Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/u2ztrN64ny4t-5qedlgZVwCCd-I.roa
File: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (raw, json)
Hash identifier: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=
Subject key identifier: BB:6C:ED:AC:DE:B8:9F:2E:2D:FB:9A:9E:76:58:19:57:00:82:77:E2
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 01942368FD91EA06DE3FB69035D8230C6BF7
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/u2ztrN64ny4t-5qedlgZVwCCd-I.roa
Signing time: Wed 01 Jan 2025 19:47:50 +0000
ROA not before: Wed 01 Jan 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209522
IP address blocks: 152.89.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fd:91:ea:06:de:3f:b6:90:35:d8:23:0c:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Jan 1 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb6cedacdeb89f2e2dfb9a9e76581957008277e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:5e:20:01:73:92:ef:78:5c:5b:cc:5b:28:
a7:55:3e:84:d6:a9:60:ed:a0:68:2e:4f:3a:a3:29:
ac:14:b5:86:0c:e4:70:81:0d:b0:60:df:26:86:0c:
34:20:c3:35:4b:db:b1:cb:ee:7d:6f:a9:b3:38:44:
8c:3e:7e:1c:5e:7a:40:37:8c:e3:60:ba:9f:3b:4e:
6a:ed:ec:db:c6:07:06:a4:ad:5d:7a:22:b0:c4:ad:
e0:d3:ce:24:ed:3b:d0:65:db:5a:f3:1f:4f:d8:a1:
eb:2c:d2:1e:bc:c0:ac:97:e9:ff:31:68:cf:67:44:
22:f9:06:af:e2:75:43:0f:75:33:cb:18:35:27:c2:
70:92:62:74:f2:17:31:73:c7:cc:70:0a:b4:f3:4c:
b2:d4:cf:c2:ac:21:b0:40:ed:5c:56:7e:4f:aa:8e:
74:d2:1b:9c:a1:a2:a9:60:21:bb:36:08:91:56:90:
eb:2c:2a:06:1f:48:76:52:89:da:0c:9b:03:90:70:
da:05:c5:47:34:eb:53:23:c3:f5:df:39:3d:f8:da:
ff:bd:93:97:bb:24:aa:49:aa:0c:68:e6:3f:12:a7:
2d:9e:7a:92:cf:0f:46:d0:5e:4b:fb:eb:b0:24:10:
b6:3b:87:3e:fd:95:8d:39:f7:5c:55:8c:06:97:cf:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:ED:AC:DE:B8:9F:2E:2D:FB:9A:9E:76:58:19:57:00:82:77:E2
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/u2ztrN64ny4t-5qedlgZVwCCd-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.52.0/22
Signature Algorithm: sha256WithRSAEncryption
60:ca:66:21:94:b5:ef:03:ac:11:70:da:ac:97:7f:d6:47:25:
8c:03:c7:b9:4a:62:4b:6d:c8:2b:10:89:70:7a:45:69:69:f3:
22:53:ef:a4:21:e8:69:cc:29:c9:cb:c3:ad:ff:16:9f:dc:2c:
ed:94:82:e4:5b:3e:ce:84:4b:cc:33:46:7a:e9:e8:59:fa:cf:
a3:8c:fc:d6:48:40:d3:e6:ad:45:df:e1:f7:a0:dc:60:71:45:
bc:53:54:24:83:f5:61:7e:84:aa:e2:5c:48:ca:8e:08:0b:15:
2e:da:76:ab:87:8b:1a:f0:79:05:b0:d0:e5:73:1d:9d:99:0b:
fe:97:6c:1c:72:f8:28:1f:6c:15:e1:2b:e0:08:f3:19:06:84:
d2:4b:86:95:74:f2:79:bf:20:06:8c:9c:39:98:05:bd:37:58:
f2:76:11:73:5b:27:28:c5:8a:22:4c:60:59:77:3b:f1:34:3d:
ed:fd:4d:e0:17:d0:db:76:8c:dd:0d:49:7d:51:fb:45:dd:31:
09:97:6e:b7:26:03:f3:d8:44:84:2d:d9:24:a9:2f:be:71:5b:
65:8f:c3:be:c9:fd:29:96:cc:67:8b:a5:ce:73:f1:83:25:3a:
84:cd:c1:7a:7d:31:06:60:d5:7c:4b:3a:0e:ea:f2:1d:d2:bd:
25:ef:75:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaP2R6gbeP7aQNdgjDGv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjRkNjgyM2VjYjI4YjRhMzVlNDBkYzExZWYyMjljYjIz
NzVjZGYwHhcNMjUwMTAxMTk0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjZjZWRhY2RlYjg5ZjJlMmRmYjlhOWU3NjU4MTk1NzAwODI3N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwdeIAFzku94XFvMWyinVT6E1qlg
7aBoLk86oymsFLWGDORwgQ2wYN8mhgw0IMM1S9uxy+59b6mzOESMPn4cXnpAN4zj
YLqfO05q7ezbxgcGpK1deiKwxK3g084k7TvQZdta8x9P2KHrLNIevMCsl+n/MWjP
Z0Qi+Qav4nVDD3Uzyxg1J8JwkmJ08hcxc8fMcAq080yy1M/CrCGwQO1cVn5Pqo50
0hucoaKpYCG7NgiRVpDrLCoGH0h2UonaDJsDkHDaBcVHNOtTI8P13zk9+Nr/vZOX
uySqSaoMaOY/EqctnnqSzw9G0F5L++uwJBC2O4c+/ZWNOfdcVYwGl88/ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLts7azeuJ8uLfuannZYGVcAgnfiMB8GA1UdIwQY
MBaAFMm01oI+yyi0o15A3BHvIpyyN1zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQt
OWZhOTVhYTliMDc5LzEvdTJ6dHJONjRueTR0LTVxZWRsZ1pWd0NDZC1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQtOWZhOTVhYTliMDc5
LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFk0MA0G
CSqGSIb3DQEBCwUAA4IBAQBgymYhlLXvA6wRcNqsl3/WRyWMA8e5SmJLbcgrEIlw
ekVpafMiU++kIehpzCnJy8Ot/xaf3CztlILkWz7OhEvMM0Z66ehZ+s+jjPzWSEDT
5q1F3+H3oNxgcUW8U1Qkg/VhfoSq4lxIyo4ICxUu2narh4sa8HkFsNDlcx2dmQv+
l2wccvgoH2wV4SvgCPMZBoTSS4aVdPJ5vyAGjJw5mAW9N1jydhFzWycoxYoiTGBZ
dzvxND3t/U3gF9DbdozdDUl9UftF3TEJl263JgPz2ESELdkkqS++cVtlj8O+yf0p
lsxni6XOc/GDJTqEzcF6fTEGYNV8SzoO6vId0r0l73Wr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:24 2025 by rpki-client on console.sobornost.net