Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/12aip6Xg3MRpBHrAo9qI_8lGl6A.roa
File: 12aip6Xg3MRpBHrAo9qI_8lGl6A.roa (raw, json)
Hash identifier: IURDLmEl8ceZMqFbp565iUYmMlWKc2UmtDtWI+jSndg=
Subject key identifier: D7:66:A2:A7:A5:E0:DC:C4:69:04:7A:C0:A3:DA:88:FF:C9:46:97:A0
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194DC9393F49D5A5197528C88E518707659
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/12aip6Xg3MRpBHrAo9qI_8lGl6A.roa
Signing time: Thu 06 Feb 2025 18:44:06 +0000
ROA not before: Thu 06 Feb 2025 18:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 92.62.240.0/24 maxlen: 24
92.62.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:93:93:f4:9d:5a:51:97:52:8c:88:e5:18:70:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 6 18:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d766a2a7a5e0dcc469047ac0a3da88ffc94697a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:05:e7:33:75:f8:1f:53:cf:e4:a7:85:e4:
13:b2:d8:0b:85:58:83:4b:09:a6:70:f9:11:89:4b:
b7:b2:29:87:22:5f:bf:23:e8:3e:64:82:70:f5:1f:
2f:e2:92:4a:74:7e:46:84:64:db:35:7d:ed:ef:d6:
b5:b0:23:78:7b:f8:a0:bc:96:e3:36:cd:8a:48:9d:
38:d0:0f:14:c1:59:5a:16:bd:19:75:43:01:c0:ea:
15:17:58:79:48:32:bf:93:77:c4:f5:2c:a9:bc:4d:
7f:d4:1a:92:b0:f5:3a:28:00:a3:f4:2e:7f:4b:a1:
46:b6:60:77:55:84:b3:fd:cb:bf:d2:73:d3:43:41:
73:a3:d2:43:38:23:4e:55:15:74:5d:fa:8f:28:3d:
b7:0b:42:e5:95:be:d2:fd:c2:76:be:c8:76:24:de:
24:ee:7c:2a:5a:43:68:21:64:c7:65:22:ff:85:15:
27:54:c9:67:96:5e:73:e3:8d:51:ad:cd:a6:ae:91:
8f:ab:97:83:61:b0:8c:52:ad:8d:9a:8a:3f:e5:16:
61:0f:7e:0d:18:19:5e:ec:65:eb:d0:b1:9a:53:0e:
60:97:5b:ce:53:17:53:06:6d:74:bf:d8:fa:49:6a:
aa:68:4a:f4:b1:3c:e7:36:c3:9c:b6:22:75:eb:7e:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:A2:A7:A5:E0:DC:C4:69:04:7A:C0:A3:DA:88:FF:C9:46:97:A0
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/12aip6Xg3MRpBHrAo9qI_8lGl6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.240.0/23
Signature Algorithm: sha256WithRSAEncryption
46:d1:2a:1c:1d:51:21:7e:1c:30:02:59:97:a2:fc:23:eb:3e:
a3:8b:29:d1:15:e5:ad:54:e0:90:49:9d:f3:97:58:a0:0f:3a:
89:2e:6b:8a:6e:9f:ef:62:38:7f:4f:be:f3:72:62:17:42:e5:
7b:3c:c1:e5:8e:70:f2:d6:ee:ed:2a:3d:fa:11:d6:48:a4:db:
d2:24:49:56:93:06:f9:d0:18:56:49:a8:d9:20:56:3c:7e:58:
6c:8c:24:4d:4a:d7:db:a2:29:15:74:3f:9f:c6:5a:f0:51:b9:
6f:d2:03:e5:54:21:14:fc:41:60:05:c6:de:37:07:86:8f:de:
69:a3:73:61:a8:11:9a:07:b1:66:10:f1:07:f1:e3:b4:20:e0:
3b:2c:5d:d4:d4:22:49:1e:fa:30:03:bb:e4:5b:0c:be:c6:bc:
17:2e:41:89:c1:ef:2a:63:82:17:70:8b:4c:25:5f:e4:88:75:
a5:65:3d:39:7e:67:4a:97:5c:9b:a4:db:5a:33:46:2d:b1:fb:
fd:52:6d:42:3b:6e:aa:be:7d:e0:a4:c7:fa:48:ec:31:bc:4a:
c3:2c:6f:d5:fa:bd:f1:ac:45:a8:f2:b8:0f:82:9e:f8:f0:fd:
ef:7b:19:cc:2b:ed:4f:bd:e5:25:23:c5:ce:00:df:5d:5a:fe:
8c:7e:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:35 2025 by rpki-client