Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r88PrHY_5Uw8lLWy8PjRHqSgT9M.roa
File: r88PrHY_5Uw8lLWy8PjRHqSgT9M.roa (raw, json)
Hash identifier: c2osMxHkbJqLjA+vDyA19o/fWT1pO85EMfGMw7t1hto=
Subject key identifier: AF:CF:0F:AC:76:3F:E5:4C:3C:94:B5:B2:F0:F8:D1:1E:A4:A0:4F:D3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D1DE76FEB880190857B48F258D415
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r88PrHY_5Uw8lLWy8PjRHqSgT9M.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3168
IP address blocks: 62.89.197.0/24 maxlen: 24
62.89.206.0/24 maxlen: 24
62.89.207.0/24 maxlen: 24
178.176.129.0/24 maxlen: 24
178.176.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1d:e7:6f:eb:88:01:90:85:7b:48:f2:58:d4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afcf0fac763fe54c3c94b5b2f0f8d11ea4a04fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:11:05:64:c4:1b:7f:81:e0:6b:03:71:dd:81:
bc:58:0a:3c:47:4e:40:1b:0e:b4:3e:23:4e:d8:d8:
02:0a:e2:f1:ed:da:82:29:b8:81:ef:2e:47:8b:6a:
dc:4c:3a:7b:48:d0:78:91:c0:34:2f:a3:f3:6c:a2:
7b:65:45:56:2f:5b:c9:7d:a9:c6:62:90:f9:2f:aa:
f6:b9:72:23:c0:f0:36:a5:97:82:0d:93:02:db:9e:
fd:c3:08:2b:10:bb:8f:82:93:9f:ae:bb:25:5e:62:
78:7e:ab:9a:d7:ac:86:84:6b:ca:c6:a5:3b:e4:65:
30:08:28:7e:a0:68:44:a0:33:0f:40:5a:a5:62:ef:
1b:26:4f:73:82:92:86:ca:53:b7:8c:06:c3:57:9a:
3d:22:03:d0:ad:84:a1:a1:30:a4:bf:28:3b:f0:e9:
22:65:1b:54:32:5c:79:a9:35:5e:ee:f9:9d:f1:3c:
17:9b:8e:59:ad:ee:a2:e7:a2:d0:91:1c:23:23:25:
ea:11:2e:0f:68:b6:bf:cd:7b:00:68:7a:6f:20:1d:
ee:01:c2:4b:d5:c4:08:7c:e2:15:7f:57:2c:56:11:
ab:0a:9b:e2:7b:34:e4:8e:47:b6:ef:bc:39:95:ee:
77:25:92:0f:5f:f7:32:a7:03:89:19:60:c1:5a:00:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:0F:AC:76:3F:E5:4C:3C:94:B5:B2:F0:F8:D1:1E:A4:A0:4F:D3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r88PrHY_5Uw8lLWy8PjRHqSgT9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.197.0/24
62.89.206.0/23
178.176.129.0/24
178.176.132.0/24
Signature Algorithm: sha256WithRSAEncryption
48:21:a2:5b:ef:01:ff:a9:6f:45:9a:ba:f7:26:45:bd:6f:bc:
88:3b:2d:78:f6:83:8f:a5:5f:27:32:76:c1:5b:dc:0d:7b:a0:
86:50:81:80:6c:fc:8c:79:39:26:fc:69:4f:11:5e:da:fb:de:
d9:e2:c3:b9:38:ad:b4:0b:8e:42:70:80:b1:43:d9:7b:72:01:
46:87:14:4b:be:3f:6d:49:0a:d4:d7:06:bd:bf:56:ac:01:c0:
0e:d1:50:59:6a:62:68:67:f8:65:bc:65:d9:da:a1:e3:f6:58:
f6:0f:a5:eb:df:e6:1b:90:67:fe:49:3f:f8:49:91:0d:11:e1:
07:fc:c6:7f:88:a8:36:62:90:5f:98:3e:e0:0d:62:22:dd:a0:
72:f5:be:48:da:75:de:cd:3e:3f:f6:1a:fd:fb:94:79:37:85:
8e:32:e6:c7:41:49:6e:9c:53:70:7d:c0:df:ae:80:58:9c:3a:
19:63:62:9d:9c:ba:24:89:6e:b6:78:e2:45:65:f3:fc:b0:89:
71:b2:6e:11:a8:86:06:aa:f5:47:36:09:5a:92:ae:ee:20:35:
f2:12:48:12:fa:28:e6:94:55:9f:fa:70:72:6b:bf:bf:6f:70:
01:72:19:f4:06:f1:c1:e4:59:4b:2b:05:68:6a:a0:d1:74:20:
9e:64:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net