Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/SlSinHUbXT415BsCEUMFcSa5FDE.roa
File: SlSinHUbXT415BsCEUMFcSa5FDE.roa (raw, json)
Hash identifier: bvZr9IMOCpYl5odtPe8ZwjzoJxJcmEbTdBh1WZJRnlM=
Subject key identifier: 4A:54:A2:9C:75:1B:5D:3E:35:E4:1B:02:11:43:05:71:26:B9:14:31
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0194274878B96A05E71747067512235AB75F
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/SlSinHUbXT415BsCEUMFcSa5FDE.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204958
IP address blocks: 92.60.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:78:b9:6a:05:e7:17:47:06:75:12:23:5a:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a54a29c751b5d3e35e41b021143057126b91431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:39:29:40:10:95:74:88:08:4e:8f:ef:2e:
cd:f6:fd:b5:31:78:54:d8:64:1b:23:a7:63:32:ea:
f3:a4:2d:1d:0e:b8:48:a3:ae:d8:36:04:f0:fa:d0:
29:3e:9e:c4:1a:cc:04:80:2b:77:31:9a:53:dd:ca:
ba:f7:0b:aa:9c:13:b7:e0:9d:16:e8:6d:59:65:c6:
be:32:7b:0b:59:87:1c:62:25:c6:6a:2c:84:0d:4f:
6c:f8:de:88:21:04:33:21:c1:2d:5b:ab:8a:fb:e5:
d7:1e:45:bd:4f:10:d1:e7:92:9b:c8:4e:ae:23:d8:
62:8e:11:75:3d:5a:43:a4:34:2c:55:97:42:eb:f2:
7e:b3:47:97:e5:f3:9d:a6:ff:b4:98:4c:59:17:9a:
13:d6:11:f4:7f:d2:c2:d8:fb:cf:87:39:ed:ee:0e:
f0:a3:24:e0:03:07:20:2d:2e:fd:89:1c:29:33:5d:
02:bf:95:bc:57:fc:9a:ab:5a:1e:b6:d1:eb:67:86:
c9:8c:d4:99:3c:c0:8d:92:80:29:d0:0d:9e:df:74:
6f:22:47:45:88:13:5e:93:6d:42:36:eb:64:0c:a1:
3c:3b:72:24:e1:46:b7:21:81:d5:30:cf:16:5f:5b:
bf:f0:b4:1c:c9:76:72:95:09:5b:34:88:ef:f1:3a:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:A2:9C:75:1B:5D:3E:35:E4:1B:02:11:43:05:71:26:B9:14:31
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/SlSinHUbXT415BsCEUMFcSa5FDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.75.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7c:75:da:26:f2:b0:6c:ae:c0:c0:0c:d5:03:43:43:a8:2b:
38:a5:aa:90:fe:44:87:ff:8f:e3:44:87:e1:07:38:fa:62:09:
e9:29:7e:03:a4:b0:65:89:f8:f4:98:b5:1e:94:0f:16:c6:3d:
74:46:9c:39:3d:a0:b6:f6:c6:6c:c6:a2:54:50:11:7f:f2:7e:
5c:87:1f:d1:0b:c5:ac:45:f0:8f:46:33:f7:b2:dc:05:49:2a:
5d:50:0b:c5:ec:69:a2:f9:27:cf:eb:28:0e:f2:68:b8:38:8d:
7b:1d:0c:7d:92:88:4c:d1:0e:17:90:bc:9d:91:e2:3c:10:b7:
8c:d3:75:16:7e:d5:56:c4:d0:39:8d:0f:e9:f1:2a:f6:8b:fc:
21:74:29:30:04:3f:f5:86:f2:a6:ab:0d:41:4f:27:2c:51:bf:
e4:df:7c:16:0d:7b:19:80:fd:27:d1:12:96:a3:39:39:e4:71:
2a:cb:a9:16:5d:d0:7b:93:84:2a:85:d5:eb:7f:ec:86:44:6d:
fb:67:54:d9:5d:e9:e9:3e:fe:0a:f1:2a:3e:1f:f2:2e:7e:fc:
80:81:70:f5:83:87:0b:57:00:ed:e1:fd:f4:64:b5:21:75:9a:
16:f9:38:8e:68:8c:24:c9:b6:f1:5c:8b:06:41:fe:67:a8:4f:
00:eb:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:05 2025 by rpki-client