Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/C0Doi3jyevr2-pR2IftNN92p59I.roa
File: C0Doi3jyevr2-pR2IftNN92p59I.roa (raw, json)
Hash identifier: IIK5hBd1iLDFxEspDzzgvSmRdaIP8iF48tDZdnCcOcc=
Subject key identifier: 0B:40:E8:8B:78:F2:7A:FA:F6:FA:94:76:21:FB:4D:37:DD:A9:E7:D2
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA30D0C4B712837D44FDFFDBC24963
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/C0Doi3jyevr2-pR2IftNN92p59I.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 185.92.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:30:d0:c4:b7:12:83:7d:44:fd:ff:db:c2:49:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b40e88b78f27afaf6fa947621fb4d37dda9e7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:d1:51:e3:31:34:79:93:b8:ac:00:dc:fe:
68:7f:64:76:d4:27:cf:d2:ed:a7:19:65:b2:37:43:
71:cc:c3:d3:51:98:58:6a:f1:7c:38:73:ef:33:11:
16:f1:08:a1:32:97:38:cf:05:2e:88:14:eb:c4:f0:
ef:42:af:1a:8c:09:98:3f:f5:b2:1a:d5:5f:6a:10:
18:54:d8:92:a4:19:33:fc:da:79:99:48:af:83:8e:
c3:ea:df:40:62:e5:b0:c8:48:01:f7:3e:85:2b:f5:
00:e4:af:c7:be:f3:ed:6b:0b:6d:a7:74:d5:80:f3:
9c:1b:cb:7f:49:9b:83:f3:c9:fe:51:f1:ed:79:bd:
c0:dc:8e:c0:5d:d2:2a:b1:a3:52:d3:bb:2a:c8:26:
fe:bd:80:b9:94:e2:c3:b3:18:0f:6b:1b:36:79:14:
be:91:66:75:c1:1b:e3:0b:1c:62:20:09:63:06:c4:
e8:14:a4:22:a8:e9:02:0d:6b:25:74:e7:ff:70:c9:
e9:7c:fe:c2:f8:0c:39:e7:ad:29:c0:e4:fa:16:cc:
de:ed:71:9b:20:4b:70:b6:85:c6:48:4c:a2:d0:cc:
d9:b1:e6:d2:63:62:8e:7b:65:54:19:8d:04:f5:48:
39:fa:a8:2b:85:50:13:82:f2:54:7a:cd:50:73:99:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:40:E8:8B:78:F2:7A:FA:F6:FA:94:76:21:FB:4D:37:DD:A9:E7:D2
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/C0Doi3jyevr2-pR2IftNN92p59I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:36:d1:08:28:b0:f1:87:21:84:30:a5:dc:56:e1:fa:f3:a7:
e9:ff:53:df:15:93:c8:51:3b:f5:99:d1:38:64:89:c7:a8:f4:
de:78:6b:bd:0e:29:2d:47:5d:6c:20:fc:72:3e:05:70:d5:9a:
3d:d7:29:83:87:33:a3:55:92:48:6e:41:8a:98:64:0c:c7:e9:
e8:3f:a4:a7:28:9e:9d:f5:72:58:6d:0c:37:66:64:e8:e5:92:
fb:6c:54:af:0b:c6:61:db:73:31:71:40:56:8c:41:66:fa:d8:
d4:0e:61:ee:d9:d2:fe:39:e1:98:2a:5c:7d:c4:18:10:28:c2:
23:81:e3:9a:4f:34:29:b8:6a:b7:a3:93:5d:bd:1f:26:85:04:
e7:7a:34:97:d6:49:14:61:4a:7a:3b:5b:7d:42:c5:21:b3:1a:
7f:09:57:4f:ef:be:1d:b0:a3:77:19:d2:9e:83:1f:e6:90:43:
35:88:58:c8:64:b5:58:32:99:5c:e8:d3:49:53:ea:fb:c0:26:
a6:e0:f5:3f:07:42:66:f1:b2:06:c4:63:fa:70:37:fe:45:bf:
29:90:44:89:b3:09:7c:14:8d:d9:42:4c:e0:81:00:f1:5f:4a:
39:8d:37:97:ae:d4:72:ac:da:cb:4e:c8:7a:9f:52:d1:1e:95:
84:df:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:28:25 2025 by rpki-client