Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa
File: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (raw, json)
Hash identifier: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=
Subject key identifier: F9:02:23:99:3E:72:B6:39:59:ED:9A:8B:C8:56:ED:CE:2C:E9:BB:85
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 019424458C208E9D85655BC138A80FE8EFAD
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205654
IP address blocks: 152.89.64.0/24 maxlen: 24
185.211.20.0/22 maxlen: 24
195.234.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8c:20:8e:9d:85:65:5b:c1:38:a8:0f:e8:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f90223993e72b63959ed9a8bc856edce2ce9bb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:9f:d2:12:91:f1:d7:2b:0a:3c:81:fd:f6:
eb:30:c0:9d:2c:60:fc:13:a2:ca:be:55:25:69:d6:
72:9d:f0:87:5e:c2:19:85:f0:85:02:af:34:a8:01:
f0:10:99:f1:15:e4:32:8e:95:d8:5c:bf:a2:89:f0:
37:b1:4e:8b:1d:02:53:31:22:97:e9:56:b3:17:5c:
a7:79:3c:34:7d:74:99:4d:60:d4:f3:47:f7:01:40:
45:ad:dc:5c:1a:6e:f0:a1:d1:99:10:b3:de:8c:3b:
46:e4:d7:59:a6:b0:46:22:e1:e0:5b:b0:78:c4:51:
b6:55:f7:85:9b:4b:e9:0f:d0:9c:48:2f:df:d0:5f:
6f:19:4c:ad:30:77:0c:11:67:08:5c:6d:67:dc:6c:
b2:9c:fe:b5:b2:f3:18:60:42:b8:02:be:7b:2a:1d:
e7:b7:44:5d:aa:b5:37:83:25:0f:5d:f1:c1:c1:19:
44:48:1c:63:a7:82:2b:57:a5:21:60:f8:ba:16:a1:
d0:28:05:15:b3:6c:79:4f:17:99:a3:e9:71:cb:9f:
67:88:e9:a6:ed:97:db:dd:f0:7d:e7:06:f3:ca:36:
f5:55:2a:86:7d:1f:64:43:40:43:dd:ff:3c:28:70:
13:f4:4d:8a:11:23:a8:81:b0:21:05:7f:12:0c:00:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:02:23:99:3E:72:B6:39:59:ED:9A:8B:C8:56:ED:CE:2C:E9:BB:85
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.64.0/24
185.211.20.0/22
195.234.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:eb:01:a3:a1:34:bc:55:6c:69:58:86:8d:5b:af:14:17:a3:
b3:b0:5a:56:04:fa:cd:53:0a:92:fa:2f:7d:0a:4d:5f:cc:71:
01:3e:cb:cd:8f:50:ea:97:3e:92:6e:9a:42:46:8f:5c:0d:f4:
8c:11:4c:31:6d:c5:d0:cb:38:86:17:77:15:f9:3a:aa:26:56:
67:71:a6:ae:c5:55:dc:cf:c6:85:c2:bf:c2:c4:97:9a:d7:26:
f9:a1:45:b7:e0:36:6b:a6:81:9b:18:34:96:b9:9c:bf:44:5e:
f7:d5:99:f5:90:9e:2b:aa:0c:12:57:ac:c7:25:64:7c:f8:8c:
e7:07:04:d4:dd:c4:58:03:dd:6b:9e:82:13:90:e8:d6:d9:35:
0b:11:7c:06:de:e0:1e:9f:1f:e2:1c:dd:66:0e:db:03:2e:1a:
dd:89:d6:77:e7:13:da:34:46:78:0f:63:e1:72:f0:95:93:7b:
8b:7f:51:74:71:0d:69:a0:2c:37:3f:ae:93:14:08:50:4e:d3:
b5:03:df:8a:1e:1b:be:c7:29:09:98:99:03:dc:6b:50:7b:bf:
85:44:57:55:d3:70:a6:94:f9:ea:ef:0f:dc:71:76:06:6f:ae:
cc:ac:c4:79:ac:4b:04:a6:38:a2:fc:10:05:46:c6:41:e4:ea:
81:61:4b:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net