Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/53x_LlMR9wDfhoH_h-dm_2o9cfc.roa
File: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (raw, json)
Hash identifier: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=
Subject key identifier: E7:7C:7F:2E:53:11:F7:00:DF:86:81:FF:87:E7:66:FF:6A:3D:71:F7
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 019426D8BE5821D70FFE9A00CEE1FA5B66E7
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/53x_LlMR9wDfhoH_h-dm_2o9cfc.roa
Signing time: Thu 02 Jan 2025 11:48:46 +0000
ROA not before: Thu 02 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16220
IP address blocks: 89.38.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:be:58:21:d7:0f:fe:9a:00:ce:e1:fa:5b:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Jan 2 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e77c7f2e5311f700df8681ff87e766ff6a3d71f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:e1:29:dc:e0:c2:f1:0b:24:b0:ab:e3:cb:
9e:94:56:3e:9b:5b:f1:f8:f6:eb:7d:b2:4a:d5:a0:
58:4b:fb:9e:80:de:45:b0:56:9c:53:07:94:9a:6c:
5b:e9:73:33:44:99:96:00:8b:b9:e0:6e:67:20:f3:
f1:f1:8d:85:79:bd:92:bf:7b:65:b3:e4:bb:64:c9:
24:0e:f4:70:9d:0f:36:60:e9:45:44:16:08:d5:60:
75:97:12:25:ec:c4:8a:c8:01:87:c5:82:62:45:fa:
b4:48:dd:0d:df:53:99:62:83:0c:be:4f:c6:c1:f1:
0d:70:6f:59:a1:cf:2c:ce:1b:c9:05:36:a4:90:d9:
c7:29:19:4b:ec:36:21:d6:09:11:e4:73:66:15:0f:
d9:e2:81:3e:e2:73:2d:30:09:29:c7:f4:54:16:23:
43:65:60:59:5b:4c:d2:ca:da:4b:62:cd:dd:71:e7:
02:f2:38:b5:9b:f7:07:85:19:be:ee:7f:02:a9:14:
37:18:df:5b:a3:12:27:53:20:0e:ec:a7:81:d5:81:
90:ac:1e:2b:eb:0e:12:11:be:6c:9d:12:ad:50:f5:
d7:06:c7:9d:68:2b:d1:dd:86:cf:9e:40:9f:68:69:
14:81:78:e7:62:b7:a9:28:f1:7a:64:26:d7:69:b6:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:7F:2E:53:11:F7:00:DF:86:81:FF:87:E7:66:FF:6A:3D:71:F7
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/53x_LlMR9wDfhoH_h-dm_2o9cfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.156.0/22
Signature Algorithm: sha256WithRSAEncryption
22:08:53:04:f1:b4:8b:01:36:2c:80:f9:89:c0:cc:1c:e1:c4:
0a:b4:f5:7b:b1:5b:32:6b:7b:64:90:61:ef:c3:7b:3a:84:74:
e0:43:fd:9f:02:00:7c:fe:00:1c:4c:7b:ff:20:11:4d:63:35:
6b:ed:02:50:64:c1:ef:35:13:48:4e:24:97:92:95:a3:b0:47:
a5:53:26:5c:08:26:0e:2e:1c:9e:30:b4:64:14:b0:75:77:2b:
df:36:8e:2e:14:3c:cf:5a:e9:89:93:8a:2d:4f:34:64:6c:fd:
f5:24:53:af:b2:f6:c3:3f:00:e7:f0:43:ee:05:53:49:06:71:
50:0d:f6:f0:b5:2f:77:1b:64:07:64:08:ba:9a:e5:f4:ea:73:
94:71:d0:34:c4:aa:c3:e3:76:23:22:21:0b:70:4d:c1:72:40:
0e:ba:c6:96:a4:2a:3c:a3:e8:ed:ff:40:3e:7c:ff:a3:bd:9a:
83:a6:dc:8e:51:2c:ea:94:a6:d9:f2:d0:22:5e:71:dc:25:a2:
a7:3d:9b:5e:9e:22:48:83:6d:33:e0:ac:84:89:77:2f:63:20:
ff:a3:0a:d5:6c:cb:d4:e2:fa:2f:a5:f8:3c:fe:15:48:50:de:
e7:73:3c:9a:fa:a0:78:24:f5:a7:f4:1e:54:4f:67:60:62:6e:
32:e9:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:43 2025 by rpki-client