Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/sd89zYJ1j-RCLpU1z7-DyfQxZL8.roa
File: sd89zYJ1j-RCLpU1z7-DyfQxZL8.roa (raw, json)
Hash identifier: UzEpFC1Sc2lK9fjFosdwjJq/oDCr+18i93FGOSEJQN4=
Subject key identifier: B1:DF:3D:CD:82:75:8F:E4:42:2E:95:35:CF:BF:83:C9:F4:31:64:BF
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194D0C4819B2B130B05C818DC1EB4EEB040
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/sd89zYJ1j-RCLpU1z7-DyfQxZL8.roa
Signing time: Tue 04 Feb 2025 11:42:06 +0000
ROA not before: Tue 04 Feb 2025 11:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 92.62.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:c4:81:9b:2b:13:0b:05:c8:18:dc:1e:b4:ee:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 4 11:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1df3dcd82758fe4422e9535cfbf83c9f43164bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:df:65:ee:2b:65:28:9a:46:3d:80:69:ae:
9e:6b:73:1f:d2:7e:29:10:17:93:40:5d:d1:a0:38:
29:de:74:f5:a7:0f:0c:b5:ed:5a:fb:53:7b:73:17:
80:bd:01:9c:99:87:3c:9e:ac:de:2b:02:9e:92:6c:
a0:d2:75:42:47:5b:01:40:b4:e3:3a:ca:4f:68:a4:
4f:fd:c0:29:70:94:77:ba:7f:65:ce:be:7e:34:e1:
05:3a:43:d3:df:fb:f8:d9:42:71:e8:81:b2:86:65:
f1:f2:d3:f0:28:8f:ad:c0:4e:30:2e:58:05:b9:19:
f6:1e:80:36:a6:50:8a:5b:ca:01:32:15:2b:c7:7e:
02:17:d1:29:44:b0:fc:ac:f6:94:8a:e0:9b:0b:5b:
05:89:5c:a9:42:23:24:bb:41:cb:fa:60:dd:41:eb:
ff:e0:0b:b0:0e:9b:9f:25:c2:d8:2a:c2:4d:bc:52:
4c:e5:e5:ca:f6:20:10:c2:ce:57:94:72:36:c1:bb:
d4:09:22:cc:76:20:9d:cb:32:76:fe:c0:31:5b:75:
d1:14:af:10:63:99:dc:3d:37:f7:59:26:a9:0d:ca:
e6:1a:01:b9:0b:55:4c:b7:c4:5b:e8:f7:b4:c2:86:
2c:b5:59:a7:ea:04:4f:5a:58:d2:cb:fb:87:e9:96:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DF:3D:CD:82:75:8F:E4:42:2E:95:35:CF:BF:83:C9:F4:31:64:BF
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/sd89zYJ1j-RCLpU1z7-DyfQxZL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:28:ea:9a:d8:25:1e:2f:d3:1f:65:53:33:e2:93:c1:64:58:
e3:43:24:72:ca:4f:fd:77:25:cb:26:83:c0:7b:ae:d9:ff:2b:
06:22:52:90:d5:8d:15:23:57:00:bd:ee:b8:65:98:8c:09:9c:
23:db:c2:a1:e1:26:c1:70:6e:82:79:84:78:90:1b:8b:c3:51:
08:7d:cd:7b:3b:e2:0a:57:3f:f4:84:0e:f1:8b:e5:44:50:72:
05:bd:d6:26:06:10:b8:35:e8:4f:11:3a:df:67:a1:c2:68:1a:
b2:66:bb:8c:3d:c2:81:0d:6a:6a:17:1b:60:98:25:50:ae:96:
39:76:67:d8:28:a7:0f:ef:72:a4:c2:f8:d7:57:1c:20:41:0d:
93:f9:fc:a7:78:c6:67:1b:df:47:29:0a:55:d0:67:53:d9:18:
ef:d4:78:19:f9:6d:15:9e:d1:d9:56:55:c9:74:b8:30:29:07:
2f:fd:bb:af:5b:48:40:2e:23:ac:00:14:ab:1e:7f:4b:27:ae:
5c:15:11:47:8d:8d:b2:ac:05:d5:70:ab:12:32:65:ef:eb:e9:
d6:18:0e:10:49:20:ab:26:7c:d1:17:2d:81:fd:5d:ed:ae:b0:
29:93:ed:92:3f:76:90:0c:dc:68:90:3c:9a:41:cd:26:2b:4d:
4d:e2:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:55 2025 by rpki-client