Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/_YypdYwNnlrSxn7Xk5pVVLuYXRI.roa
File: _YypdYwNnlrSxn7Xk5pVVLuYXRI.roa (raw, json)
Hash identifier: UMpoA6QJ7yrchwDrkwz1jDoIaBrnsc3wqSmOPTPFUrQ=
Subject key identifier: FD:8C:A9:75:8C:0D:9E:5A:D2:C6:7E:D7:93:9A:55:54:BB:98:5D:12
Certificate issuer: /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial: 01953C80B4CB74C07F2686C3CA659C0F66A1
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/_YypdYwNnlrSxn7Xk5pVVLuYXRI.roa
Signing time: Tue 25 Feb 2025 09:47:02 +0000
ROA not before: Tue 25 Feb 2025 09:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41381
IP address blocks: 89.105.64.0/21 maxlen: 24
89.105.64.0/24 maxlen: 24
89.105.65.0/24 maxlen: 24
89.105.66.0/24 maxlen: 24
89.105.67.0/24 maxlen: 24
89.105.68.0/24 maxlen: 24
89.105.69.0/24 maxlen: 24
89.105.70.0/24 maxlen: 24
89.105.71.0/24 maxlen: 24
2a01:7000::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:80:b4:cb:74:c0:7f:26:86:c3:ca:65:9c:0f:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Validity
Not Before: Feb 25 09:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8ca9758c0d9e5ad2c67ed7939a5554bb985d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:58:a0:e0:dd:21:da:95:80:b0:af:31:19:
e2:23:fd:e7:0d:ad:4f:59:cc:67:bc:d2:06:c2:eb:
17:da:19:89:6c:76:bb:07:15:7d:2e:fa:0c:75:17:
95:5b:30:e8:0b:d7:11:88:a8:c0:18:92:9b:9b:b5:
1f:5b:0f:48:e0:4d:65:4d:22:1b:0e:e0:a0:bc:3d:
ed:d3:57:38:61:43:17:cf:5f:04:ee:a2:87:e1:ff:
05:ae:82:fc:f3:91:95:af:94:e9:c2:b4:e9:6b:c6:
de:c9:91:7d:2e:84:6e:dc:5a:be:a9:2b:26:0c:59:
5c:1e:5c:60:85:16:85:8c:3f:f7:b8:36:c6:73:4c:
4b:03:6b:8c:e2:f1:2d:b7:80:e0:2e:5e:53:ad:13:
06:13:42:5b:b6:5a:3c:93:1e:86:f7:5e:3d:6d:39:
79:a9:54:27:81:da:5b:03:fc:0b:20:ca:e2:e6:78:
3d:7d:af:d9:0b:f9:3a:7c:6a:46:d2:63:30:cc:86:
10:aa:ff:09:14:3b:5b:d8:26:bd:1c:30:3f:2d:a2:
a7:07:2f:c0:5e:34:01:e7:24:d3:36:5a:7e:6c:d9:
b7:c5:a2:67:93:0d:53:b5:09:42:22:50:1e:72:58:
30:da:8f:3d:ee:27:be:80:75:ae:60:75:76:e9:89:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:A9:75:8C:0D:9E:5A:D2:C6:7E:D7:93:9A:55:54:BB:98:5D:12
X509v3 Authority Key Identifier:
keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/_YypdYwNnlrSxn7Xk5pVVLuYXRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.64.0/21
IPv6:
2a01:7000::/32
Signature Algorithm: sha256WithRSAEncryption
09:6b:3c:9f:c5:a5:0e:4b:ae:59:ae:9e:80:4e:e9:25:4c:57:
e9:ea:7f:b3:db:0e:cb:32:7f:d1:8c:d1:30:40:89:42:35:6e:
d5:84:8e:5d:4b:e2:48:ed:b8:66:e5:6c:40:a6:b5:fd:ac:18:
5d:0f:55:e7:a8:8b:c3:4c:32:6a:76:51:59:78:a2:1f:e0:e0:
4c:10:24:69:01:7c:15:72:3a:04:96:36:78:3d:23:d9:1b:98:
c8:47:0b:41:f4:9b:05:07:81:4a:62:7c:33:0e:ae:71:1b:32:
1f:0a:f8:eb:c6:22:ed:ea:12:bb:7a:ff:53:d4:53:72:6c:c5:
35:7d:0a:2a:63:98:de:ae:21:23:c4:f1:fe:9a:2d:4b:70:3a:
39:4d:80:1b:1f:aa:31:84:1b:4f:b2:14:93:bb:9c:53:b2:21:
cb:3b:a0:68:6d:18:b8:b2:03:23:87:0b:fd:be:3e:9e:79:6b:
36:96:12:4e:34:52:f0:c4:35:c5:86:f3:66:5f:a5:ca:d5:ef:
94:4f:dc:b9:fd:2c:0f:81:ae:5f:66:b2:db:7a:49:be:d6:f9:
85:e0:25:b0:e3:db:22:1d:84:be:23:59:2f:3e:83:55:96:6f:
ba:53:81:7b:4e:6d:0e:34:e1:91:57:43:c6:f5:f1:6a:63:d9:
f6:07:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net