Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/zxVQV_jSJ76ygIFocf_VK6e5ubY.roa
File: zxVQV_jSJ76ygIFocf_VK6e5ubY.roa (raw, json)
Hash identifier: qDwBiLbQBsgPJNGW9yoy2OMPZrtu/7DJzihlX1bQO3E=
Subject key identifier: CF:15:50:57:F8:D2:27:BE:B2:80:81:68:71:FF:D5:2B:A7:B9:B9:B6
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01845647FF6B9FAF0B4180A664DEFF44C9A6
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/zxVQV_jSJ76ygIFocf_VK6e5ubY.roa
Signing time: Tue 08 Nov 2022 08:07:49 +0000
ROA not before: Tue 08 Nov 2022 08:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 152.89.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:47:ff:6b:9f:af:0b:41:80:a6:64:de:ff:44:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Nov 8 08:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf155057f8d227beb280816871ffd52ba7b9b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:2e:0b:1e:70:6c:82:8d:25:9c:d2:df:b3:
8e:13:7a:19:79:4d:3a:68:03:fa:e3:e4:f9:85:b8:
8e:23:b0:81:d0:fe:b8:c6:37:1c:6f:d2:6b:21:32:
88:55:87:32:65:47:da:a4:5d:ba:fa:9a:8e:35:7b:
0f:0d:81:97:1a:9d:30:cb:c1:5f:db:8f:b6:0c:f0:
bf:53:18:0a:92:be:b9:b7:da:19:2f:69:60:2b:c5:
ee:53:30:7f:37:00:e6:5e:3e:03:c1:71:40:7b:96:
b6:66:21:77:a2:17:bb:4c:05:bc:0d:dd:97:5d:8d:
15:1a:c4:84:db:2c:8b:94:91:b0:8b:30:b1:b4:01:
57:9c:6d:37:29:ad:e0:3a:40:d2:55:a6:36:e8:6d:
78:86:41:ed:cb:1b:50:c8:ca:05:22:d7:42:21:42:
e5:90:8d:ce:2d:59:5e:ad:2e:91:4d:a5:f5:6f:64:
8f:b6:6f:4f:05:a4:ba:fc:8e:f9:d5:96:3a:4e:97:
a5:67:a3:67:1a:8d:52:a7:0b:cc:64:b1:44:58:54:
35:d6:24:99:a5:b9:9b:3b:62:69:2f:48:21:1d:44:
88:86:d0:b0:35:b3:da:18:ce:32:b0:5f:b5:2b:63:
31:aa:7b:24:6c:c4:10:1f:70:85:0d:b3:ad:7d:67:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:15:50:57:F8:D2:27:BE:B2:80:81:68:71:FF:D5:2B:A7:B9:B9:B6
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/zxVQV_jSJ76ygIFocf_VK6e5ubY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
74:b1:cc:cb:87:2b:4b:6f:61:fd:44:aa:5c:f8:68:db:67:eb:
55:cd:05:c8:18:cd:83:d6:b5:3a:65:02:18:96:8e:bb:81:be:
e3:71:30:d5:58:81:77:cc:0a:23:0f:8f:02:49:21:ed:32:61:
0b:48:36:0b:76:99:9a:a9:b5:5a:23:8f:cc:8e:b8:95:13:57:
93:de:b1:d3:fd:9e:02:f2:9b:4a:a1:90:fa:1b:e7:42:43:af:
e8:e1:74:72:c2:8b:bf:fe:cc:33:6b:7c:e5:8e:18:c6:01:0f:
6f:99:29:9d:3b:42:a8:54:39:81:0a:b6:e4:bf:b5:c4:27:ab:
fd:5b:67:76:d3:42:11:ad:82:25:32:5b:96:13:d5:67:25:42:
55:43:a2:25:79:f2:cb:32:7f:02:3d:f3:86:b4:cd:60:d1:53:
51:de:84:58:9e:1a:04:3d:01:9a:b1:95:7a:13:83:75:27:a2:
54:75:8c:54:24:74:42:dc:10:1b:bf:37:c6:8b:37:01:f3:f2:
79:58:8a:4f:0f:d2:1f:5c:b0:14:59:02:f3:ce:d0:3d:8e:46:
db:c4:93:8d:83:09:27:81:76:ec:21:d0:cb:72:6f:74:7d:86:
cf:ab:c5:2d:47:50:b5:f8:a3:19:a7:4d:c4:02:8b:28:7a:9f:
d0:23:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:52 2025 by rpki-client