Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/e5ZbZdDjK2u63noro-x_b9ucuS8.roa
File: e5ZbZdDjK2u63noro-x_b9ucuS8.roa (raw, json)
Hash identifier: PYNv6+uTZrVFvQthWKMUtJ45MA7WCbG3A/7UkXVWjOE=
Subject key identifier: 7B:96:5B:65:D0:E3:2B:6B:BA:DE:7A:2B:A3:EC:7F:6F:DB:9C:B9:2F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194B0BEDF0919D1F4FD818AE38C1C70C2DA
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/e5ZbZdDjK2u63noro-x_b9ucuS8.roa
Signing time: Wed 29 Jan 2025 06:28:06 +0000
ROA not before: Wed 29 Jan 2025 06:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50360
IP address blocks: 92.62.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:be:df:09:19:d1:f4:fd:81:8a:e3:8c:1c:70:c2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 29 06:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b965b65d0e32b6bbade7a2ba3ec7f6fdb9cb92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:f5:22:be:fe:70:d9:d4:2c:99:ce:3c:ad:
f1:3e:c6:10:af:1a:a8:05:a1:40:54:86:ae:ce:c8:
16:c5:65:3a:d5:2a:4d:d7:5d:f9:7b:d7:c2:3e:05:
85:64:f8:09:30:bc:df:e6:cd:5f:26:ef:44:42:5f:
7a:5b:76:5f:89:ab:5f:21:44:b6:9e:21:2e:80:2a:
1e:9b:a1:04:0f:0b:4b:63:29:73:ae:cd:f3:6c:3f:
7b:8e:46:db:b1:80:fc:d8:e4:22:70:73:1b:1d:55:
6d:28:fa:b8:12:42:28:9f:e9:70:61:5a:b9:e5:bc:
94:70:76:39:e4:fa:73:e5:d9:8b:a3:56:27:a9:b2:
3e:be:01:5d:4e:e5:f1:96:e7:76:4b:a9:30:27:f6:
77:47:bd:d3:64:39:87:93:9d:85:3f:72:33:d7:a5:
7c:c3:fe:d3:93:fd:d5:52:c7:94:77:ac:1d:b4:a8:
ef:b2:69:c6:25:07:e3:3b:49:b5:92:bb:9b:7d:87:
7a:15:e7:42:7c:63:e9:d6:65:f8:9b:54:5b:39:b7:
36:d0:1d:21:e5:02:35:ee:7b:5c:bb:a7:84:02:fe:
c8:90:38:6b:b6:af:8e:f7:c2:25:d6:4a:9f:1f:5d:
d5:31:1e:12:d6:a0:db:47:3c:78:3b:d2:5f:a1:69:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:5B:65:D0:E3:2B:6B:BA:DE:7A:2B:A3:EC:7F:6F:DB:9C:B9:2F
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/e5ZbZdDjK2u63noro-x_b9ucuS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0f:f6:f0:61:a5:59:92:ad:37:ad:a4:de:3a:d0:2a:b8:e0:
6f:94:61:95:e0:24:6f:ae:89:5e:b2:a4:ef:9d:ee:a2:ad:07:
ff:cd:90:8e:c8:34:7b:71:8e:72:62:70:35:2f:78:a8:28:3e:
af:44:f3:9e:af:50:45:12:53:4a:ca:5e:d7:b5:e2:19:36:e8:
2b:0c:7b:42:34:04:10:74:7d:5f:f8:97:63:7f:17:de:75:aa:
fc:9d:5b:a4:17:c5:59:f4:b4:8a:ad:cb:b0:27:64:34:53:47:
99:5d:d1:b2:1b:70:f6:74:5c:4d:2d:fb:ce:d1:da:c8:bf:12:
f2:08:53:93:a5:59:de:84:d7:ba:1d:91:c4:09:1e:23:49:15:
3c:81:29:19:46:8b:2d:97:95:e7:a9:c7:9a:86:76:a2:9b:88:
e5:bb:7d:d0:d5:a6:72:56:ec:cf:b2:75:84:1f:03:da:71:c3:
b0:2f:e2:89:a5:eb:c3:b9:1f:61:32:c7:4a:35:25:6c:a2:a5:
f0:3a:ad:f0:92:6a:e9:85:6b:33:20:1a:72:eb:39:5c:86:09:
0b:9c:af:5a:e6:87:57:86:53:32:79:4d:72:08:69:a6:d4:a3:
cb:c0:e7:71:d5:9a:c5:2a:5e:cb:f3:ec:ed:c8:ef:59:a6:1c:
85:63:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:21 2025 by rpki-client