Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/CZafDAVgz9ZgHvZyhStItpeOMjc.roa
File: CZafDAVgz9ZgHvZyhStItpeOMjc.roa (raw, json)
Hash identifier: hGLJxygoXi7vrVR9CZWh+RBLkxDyDklrEoBm/CKOi3E=
Subject key identifier: 09:96:9F:0C:05:60:CF:D6:60:1E:F6:72:85:2B:48:B6:97:8E:32:37
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0194274879929DF91A5E59DFC48D9D9CFD14
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/CZafDAVgz9ZgHvZyhStItpeOMjc.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 92.60.74.0/24 maxlen: 24
92.60.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:79:92:9d:f9:1a:5e:59:df:c4:8d:9d:9c:fd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09969f0c0560cfd6601ef672852b48b6978e3237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:0f:ce:dc:db:b1:7d:b5:ac:d6:1c:0e:2a:
d9:13:28:2b:61:4a:ea:50:f5:42:45:a7:c3:51:36:
8b:e6:f3:60:5b:fb:46:e5:0e:4f:d5:1a:84:80:09:
7b:68:68:51:67:68:15:ed:dd:f7:bc:58:0e:02:70:
e4:d5:80:88:f7:63:1b:ff:60:63:06:fc:03:93:fa:
3d:cf:ed:13:e0:08:fb:de:37:ba:7b:92:6e:0f:88:
6f:71:8d:7c:1d:34:49:5e:49:f8:99:a0:40:5b:f3:
7f:59:ad:14:ec:f3:6f:6d:11:c1:92:39:89:4a:1f:
58:9e:5e:e8:59:59:a7:c5:fd:3b:3c:cd:4a:a8:b3:
0a:a3:6a:07:ba:c8:32:de:a9:3a:12:ff:41:0e:3f:
72:7c:ea:75:61:5a:ff:15:1a:94:f7:ba:2f:21:e0:
19:32:81:a1:84:78:a9:45:94:d4:06:1e:85:11:48:
f5:e5:46:b0:30:ea:18:53:78:85:dd:be:2d:d5:95:
29:0f:49:c3:6c:db:97:4c:10:2e:33:eb:46:62:37:
40:10:18:ae:98:67:a2:b1:7a:1f:27:60:fc:e2:2d:
83:cc:d3:30:36:ba:94:61:bf:f3:3a:8d:34:7c:32:
fc:ac:87:7e:e5:b5:cf:04:1e:3f:d9:f9:92:86:14:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:96:9F:0C:05:60:CF:D6:60:1E:F6:72:85:2B:48:B6:97:8E:32:37
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/CZafDAVgz9ZgHvZyhStItpeOMjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.74.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:56:b6:70:46:38:07:e2:d6:d1:fd:6e:d6:d7:9a:be:26:37:
c5:b2:b9:07:d2:c5:e2:89:f8:a2:44:6f:90:e8:b2:5c:1a:33:
7f:81:5e:98:7c:49:29:88:13:b3:99:8b:09:d6:40:93:29:4d:
74:f4:6d:c7:ea:5b:18:43:52:80:69:05:7a:8d:d4:82:c8:0f:
0e:c7:3d:50:84:61:eb:2a:df:d7:22:12:69:54:e4:b1:38:b3:
bc:6e:cd:0a:5f:67:1e:7f:45:b8:07:cc:3c:a1:df:0e:dd:27:
0e:1c:ab:4d:49:e7:9a:3d:2e:2f:0c:84:f8:c2:8e:99:c3:08:
d0:66:55:c0:41:10:10:39:8c:8c:91:06:04:88:9d:db:d0:63:
2e:ac:de:1b:ab:88:67:af:3c:31:65:4e:b3:c6:9d:f7:83:27:
be:dc:d2:f9:18:89:c0:34:3e:68:5b:f4:f2:ee:4a:1e:45:38:
2d:11:25:f9:fc:f8:11:12:6e:a2:bf:38:3f:6c:93:9a:4f:28:
c6:2a:0c:46:5d:53:a1:c6:f0:95:63:ac:3b:51:ba:2b:b7:35:
94:e0:02:2e:f6:99:68:b3:7f:6e:1c:09:13:c2:8c:ea:63:b6:
1d:55:c0:26:cf:13:2a:7b:41:e2:c2:01:98:db:2c:69:a1:b3:
90:43:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:06 2025 by rpki-client