Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/_EiSnC_z7DOcAS1BVS5NGSSfuLA.roa
File: _EiSnC_z7DOcAS1BVS5NGSSfuLA.roa (raw, json)
Hash identifier: +kOv4hy+w48fmqltjthff6HG2pqN6hL7Ca86R1mDahY=
Subject key identifier: FC:48:92:9C:2F:F3:EC:33:9C:01:2D:41:55:2E:4D:19:24:9F:B8:B0
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018F5985DFC0D31EFBCA613500E56534D357
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/_EiSnC_z7DOcAS1BVS5NGSSfuLA.roa
Signing time: Wed 08 May 2024 18:44:56 +0000
ROA not before: Wed 08 May 2024 18:44:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36352
IP address blocks: 152.89.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:85:df:c0:d3:1e:fb:ca:61:35:00:e5:65:34:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: May 8 18:44:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc48929c2ff3ec339c012d41552e4d19249fb8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:92:45:cf:40:20:03:91:39:7f:57:31:64:
67:93:53:4c:e6:27:cd:cc:1e:82:d1:75:94:de:b0:
39:f7:3f:22:d4:ec:ff:8f:fb:39:20:c5:2c:83:5e:
a7:bb:0a:8f:e4:d6:df:df:e7:d7:d6:18:b8:e2:fb:
49:32:ab:a1:cc:0e:12:ca:1d:27:76:68:59:23:bb:
eb:b5:19:cc:eb:82:3b:2d:93:6a:c4:80:b9:a4:44:
9b:de:a0:3f:c3:08:17:28:1b:b8:1b:62:f1:84:fe:
96:ee:d8:79:a7:5d:35:0f:63:c4:e4:d9:05:e1:d3:
14:d8:9b:27:00:7f:08:e0:66:96:fa:3b:42:56:47:
c4:de:d0:9a:3a:5f:f8:7f:b4:c1:f1:ae:de:34:18:
cc:44:b7:30:e8:44:54:6a:83:d0:ac:67:49:cf:9e:
ce:6c:9a:67:57:4e:4f:c9:39:70:67:97:e5:bf:00:
f2:38:28:b6:d1:2c:bf:36:3e:28:2b:aa:10:2c:f6:
5b:db:76:36:a8:92:c0:08:55:d7:6e:6c:02:e6:35:
01:f5:6f:4b:93:c6:04:95:5e:30:ec:a6:a5:2e:6d:
f9:8f:fb:df:c2:be:ea:ef:35:b3:07:30:24:6e:41:
da:38:e7:e5:c2:51:ab:e2:30:45:5a:b7:d0:c6:78:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:92:9C:2F:F3:EC:33:9C:01:2D:41:55:2E:4D:19:24:9F:B8:B0
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/_EiSnC_z7DOcAS1BVS5NGSSfuLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:50:25:53:1c:e3:84:99:19:74:4d:f9:15:7f:2d:31:49:22:
77:bd:f0:4f:54:3e:98:33:2a:b9:74:b6:bc:b3:5e:1d:2b:79:
d8:12:ae:85:27:66:12:69:7c:da:a5:81:08:0f:42:fa:20:69:
51:a3:90:ce:80:c4:51:91:b3:ae:8e:ca:e7:20:fd:c8:8d:fb:
48:2e:5b:ea:c7:3e:a1:33:f7:d3:22:ba:75:a6:f0:1a:02:71:
8f:f0:ee:ab:9d:e6:e8:5c:90:f7:5c:37:2d:d4:1b:fd:eb:30:
b5:3c:ea:46:9e:92:d9:07:e7:11:62:42:8c:f5:28:a6:fe:3e:
18:df:8e:02:5c:c1:c1:29:a5:65:36:dc:bd:62:f8:59:99:93:
78:9b:65:05:36:f5:5d:8f:a0:fe:32:a6:0c:a9:ed:82:ae:ad:
9c:bd:b0:2d:2a:05:a8:3e:f2:3f:04:1b:5a:8c:e1:d5:69:f9:
17:1f:a1:7e:ac:02:a1:b3:40:ce:f1:7a:ae:a9:94:51:bb:2f:
4d:25:c8:53:8e:36:f9:ed:a8:d7:b4:bf:d0:08:5b:61:50:9d:
c0:2d:7b:e6:29:69:89:b1:ce:c1:83:5b:41:c5:01:25:e0:e4:
e5:99:8b:34:5c:30:39:cd:9e:ba:f5:a7:38:f4:9f:db:af:6b:
c4:03:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:39 2025 by rpki-client