:53:02:E6:C2:64:4D:C8:0D:16
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 0194D58ABBADC04D4915458B82C4303845B6
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/5m85a6z_82pxvCFTAubCZE3IDRY.roa
Signing time: Wed 05 Feb 2025 09:57:06 +0000
ROA not before: Wed 05 Feb 2025 09:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213637
IP address blocks: 89.252.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:8a:bb:ad:c0:4d:49:15:45:8b:82:c4:30:38:45:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Feb 5 09:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e66f396bacfff36a71bc215302e6c2644dc80d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:8c:b5:93:70:69:9a:3a:6e:b3:25:2d:2d:
d0:c9:3a:3a:07:08:40:39:ba:9a:5a:7f:a7:1f:50:
eb:07:50:5e:ac:eb:b6:96:34:81:55:4e:66:ea:f9:
13:51:71:36:40:88:c8:96:3e:80:d6:5c:80:6b:3b:
ce:5f:c1:41:5f:1d:b2:d4:b6:d2:20:08:7b:96:2c:
47:7d:ce:64:eb:85:bc:aa:20:c4:95:01:cf:8b:a8:
c8:d3:23:26:cb:79:39:fa:87:de:fd:dd:3d:e9:fc:
8c:4e:20:9c:01:89:88:47:47:bd:85:2d:4c:a9:a3:
3a:11:24:50:eb:38:a4:94:53:75:9b:c5:ef:d4:c4:
d9:eb:c3:d0:1c:dc:e8:d9:bc:a3:6a:11:d1:c2:20:
d2:c9:f3:0b:fb:9f:cf:41:a3:c5:c0:1d:7f:fa:61:
09:35:52:e0:7e:65:e6:0a:44:89:58:ca:09:9f:1b:
4b:5f:14:8d:da:b5:7d:8c:24:f8:85:30:f8:48:ce:
82:38:65:22:34:ff:8d:1c:e4:69:37:14:e2:5d:c8:
d2:d0:e9:17:7f:7f:bc:5e:52:e3:b7:5c:db:2c:2d:
6c:6a:66:75:fb:33:f8:a8:66:f5:3a:f7:76:5f:ce:
92:a7:d5:e8:5d:6e:4f:91:48:50:06:f4:40:1c:36:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6F:39:6B:AC:FF:F3:6A:71:BC:21:53:02:E6:C2:64:4D:C8:0D:16
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/5m85a6z_82pxvCFTAubCZE3IDRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.149.0/24
Signature Algorithm: sha256WithRSAEncryption
51:02:58:d8:b0:07:22:ed:44:76:cc:51:59:06:b0:02:4c:e5:
be:6b:e3:c2:31:6b:77:49:ca:f2:e4:aa:fd:ed:7a:0a:87:84:
7f:86:0f:47:24:e1:79:aa:ba:d0:46:64:55:67:27:f7:58:d3:
63:ad:ab:c9:f4:4e:39:0a:fa:0b:40:c7:fd:46:73:60:3c:a4:
c2:b6:c5:08:7f:79:d7:cb:df:65:2c:86:72:85:c9:18:30:39:
b9:68:a8:6c:e7:d3:67:eb:e5:9f:0f:12:ad:6d:fd:28:74:c7:
95:47:71:0d:a0:c8:70:01:39:68:c2:18:75:66:8e:13:7e:28:
0e:b8:22:19:5d:a0:aa:3d:81:89:ad:53:ab:c6:78:ab:0e:9b:
1c:ef:3b:3b:28:ac:66:cf:10:33:cb:f9:85:c4:6f:b5:06:bd:
35:f4:e3:23:73:0c:95:df:c0:2b:ad:01:a3:96:3d:de:82:ad:
87:49:dc:0d:72:6b:e7:bd:c1:95:68:87:38:41:98:21:ec:e3:
6e:dd:a7:36:1b:11:dd:cc:50:af:40:c9:b3:e6:c8:c5:04:b1:
5f:46:4e:59:7f:9b:8c:73:ca:f6:38:d3:06:72:65:51:f5:5b:
64:5e:e9:b6:ef:04:28:24:64:91:88:97:cc:97:37:09:fa:02:
59:ed:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:04 2025 by rpki-client