Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Iu2Hx2VvQIDZGs4tmYTUzo02MsA.roa
File: Iu2Hx2VvQIDZGs4tmYTUzo02MsA.roa (raw, json)
Hash identifier: Ne5cNkR0+uFt9ABG095rT4eS/IOfpYOFLBC6y3B2Ryc=
Subject key identifier: 22:ED:87:C7:65:6F:40:80:D9:1A:CE:2D:99:84:D4:CE:8D:36:32:C0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09D2E756
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Iu2Hx2VvQIDZGs4tmYTUzo02MsA.roa
Signing time: Fri 04 Mar 2022 09:34:24 +0000
ROA not before: Fri 04 Mar 2022 09:34:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 89.117.104.0/22 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164816726 (0x9d2e756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Mar 4 09:34:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22ed87c7656f4080d91ace2d9984d4ce8d3632c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:19:7e:48:f5:80:eb:d7:0f:e3:3c:cf:46:
a9:ed:d8:8b:57:c7:e5:d2:37:bf:48:7a:8e:9d:42:
17:8e:ad:89:6f:05:35:03:1e:7c:10:3a:4b:ad:a6:
ca:6c:e4:29:02:f8:2b:78:38:83:cc:31:77:cc:8a:
4d:68:74:fe:04:a1:5e:9c:ac:4e:2d:91:8a:d1:2f:
17:1b:f8:af:96:1e:8e:13:df:10:2c:ce:d0:1c:46:
b2:a2:4a:ed:8e:24:72:85:5a:99:05:db:59:39:c2:
4e:ec:d8:e6:f3:80:1b:90:be:f5:91:3a:8b:b5:87:
07:04:03:98:01:f9:bb:86:a9:7d:f9:9b:ed:66:8c:
af:13:bb:a9:ec:05:d2:ba:ac:bc:f6:8c:cb:76:37:
3e:73:2f:10:52:d4:fd:c4:9a:38:71:e4:74:f4:96:
49:0f:3a:e1:5f:f7:04:f6:18:a5:7a:b2:08:05:22:
30:7f:23:63:14:63:b3:9a:88:27:c5:13:e4:86:1e:
bd:59:89:51:c0:04:bd:62:20:5b:5b:ab:77:2c:19:
6b:6d:4e:bb:2d:5c:de:be:f5:ed:1b:23:09:94:10:
79:bd:91:00:9f:f8:cd:d1:eb:5e:54:90:8c:2c:7a:
79:31:de:00:ec:5b:cc:ca:52:66:6d:cb:96:07:ed:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:ED:87:C7:65:6F:40:80:D9:1A:CE:2D:99:84:D4:CE:8D:36:32:C0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Iu2Hx2VvQIDZGs4tmYTUzo02MsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.72.0/22
89.116.180.0/22
89.116.212.0/22
89.117.104.0/22
Signature Algorithm: sha256WithRSAEncryption
00:61:9d:0d:b3:d5:94:dd:65:04:88:16:9e:a1:6d:5d:29:25:
23:f3:d6:57:1f:46:ad:40:b2:15:a5:7d:19:1e:24:ee:0b:cc:
9c:bf:75:ba:26:a2:7f:47:ec:b1:78:0e:bc:ff:74:a9:be:09:
01:99:ea:20:87:b0:34:8a:3a:f2:c1:b8:d6:ce:0e:be:35:47:
cb:ed:87:2c:1f:c5:75:19:f8:41:a1:f4:19:ff:34:c7:8d:3f:
6e:7a:60:36:39:6f:76:4f:ad:8b:cd:c7:87:e9:60:77:d7:aa:
e5:aa:3b:c2:ff:60:91:38:f0:10:64:38:f9:62:19:31:46:e3:
e8:43:4e:b0:48:fc:1f:51:77:d3:1d:e2:a2:b7:ca:f7:e6:64:
8b:d1:7e:b3:91:ce:09:20:63:5c:e9:84:46:5f:8b:f5:4b:10:
83:ec:d4:a5:1d:09:cb:8b:a0:d3:e1:02:18:8d:5e:9b:e4:5f:
c5:04:1b:9d:c8:e5:eb:9d:26:11:c9:91:c1:1b:25:59:21:9a:
65:b5:03:8f:41:1c:76:fc:14:8d:87:8f:ef:42:7c:21:26:9e:
19:21:d1:2e:00:b0:02:f9:71:a5:60:09:aa:96:6c:04:dd:c1:
21:37:4d:a5:59:8e:fd:99:fe:05:79:4c:f1:db:db:01:cd:0c:
d9:d8:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:45:47 2025 by rpki-client