Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/UERcRYot81AJ0DARbCgONhxMKT4.roa
File: UERcRYot81AJ0DARbCgONhxMKT4.roa (raw, json)
Hash identifier: W9Rh1d6qmkgx+JE8ZQjrCpWk8urfQQESyd5vqLCMZIM=
Subject key identifier: 50:44:5C:45:8A:2D:F3:50:09:D0:30:11:6C:28:0E:36:1C:4C:29:3E
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0189306F58C5C53CA9DA3DB21C20884690DB
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/UERcRYot81AJ0DARbCgONhxMKT4.roa
Signing time: Fri 07 Jul 2023 12:59:10 +0000
ROA not before: Fri 07 Jul 2023 12:59:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 92.42.22.0/24 maxlen: 24
92.42.23.0/24 maxlen: 24
92.42.21.0/24 maxlen: 24
92.42.20.0/24 maxlen: 24
194.50.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:6f:58:c5:c5:3c:a9:da:3d:b2:1c:20:88:46:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jul 7 12:59:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50445c458a2df35009d030116c280e361c4c293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:07:96:17:3b:f7:91:9b:4e:2b:30:09:54:
b4:2c:fe:46:58:96:41:da:fd:f3:99:1a:83:cf:33:
37:aa:06:49:e0:c1:7f:bd:9d:f1:c8:15:25:14:4a:
0d:ce:c8:ee:45:dd:66:bd:39:3c:86:47:81:a8:0d:
a9:2c:d4:b1:ec:64:3d:c7:2d:62:7a:24:4d:b4:64:
59:a2:16:76:20:f2:06:62:05:9c:e5:7b:8f:cf:77:
85:67:87:da:eb:ff:50:1a:f2:bc:a0:e4:33:19:1a:
ce:a6:ab:6e:70:40:75:e4:88:6f:44:e0:ff:5f:4c:
1d:22:7f:3f:54:06:ae:1c:b6:15:4b:d2:95:ca:5f:
b8:2e:71:f7:dd:0a:51:5b:89:d4:66:d0:bc:24:e1:
56:f8:ca:68:1a:78:8f:ff:7c:7f:1a:20:de:da:6b:
64:90:33:99:1a:c6:bd:fb:4f:fe:f5:9b:84:95:4b:
a9:e5:be:31:58:b9:97:82:90:62:77:c1:35:f4:16:
49:7f:7e:a6:8e:83:94:fd:49:96:b9:77:af:5c:d6:
99:6c:c6:13:46:68:17:f2:aa:35:47:55:b7:48:17:
52:b8:2d:34:7f:ea:4d:8f:1c:ef:44:2a:86:4f:31:
03:fd:70:90:c4:54:be:d8:e8:22:a0:e3:72:a3:24:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:44:5C:45:8A:2D:F3:50:09:D0:30:11:6C:28:0E:36:1C:4C:29:3E
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/UERcRYot81AJ0DARbCgONhxMKT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
194.50.59.0/24
Signature Algorithm: sha256WithRSAEncryption
69:56:1e:a9:84:c5:e8:f5:a6:4a:b4:67:77:a3:be:6b:86:67:
b4:37:6c:70:ab:95:2b:e3:af:cb:89:18:02:0b:a0:8f:48:5f:
e8:29:4e:c1:80:be:8b:44:4e:a9:8e:2c:ab:f1:87:a4:7f:b1:
e7:01:dc:25:79:4a:fc:9b:95:57:24:b2:3b:c4:45:b9:18:d7:
04:f7:ee:e9:ce:7c:74:32:87:3d:d3:4b:72:78:fb:76:9a:1e:
aa:f3:ba:70:d9:e3:04:87:f7:e3:98:19:64:25:07:ba:f5:63:
da:21:95:c0:72:9a:4b:71:76:b2:24:03:ec:a3:12:2c:36:e1:
52:74:41:10:08:35:cf:fe:98:2b:ca:ad:63:6d:2d:91:a3:d5:
19:4b:b2:9f:4c:61:47:1a:e6:93:4c:dc:14:0c:02:21:78:9e:
97:06:b4:67:7e:89:0e:7b:fb:5a:1d:ad:38:e0:b7:32:2d:ca:
15:da:fe:19:6c:b2:ad:7a:68:f5:05:c1:07:38:a9:b4:8e:d3:
40:69:bb:f6:a5:bf:87:63:e9:a3:9b:4c:4e:58:ac:d8:b1:e6:
58:b3:ac:00:ce:96:91:b8:b1:d5:5f:45:23:66:22:34:99:df:
75:9f:60:a9:9f:22:aa:0a:42:f2:04:b5:df:f2:55:cf:d5:db:
10:aa:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:01 2025 by rpki-client