Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa
File: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (raw, json)
Hash identifier: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=
Subject key identifier: 2D:60:B2:88:53:49:AF:96:2B:CE:8D:8B:53:AD:7C:57:3A:AA:FD:27
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 01941F8C1466FC311526A7FE5B7A11B6B2D7
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200991
IP address blocks: 185.89.80.0/22 maxlen: 22
2a03:82e0::/32 maxlen: 32
2a03:82e0::/36 maxlen: 36
2a03:82e0:1000::/36 maxlen: 36
2a03:82e0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:14:66:fc:31:15:26:a7:fe:5b:7a:11:b6:b2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d60b2885349af962bce8d8b53ad7c573aaafd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:2f:53:ef:83:d9:b4:a1:1e:47:a6:27:bf:
16:d5:ac:22:c9:10:b9:11:ec:98:f0:fd:96:e9:ce:
5b:3f:d0:2b:ac:bf:0b:c4:86:ae:e0:a5:21:bb:12:
a8:72:50:fc:cd:e2:cf:ad:06:f8:3a:ef:9b:bd:87:
c0:7f:07:09:aa:8d:ca:a1:4e:35:d6:65:f0:c5:a6:
07:cf:0e:77:70:8d:11:06:1b:ac:72:60:ba:d6:ac:
9e:e1:7d:3c:e9:c4:8b:dc:7f:d3:2e:3e:58:da:74:
4b:16:39:a5:24:2e:5c:0d:63:7f:c4:7c:69:26:e0:
73:d3:d2:c3:94:fb:7e:bb:11:81:4d:25:e6:4c:8b:
6e:20:d8:ba:be:3a:28:3b:30:26:18:d6:7e:ab:95:
e6:4c:bb:29:24:b3:f0:37:f5:47:3c:12:f6:88:f7:
3a:2e:c8:58:5e:3a:96:93:95:3b:c4:42:38:f9:60:
a9:71:fc:05:46:0b:50:66:5e:7a:af:be:e9:72:90:
a5:b8:63:c0:09:6f:8a:77:de:01:38:61:0e:67:3c:
70:8d:43:e5:c6:b3:8e:ba:4a:cb:9f:9c:fe:84:93:
2f:c9:5a:ef:18:82:f0:4e:1f:e3:6e:90:c0:ca:85:
8e:0f:c2:df:0e:de:f2:00:e7:f2:6e:ec:4b:0b:7a:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:B2:88:53:49:AF:96:2B:CE:8D:8B:53:AD:7C:57:3A:AA:FD:27
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.80.0/22
IPv6:
2a03:82e0::/32
Signature Algorithm: sha256WithRSAEncryption
58:a5:34:35:d2:83:f2:cd:c4:29:05:e1:5c:68:36:bf:71:32:
55:9b:a2:7e:13:e7:5b:67:b0:9d:dd:a5:9f:15:00:91:2a:4c:
fc:81:37:db:cf:8a:d7:4c:28:11:12:de:88:db:4c:38:d6:c5:
87:33:7c:83:38:15:f8:81:63:71:48:6b:30:50:cc:22:56:b4:
79:a9:32:b7:c4:1f:2c:9e:00:bc:4c:46:55:df:7f:6e:27:6c:
d3:dc:67:57:6b:3b:65:72:1f:fc:3f:e7:af:72:0b:2e:f5:2f:
88:a2:74:16:73:d9:89:1a:6d:0f:ae:48:c0:97:80:30:fd:fb:
c6:42:51:bd:64:b8:a4:fd:13:db:49:ae:a5:27:73:bb:4a:e2:
7d:1d:b4:b8:e2:b2:7e:7b:eb:1b:25:b6:db:a1:0a:e1:47:22:
60:83:41:45:3d:ca:e5:5e:c0:e3:0f:19:87:34:e5:22:e1:a0:
01:22:b7:ae:f0:5f:41:59:b3:8d:be:8d:8c:21:91:98:04:b3:
71:2a:bb:a4:4b:ff:ea:7d:12:87:1d:cf:d2:eb:0e:58:2a:25:
f9:a3:9e:db:f1:25:5c:08:32:9f:31:fc:01:7c:47:80:80:04:
06:5f:c1:4b:ab:65:31:61:69:b1:80:66:8d:59:89:04:28:10:
5b:fe:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:21 2025 by rpki-client