Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/z1a3i0frazTQqXgXDMZwXIVumzA.roa
File: z1a3i0frazTQqXgXDMZwXIVumzA.roa (raw, json)
Hash identifier: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=
Subject key identifier: CF:56:B7:8B:47:EB:6B:34:D0:A9:78:17:0C:C6:70:5C:85:6E:9B:30
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019427B60EACB62BB37FED44CF747F98E670
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/z1a3i0frazTQqXgXDMZwXIVumzA.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59574
IP address blocks: 89.188.168.0/22 maxlen: 24
89.188.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0e:ac:b6:2b:b3:7f:ed:44:cf:74:7f:98:e6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf56b78b47eb6b34d0a978170cc6705c856e9b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:34:7d:10:4d:1d:2a:ec:51:48:69:e6:60:bb:
e4:04:a4:75:47:18:0f:25:d7:ae:c1:8a:e3:88:6b:
f9:b0:ad:68:50:1e:de:ee:d1:ef:ec:9a:63:9c:0a:
84:ee:67:36:02:f3:bd:b0:9a:fd:f4:ca:4b:8e:89:
83:e5:5b:77:6a:e0:0e:c1:4e:ee:b6:76:60:1c:b3:
26:44:d1:94:45:8c:67:90:d9:56:6e:33:56:8c:1d:
df:52:0c:63:f4:fc:16:2d:78:a8:11:89:cc:fe:0a:
c3:64:71:eb:dc:70:45:b9:46:22:bf:7e:44:6d:57:
04:cb:04:dc:29:c4:a6:9b:e0:e9:d6:9a:b4:49:fa:
30:d1:d9:db:a1:7d:89:48:85:bd:53:b7:82:bf:18:
77:3b:6c:52:85:99:0b:cb:a9:f7:b6:c4:3b:3f:fa:
99:42:5e:f0:b5:6b:88:b7:c5:e2:6d:9b:13:3d:8a:
18:bf:be:9e:07:43:b1:03:8e:2e:8f:5f:fe:0e:4c:
8e:8c:76:64:5d:22:bc:75:f5:f5:1e:41:b7:e6:a9:
94:7a:45:80:ce:d6:19:a2:41:1f:97:fd:bd:79:c6:
a5:72:74:d5:f1:42:5c:9e:8e:c2:c0:2a:61:e5:6e:
82:22:f1:fe:3f:57:a0:7c:9a:dc:e7:70:83:52:e5:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:56:B7:8B:47:EB:6B:34:D0:A9:78:17:0C:C6:70:5C:85:6E:9B:30
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/z1a3i0frazTQqXgXDMZwXIVumzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.168.0/22
89.188.174.0/23
Signature Algorithm: sha256WithRSAEncryption
68:c3:67:f6:7b:38:16:d9:2d:21:68:41:b7:bd:2a:20:6f:0c:
07:25:69:52:c5:81:bb:9e:1b:1e:15:7b:6c:30:ec:62:0a:9e:
f8:f4:ef:60:84:83:af:4d:05:c7:ad:c3:41:0e:d1:f8:7e:31:
48:48:39:c1:17:5c:a2:fc:9e:0a:eb:d5:75:38:94:d5:59:95:
eb:90:7f:52:fd:41:a2:da:68:e5:ca:8f:56:4e:43:2a:78:73:
4d:b0:4e:a0:7b:74:88:e5:f2:d3:24:6f:12:47:06:f9:c2:30:
0a:ec:34:3d:21:4d:20:f8:18:c7:23:44:ce:8f:42:81:ca:8f:
2d:c9:c0:7f:df:fc:36:a1:55:1c:05:57:ba:36:b8:c4:0e:5c:
66:72:37:42:fd:d8:50:42:9d:e1:88:e2:21:8d:4c:2a:f5:49:
a1:12:da:9c:f7:40:ef:94:0d:63:b2:10:0b:8c:1d:56:99:75:
b4:90:e2:0f:a0:c1:ac:f8:10:8b:8e:73:67:e6:09:b1:b0:01:
ed:a1:8f:c2:aa:9a:18:29:c7:c7:92:2e:30:b5:9e:40:c0:82:
50:dc:87:c7:47:8c:64:ce:82:e4:01:d6:73:b5:9e:f6:97:94:
ef:f4:f9:68:6e:d5:6b:e6:68:82:86:b3:88:fc:be:a1:c8:fb:
73:83:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net