Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/9t8DaKTCwJjBzn3wkSpfPpsPQnU.roa
File: 9t8DaKTCwJjBzn3wkSpfPpsPQnU.roa (raw, json)
Hash identifier: fVrETO2m2MutmmblZZ0reqSlJD/MWourprPb5ol+z8k=
Subject key identifier: F6:DF:03:68:A4:C2:C0:98:C1:CE:7D:F0:91:2A:5F:3E:9B:0F:42:75
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018B380CD321A31F6E37C193B3E86201E5CB
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/9t8DaKTCwJjBzn3wkSpfPpsPQnU.roa
Signing time: Mon 16 Oct 2023 10:34:06 +0000
ROA not before: Mon 16 Oct 2023 10:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 152.89.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:0c:d3:21:a3:1f:6e:37:c1:93:b3:e8:62:01:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 16 10:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6df0368a4c2c098c1ce7df0912a5f3e9b0f4275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:ba:a5:e9:92:e3:25:58:c2:c8:70:d9:c5:
a7:db:26:3b:81:dc:8a:b2:92:6c:79:33:11:7e:e8:
d8:65:9e:52:4b:45:32:93:05:d0:70:5f:02:ed:27:
25:04:4b:6b:55:4a:d7:41:1e:c8:58:fe:39:3a:43:
d9:ca:dc:dd:4e:b0:5c:7b:6f:eb:85:21:ef:ec:ef:
c6:04:eb:25:4d:7b:1b:fd:52:c7:0e:e5:71:c2:7b:
05:1d:7d:9c:93:0c:7d:8b:d2:0d:ef:e4:dc:29:d2:
33:1a:a6:b7:6a:eb:6c:4c:65:23:cf:49:e2:8c:80:
eb:75:55:db:5a:51:e5:62:e3:af:f3:05:08:40:e2:
cc:32:08:cf:8b:b7:72:dc:3b:e7:63:f5:5c:50:81:
3a:df:42:53:84:8f:6e:ee:83:5a:e6:08:11:bf:b9:
10:f2:d5:db:5c:55:96:02:8f:3f:d9:88:cb:67:a5:
2c:c5:4c:79:70:ae:61:6d:07:74:b2:a8:17:fe:a1:
dc:f6:8a:4d:9c:ad:0a:77:b7:22:7d:20:65:63:3b:
0e:e2:de:e7:bd:ed:dc:39:6a:d6:82:d0:2e:e5:c0:
5c:c7:86:6b:14:40:f8:bb:47:9b:1f:46:f1:79:c5:
0e:59:85:30:6f:d7:82:50:db:c9:5d:fb:3a:54:f9:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:03:68:A4:C2:C0:98:C1:CE:7D:F0:91:2A:5F:3E:9B:0F:42:75
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/9t8DaKTCwJjBzn3wkSpfPpsPQnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
78:17:3a:65:84:c3:db:db:61:68:a7:50:63:49:77:85:fa:d2:
b5:f5:f7:8e:93:3f:d9:30:50:ec:8f:d3:17:ea:71:64:f5:2c:
10:28:c6:bf:6c:06:2c:49:f8:2f:de:26:44:17:60:0a:4d:ba:
a9:43:b5:56:b0:4e:ca:de:1e:a2:8a:01:f4:5c:a7:db:11:ef:
19:d8:cf:b6:d3:14:6a:20:b3:f3:21:a2:38:31:32:aa:26:d7:
5d:9b:64:9c:25:88:62:2d:06:74:1d:9f:97:2e:79:80:c9:b2:
0c:88:14:6c:a6:23:9f:c2:73:a3:08:91:82:3e:00:92:3f:db:
d3:8b:9e:46:6c:ae:f4:e0:3d:cc:6a:7b:6d:ed:ea:b3:32:9b:
c7:f9:3a:cb:e9:38:7a:26:b6:11:d2:71:b6:31:3e:f5:dd:f4:
5c:59:27:07:bd:38:d7:6d:fe:d4:52:69:c4:24:e6:dd:28:33:
93:1f:59:c7:2b:72:ae:9b:09:f9:94:6a:84:97:bc:f5:56:4b:
19:80:46:fc:e8:7a:85:55:10:05:d6:e5:5e:b5:5f:18:df:e3:
6c:5b:9b:00:1d:d0:43:81:6f:f0:82:83:d5:75:35:ff:a0:bc:
e0:5e:eb:56:59:a6:43:95:27:27:f0:8a:47:c4:db:ab:5a:f1:
c5:03:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:34 2025 by rpki-client