Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/38B1SWrOZEYP_fsfVXUVNkwMyPQ.roa
File: 38B1SWrOZEYP_fsfVXUVNkwMyPQ.roa (raw, json)
Hash identifier: woQoMYhd6VERAE4YnaNm38BfuPnUB4O6KZttaYsYirE=
Subject key identifier: DF:C0:75:49:6A:CE:64:46:0F:FD:FB:1F:55:75:15:36:4C:0C:C8:F4
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274887E275F94FBA463FD2A3F3637B45
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/38B1SWrOZEYP_fsfVXUVNkwMyPQ.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 92.118.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:87:e2:75:f9:4f:ba:46:3f:d2:a3:f3:63:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfc075496ace64460ffdfb1f557515364c0cc8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:30:1a:d4:6e:4e:27:15:71:c9:a4:35:12:
10:d9:d3:b7:87:a1:82:cd:77:98:63:99:d1:22:da:
f6:5f:b1:ac:4e:38:b8:48:ab:14:1a:28:b8:26:5b:
73:b0:4a:fc:ce:9e:5d:3e:e4:0d:c8:2b:04:48:a0:
a2:ef:d2:31:86:be:0b:0f:05:9e:3a:a9:35:ef:cb:
2d:43:31:16:c8:3d:ea:61:48:af:c8:9f:ec:6f:29:
1b:28:7d:3a:ed:3a:9d:6e:41:a6:87:af:77:53:02:
33:0e:80:ba:1f:7d:fd:b5:46:95:55:fa:4f:de:80:
28:8e:7d:50:26:fd:9e:3a:e7:20:f2:73:bf:2e:19:
20:62:4c:92:b0:ad:5f:8c:7f:64:0c:ae:1e:76:93:
6b:40:ce:ac:66:ab:5a:2d:dc:c4:07:11:4a:ac:51:
d2:b2:f9:bd:d6:a1:0c:29:75:74:5a:3d:9b:8d:27:
e1:ec:54:46:ca:61:90:67:50:ce:ba:59:08:65:f2:
09:c9:c4:13:50:ad:1d:53:2c:1a:4c:3e:86:20:3a:
89:e2:1b:f8:89:69:12:e2:92:13:83:b6:a7:a2:b7:
4f:75:e0:f6:57:09:33:87:ed:40:77:53:d9:1d:0e:
0c:12:dd:55:f0:9a:81:be:e7:5a:95:a9:ee:3f:03:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:75:49:6A:CE:64:46:0F:FD:FB:1F:55:75:15:36:4C:0C:C8:F4
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/38B1SWrOZEYP_fsfVXUVNkwMyPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
38:86:5c:f0:b9:a1:33:49:88:b3:76:17:ab:aa:23:8b:1d:cc:
33:c3:a3:6e:0c:e7:67:9b:fe:31:85:04:d6:96:cd:68:2e:55:
fc:b2:51:a2:c2:d2:c9:7b:6b:7f:c2:3c:3a:e4:cb:c5:ae:db:
75:2c:ea:0e:47:ab:61:18:43:8c:f5:6f:6e:ec:4e:74:f5:d9:
ac:4f:9c:0c:aa:71:3f:50:28:46:50:70:9e:2b:03:2b:7b:2c:
8b:3d:a6:5b:36:f9:30:25:2e:97:25:d6:96:83:75:f6:0d:cc:
f8:9c:9c:2b:34:c6:2f:a6:6c:54:36:d4:4f:51:42:5c:af:bf:
6d:85:54:65:83:a2:cb:38:45:33:f2:78:3e:e7:cd:53:d5:05:
c6:af:97:c1:5e:a9:31:b5:40:e3:de:05:a0:cf:11:c5:d4:0e:
42:21:1c:35:87:4d:23:e6:89:86:93:f8:d4:3e:f4:ec:a2:ec:
28:f4:b3:59:fc:7c:84:49:d2:ad:73:1b:3d:db:f4:59:20:52:
5b:19:9e:ce:19:7a:11:18:78:27:71:f1:57:b9:04:f2:2e:24:
19:fc:36:da:6b:16:ea:91:68:fd:09:f9:76:e8:4f:53:14:33:
7d:aa:20:02:30:1b:71:5c:10:dc:33:db:cc:f0:ef:a9:60:91:
9a:65:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:18 2025 by rpki-client