Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/pi9zL_VWGbzkDhQWR5m5nEaCebQ.roa
File: pi9zL_VWGbzkDhQWR5m5nEaCebQ.roa (raw, json)
Hash identifier: eP1lHhQg9vZCUBINTETiPXlvz3TLhJxW3SJejru9Hkg=
Subject key identifier: A6:2F:73:2F:F5:56:19:BC:E4:0E:14:16:47:99:B9:9C:46:82:79:B4
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194E116E12EC88CE44B4E67B2CB28E5EDFB
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/pi9zL_VWGbzkDhQWR5m5nEaCebQ.roa
Signing time: Fri 07 Feb 2025 15:46:00 +0000
ROA not before: Fri 07 Feb 2025 15:46:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.62.248.0/24 maxlen: 24
92.62.249.0/24 maxlen: 24
92.62.251.0/24 maxlen: 24
92.62.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:16:e1:2e:c8:8c:e4:4b:4e:67:b2:cb:28:e5:ed:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 7 15:46:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a62f732ff55619bce40e14164799b99c468279b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:11:74:06:c0:4c:aa:b7:01:3d:ed:63:6c:
e3:2b:6a:c7:f4:00:2a:1c:e8:e8:89:df:be:37:8a:
f4:14:cd:58:23:af:37:1e:29:8d:cc:d0:1e:87:35:
73:09:18:16:e1:e0:0d:a9:1a:17:29:80:e8:65:e0:
60:31:61:b4:8a:e8:07:f1:14:6e:a6:69:a3:dc:7d:
ab:ab:84:7c:4c:f4:79:a6:b9:d8:3f:a7:19:9f:f1:
18:9d:05:89:0a:bc:7e:fd:32:a6:55:2d:5d:9e:43:
73:68:62:1b:9f:53:c5:8c:06:6c:a7:35:05:e4:11:
20:54:57:38:30:08:dd:c3:9b:b5:13:3d:e3:33:25:
c9:0a:30:7e:44:3b:c1:20:d4:04:c1:42:71:4e:13:
c9:7f:bb:2b:8a:83:8f:a8:f8:e0:cb:51:fe:69:18:
ea:1f:87:9a:74:d8:6a:1d:d9:94:8a:c5:02:6b:a8:
da:16:dc:f6:18:d5:42:cc:66:b7:50:cf:3c:9d:a4:
21:7b:9a:f6:28:b7:0a:1f:f1:c0:2a:a5:57:2d:81:
ca:b1:56:da:7a:bf:69:b9:e2:c9:4f:75:85:bb:5d:
f3:16:11:e9:12:23:f8:89:98:d3:8c:43:5e:27:b2:
85:cd:1c:07:87:77:d6:f0:d3:3d:c7:64:0d:09:ff:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:73:2F:F5:56:19:BC:E4:0E:14:16:47:99:B9:9C:46:82:79:B4
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/pi9zL_VWGbzkDhQWR5m5nEaCebQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.248.0/23
92.62.251.0/24
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:19:5f:3a:0e:95:c4:50:e1:06:5b:04:be:a5:9e:78:75:bf:
b0:8f:39:8a:c6:0f:45:de:26:02:1d:e0:7b:7c:d5:64:6b:b0:
90:f4:ca:cb:79:89:ca:e0:b8:68:dd:b4:67:14:15:96:92:95:
f0:c6:94:08:a9:6a:37:86:b7:87:48:ee:65:d9:2d:3b:95:74:
b1:14:cb:bb:3f:44:6a:61:36:00:4b:72:ee:02:82:1b:7e:2e:
ea:ba:28:aa:7d:a7:9a:f2:f0:ff:63:67:13:81:22:5b:5c:fa:
e6:eb:8c:e6:b3:d2:7c:b4:55:5d:1b:03:34:27:6f:6f:24:35:
a1:2e:e5:5b:c9:61:62:5f:3d:a9:47:ad:88:0d:5d:42:f9:1f:
37:87:c3:15:32:5a:0d:cb:9a:d3:ae:2b:9c:8a:8d:3f:ff:13:
27:e1:d6:c7:48:21:86:0c:0b:27:19:dd:2b:8d:0f:a9:b9:17:
8d:69:e0:a8:ec:89:9e:c2:fa:d6:b7:4b:6c:14:1c:0a:b1:7c:
67:30:a4:d6:4f:43:20:4e:bb:03:97:73:0f:03:02:91:10:27:
a7:d0:df:e9:61:85:05:20:49:bf:a3:6d:c2:b8:4e:38:85:fa:
ec:9e:78:b0:a0:d4:cf:e4:4c:7f:0e:d3:30:45:1c:4b:c9:fd:
06:98:bd:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZThFuEuyIzkS05nssso5e37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUwMjA3MTU0NjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjJmNzMyZmY1NTYxOWJjZTQwZTE0MTY0Nzk5Yjk5YzQ2ODI3OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqckRdAbATKq3AT3tY2zjK2rH9AAq
HOjoid++N4r0FM1YI683HimNzNAehzVzCRgW4eANqRoXKYDoZeBgMWG0iugH8RRu
pmmj3H2rq4R8TPR5prnYP6cZn/EYnQWJCrx+/TKmVS1dnkNzaGIbn1PFjAZspzUF
5BEgVFc4MAjdw5u1Ez3jMyXJCjB+RDvBINQEwUJxThPJf7srioOPqPjgy1H+aRjq
H4eadNhqHdmUisUCa6jaFtz2GNVCzGa3UM88naQhe5r2KLcKH/HAKqVXLYHKsVba
er9pueLJT3WFu13zFhHpEiP4iZjTjENeJ7KFzRwHh3fW8NM9x2QNCf+G/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKYvcy/1Vhm85A4UFkeZuZxGgnm0MB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvcGk5ekxfVldHYnprRGhRV1I1bTVuRWFDZWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXD74AwQA
XD77AwQAXD79MA0GCSqGSIb3DQEBCwUAA4IBAQCtGV86DpXEUOEGWwS+pZ54db+w
jzmKxg9F3iYCHeB7fNVka7CQ9MrLeYnK4Lho3bRnFBWWkpXwxpQIqWo3hreHSO5l
2S07lXSxFMu7P0RqYTYAS3LuAoIbfi7quiiqfaea8vD/Y2cTgSJbXPrm64zms9J8
tFVdGwM0J29vJDWhLuVbyWFiXz2pR62IDV1C+R83h8MVMloNy5rTriucio0//xMn
4dbHSCGGDAsnGd0rjQ+puReNaeCo7ImewvrWt0tsFBwKsXxnMKTWT0MgTrsDl3MP
AwKRECen0N/pYYUFIEm/o23CuE44hfrsnniwoNTP5Ex/DtMwRRxLyf0GmL1/
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:16 2025 by rpki-client