Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/mBtneH0apKymD1yidiviYwQz7bc.roa
File: mBtneH0apKymD1yidiviYwQz7bc.roa (raw, json)
Hash identifier: +okWaOCxw+vLPC+W7D2xJzjJ34ydGJtCuhpbcrxYg+8=
Subject key identifier: 98:1B:67:78:7D:1A:A4:AC:A6:0F:5C:A2:76:2B:E2:63:04:33:ED:B7
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019427B478A67644FBED77B64F9CCFEBE643
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/mBtneH0apKymD1yidiviYwQz7bc.roa
Signing time: Thu 02 Jan 2025 15:48:46 +0000
ROA not before: Thu 02 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133499
IP address blocks: 92.118.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:78:a6:76:44:fb:ed:77:b6:4f:9c:cf:eb:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jan 2 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=981b67787d1aa4aca60f5ca2762be2630433edb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:80:83:82:43:27:b2:ce:df:6a:46:8c:19:
82:e8:2e:9a:13:d0:62:13:42:1d:ce:e5:0e:cb:15:
9f:6c:39:dd:4f:c9:be:3e:15:bf:3a:3c:30:5d:bb:
0b:21:9b:9d:03:90:12:72:0e:a8:55:35:3c:c7:fa:
35:1f:36:20:38:60:43:68:c7:93:43:d2:08:ea:44:
e7:c0:11:fa:5e:0c:55:70:47:b3:a8:9f:06:e6:15:
0e:aa:bb:42:7c:d6:fd:67:bf:62:71:cf:52:ff:3c:
8e:b0:d2:5f:de:af:dd:00:f9:74:79:59:2d:99:dc:
3a:36:38:e7:10:3a:f3:1f:6b:4e:75:52:b8:45:6e:
9e:db:f6:6d:9c:cc:8d:27:8f:7a:ca:ad:fb:34:66:
7d:1d:40:01:92:b4:8f:63:45:10:7b:cd:ce:d6:bd:
72:8a:54:24:dc:0f:a5:2c:3b:52:a9:18:12:b4:43:
fd:88:60:b1:ea:9c:3e:31:59:ec:d0:47:29:e3:29:
e2:ef:6e:05:fd:43:b0:d2:17:6d:1e:63:5b:7a:6a:
0a:88:a4:61:04:f0:27:ef:97:ce:0f:ad:8b:2e:de:
88:91:ea:34:83:81:51:46:24:a9:9b:ba:9b:03:28:
31:3c:cd:f7:e5:65:36:d0:c0:9e:f2:14:08:b0:28:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1B:67:78:7D:1A:A4:AC:A6:0F:5C:A2:76:2B:E2:63:04:33:ED:B7
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/mBtneH0apKymD1yidiviYwQz7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.68.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6b:f0:b7:08:4b:b0:c0:bd:79:82:16:d1:e5:56:1c:34:aa:
57:d6:4c:97:dd:51:44:1b:a0:45:79:35:d4:75:1c:b9:14:16:
8c:2e:50:69:68:3b:b2:7d:cd:d9:87:62:5e:00:2e:91:db:7f:
f9:0f:34:76:c5:66:c8:7f:e8:02:f1:c1:16:4f:8e:b1:7c:fc:
b1:05:77:39:60:0f:12:e8:7d:1f:0a:31:08:43:c9:00:34:47:
d4:37:28:ef:0a:a9:45:de:ca:ca:61:d4:be:18:ad:02:9c:84:
d2:af:7a:b4:60:ba:50:c5:81:0c:6e:20:51:e8:93:f2:8c:e6:
69:d0:11:a1:b1:0d:0a:74:05:d0:25:1e:16:46:2b:d4:e8:3e:
30:4c:e3:7d:73:b9:b9:2a:70:68:99:29:4a:aa:09:42:35:ba:
ea:58:ee:d2:b9:6b:34:5c:08:60:67:dd:6f:3b:3d:f1:f5:59:
92:a9:ab:d1:00:bc:b4:4e:72:81:d4:4e:cf:a0:10:1e:8d:57:
3b:05:a7:3e:be:30:49:d4:89:a1:65:0f:29:d3:ea:b5:08:5e:
16:bb:b3:48:64:12:92:d2:d6:4f:75:71:8c:c7:47:f3:04:c1:
30:a3:48:eb:4e:5f:f6:49:04:3e:08:6d:5f:9d:d9:df:38:1b:
ad:dc:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:05:21 2025 by rpki-client