Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cycjhKuYTNyo0msaQCVHSCcXUWY.roa
File: cycjhKuYTNyo0msaQCVHSCcXUWY.roa (raw, json)
Hash identifier: 83fUjGj+Lm7OlnFs0Hi7wI9+2ZorUJ0nMGFhBQPR9vg=
Subject key identifier: 73:27:23:84:AB:98:4C:DC:A8:D2:6B:1A:40:25:47:48:27:17:51:66
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019629A8077333813F5DDE742C255A4D6381
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cycjhKuYTNyo0msaQCVHSCcXUWY.roa
Signing time: Sat 12 Apr 2025 10:59:59 +0000
ROA not before: Sat 12 Apr 2025 10:59:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 89.144.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a8:07:73:33:81:3f:5d:de:74:2c:25:5a:4d:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 10:59:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73272384ab984cdca8d26b1a4025474827175166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:a7:e5:b8:68:93:50:4b:50:e1:3d:de:67:
83:b8:8d:08:4d:40:23:ac:f0:5e:21:ee:d8:6a:1b:
74:b7:d1:66:2a:9c:0f:f8:c0:fc:c3:03:4f:c0:41:
ec:9b:90:8f:de:c6:57:1b:58:2a:d7:cd:63:7d:91:
75:53:29:5b:58:a7:27:9b:67:8f:d2:fb:bd:18:70:
d8:91:9f:54:a1:c6:f8:0c:c3:43:33:60:85:17:ad:
ea:4f:50:11:9e:c1:9c:46:82:06:ca:c4:fc:d1:81:
0b:f0:bd:02:0e:d6:99:2e:17:18:b1:d8:ec:38:90:
e9:ca:c7:4d:4e:0d:ab:be:76:00:fb:8a:dc:82:dc:
1d:ff:29:89:0f:26:35:7a:26:fc:17:08:6d:ed:1e:
26:99:ad:b6:b2:f0:2e:0a:14:4a:62:ff:95:8d:c6:
cd:f7:bb:cc:27:13:ba:9a:8d:c8:6f:d0:54:16:30:
c9:0b:bd:af:66:60:08:43:87:6d:e7:92:27:06:90:
bb:53:d8:3b:b7:f4:ec:4a:4e:53:10:37:7e:9c:82:
a6:3d:3b:f8:a4:f2:95:86:36:ac:12:13:5d:74:d3:
5d:6e:ce:eb:e2:fc:2f:e5:57:48:cc:40:ad:68:bd:
ef:26:1c:fa:b7:65:d8:f2:c6:39:e4:24:cb:a9:ed:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:23:84:AB:98:4C:DC:A8:D2:6B:1A:40:25:47:48:27:17:51:66
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cycjhKuYTNyo0msaQCVHSCcXUWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b7:91:c9:4b:4b:9f:bf:b2:de:4e:db:45:fd:b3:8f:ea:20:
19:32:98:58:ea:7a:ee:7c:ba:78:7f:2f:fc:bd:a0:a5:e7:5f:
d6:6b:5d:18:2c:6b:ff:fd:33:91:f5:6d:99:71:5a:c0:70:ee:
db:20:1b:7c:18:e7:06:09:2f:f8:36:11:37:c6:9a:68:d7:b1:
0f:2a:8f:b1:d3:1f:13:b0:cf:b0:78:eb:28:f4:6b:7f:54:c5:
07:23:ec:86:e9:ba:7a:61:af:a2:e3:ee:92:f7:35:89:f3:dd:
ac:cf:55:11:bb:a6:ac:6d:2f:d4:e9:c7:8f:5c:82:71:ac:5b:
ea:7b:86:1c:67:34:63:f7:1a:c4:32:f7:4a:0e:14:cb:83:d7:
19:31:63:4b:1b:78:6f:e4:c3:e4:2b:16:0e:44:d5:32:f9:67:
30:22:86:81:50:46:9e:94:b3:05:76:d1:33:e2:1a:21:16:0b:
03:28:a8:9f:fd:90:99:97:16:de:fe:aa:f8:68:53:95:04:9d:
9b:8b:ca:27:d5:24:c1:6e:37:b6:c4:40:d5:8f:f0:e1:86:ac:
e6:2d:8e:09:19:a7:92:1e:2e:e7:8f:c9:3a:e0:96:06:3a:f0:
b3:15:dd:c7:f9:ee:aa:10:f2:24:1a:80:c2:de:0d:4d:5a:50:
18:79:f2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net