Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/FEtsoc8GhVwS-itqE7wFwW_E2l0.roa
File: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (raw, json)
Hash identifier: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=
Subject key identifier: 14:4B:6C:A1:CF:06:85:5C:12:FA:2B:6A:13:BC:05:C1:6F:C4:DA:5D
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 0194221FF87C62F756BCAFBFA7AC57394640
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/FEtsoc8GhVwS-itqE7wFwW_E2l0.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208785
IP address blocks: 152.89.116.0/24 maxlen: 24
152.89.117.0/24 maxlen: 24
152.89.118.0/24 maxlen: 32
152.89.119.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f8:7c:62:f7:56:bc:af:bf:a7:ac:57:39:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144b6ca1cf06855c12fa2b6a13bc05c16fc4da5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:2d:e2:3a:43:e5:d2:e5:06:d0:0c:90:48:
cc:00:bf:da:93:82:0d:f8:70:53:0b:64:3a:69:e4:
17:75:c2:92:4c:1f:47:d9:28:da:da:b6:bb:d1:15:
9f:6a:b7:0f:20:40:ed:8c:1e:9d:8c:2f:18:12:b7:
a4:ad:bc:f9:74:5c:61:72:08:65:c2:48:22:14:ec:
ff:d0:7f:5e:e8:1d:4b:99:98:61:f7:52:6d:8d:d4:
93:18:d8:17:e4:f6:70:23:9a:38:a1:7e:4a:a1:e4:
d5:cb:36:8f:cb:30:b9:5a:ae:c7:0a:0f:18:f7:72:
a3:de:94:90:b9:0b:1e:03:1b:a1:8c:7b:e0:99:09:
0d:98:2d:bd:5d:ee:df:6a:e7:28:e3:a0:c5:9b:f2:
c6:23:76:3f:f3:e8:a8:26:92:9b:49:9d:5f:16:e2:
5f:8c:f2:f2:b2:01:3e:14:bc:fd:11:94:5e:be:cc:
bb:d1:c5:07:9f:c1:b4:51:d0:28:e0:89:32:ff:26:
fd:6a:97:06:f8:40:85:28:e4:bc:40:90:b8:44:0b:
b5:a8:d3:9c:66:32:8e:74:e1:f5:cb:31:bf:23:70:
57:50:1b:e1:3e:6e:1a:6e:ff:0d:a8:c9:f1:47:79:
84:d1:e6:d9:91:dc:b0:ba:6b:09:00:f7:7b:04:5b:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4B:6C:A1:CF:06:85:5C:12:FA:2B:6A:13:BC:05:C1:6F:C4:DA:5D
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/FEtsoc8GhVwS-itqE7wFwW_E2l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.116.0/22
Signature Algorithm: sha256WithRSAEncryption
74:3d:24:90:78:73:20:bb:b1:d9:74:89:5d:9e:7c:af:85:d2:
50:56:93:4f:8d:b4:2d:7f:8b:13:1d:2d:94:cb:49:a6:89:90:
c7:85:d4:b4:85:98:3c:75:60:1f:ac:cf:a0:2d:5c:71:fb:1e:
9a:0c:54:dc:f8:ef:38:0c:cb:84:8e:09:a2:36:e1:22:61:d8:
79:65:e1:7b:a9:7b:36:2d:7e:74:fe:09:1d:5b:f6:39:6a:9c:
a9:9b:51:69:55:35:73:f9:49:09:fc:6a:fd:4a:7e:15:7a:a3:
95:58:c3:0a:51:40:60:9c:44:f5:f0:b2:2d:bf:d8:79:83:46:
22:af:b8:25:bd:7e:09:22:f0:c8:66:79:c5:d4:d4:4e:94:98:
30:6e:f9:af:cc:53:c9:b4:74:00:4e:61:71:4c:80:b2:79:e1:
cd:77:e5:6c:7e:e8:7e:e4:6f:90:e5:89:11:47:f7:09:21:f6:
c3:fb:64:36:03:05:a3:3a:27:38:88:c1:39:04:42:db:c0:08:
70:f4:43:25:a5:d5:e6:38:8f:70:1d:51:4f:8f:23:35:90:27:
c3:79:45:70:5e:6f:64:fd:cd:5d:e2:41:41:b4:01:f3:40:1b:
f9:a0:7d:37:83:90:d4:55:07:6e:f0:f0:f0:c6:dc:ca:2a:9d:
d2:e3:8b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net