Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/L92Oz155yhI01cgTqDPydWK98ns.roa
File: L92Oz155yhI01cgTqDPydWK98ns.roa (raw, json)
Hash identifier: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=
Subject key identifier: 2F:DD:8E:CF:5E:79:CA:12:34:D5:C8:13:A8:33:F2:75:62:BD:F2:7B
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019423D6CAC71328FC6462CE5C586B789EF0
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/L92Oz155yhI01cgTqDPydWK98ns.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60051
IP address blocks: 185.71.204.0/24 maxlen: 24
185.71.205.0/24 maxlen: 24
185.71.206.0/24 maxlen: 24
185.71.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ca:c7:13:28:fc:64:62:ce:5c:58:6b:78:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fdd8ecf5e79ca1234d5c813a833f27562bdf27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:4e:91:52:7c:c6:69:53:61:49:ca:87:19:
8d:b2:88:15:8f:ba:ea:21:2e:0a:d6:b1:9b:67:15:
f3:c8:50:cf:d2:37:cb:ce:29:36:89:fc:51:2a:c0:
28:9e:bf:ea:a9:75:a2:45:61:77:d7:9a:27:df:36:
2e:be:f3:3e:d2:5d:aa:3f:ef:39:86:d4:d6:03:d8:
63:9f:03:b9:a9:b1:b5:1b:72:c7:a9:f8:f6:15:46:
61:44:09:62:b9:ea:f4:5e:98:b9:e5:74:80:75:46:
5e:d9:67:d1:6b:8a:2a:df:e2:2b:6b:89:e0:ca:0a:
2c:f9:da:e7:1f:8f:84:0c:e8:b4:cb:54:40:fb:2e:
7e:84:cb:36:c5:e9:7d:25:eb:a9:2a:d9:f3:1e:fe:
9d:65:f9:83:02:30:33:3d:b7:44:2b:d1:65:ce:56:
c2:f0:28:77:e0:6a:8a:91:76:77:fd:d7:b4:85:ee:
98:b2:51:5c:1d:3d:b8:2a:a6:d1:59:f5:05:b1:9d:
47:38:7a:b1:93:16:f3:14:6e:f2:7c:9a:ef:b0:70:
31:ea:ca:81:20:00:0f:9e:eb:42:4b:ab:86:16:b8:
62:46:94:2a:a4:fc:91:e4:0c:8d:78:90:41:3f:4e:
77:a7:dc:90:14:fd:e3:34:01:fd:18:49:1f:2e:7f:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:8E:CF:5E:79:CA:12:34:D5:C8:13:A8:33:F2:75:62:BD:F2:7B
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/L92Oz155yhI01cgTqDPydWK98ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:76:a5:ae:50:36:b1:25:b4:1a:eb:b1:a5:4d:6e:06:c8:f8:
1f:65:4e:9f:75:20:6f:43:23:d2:8c:2e:98:ff:7c:68:c0:e4:
14:70:af:a2:a9:a0:25:00:3d:69:b0:d9:a6:16:21:a7:14:0f:
15:77:cc:91:10:64:bf:42:3e:ac:cb:ca:fb:5a:a5:41:be:33:
11:02:62:b4:1c:f9:5f:b3:f5:eb:25:6c:be:a5:a6:c9:bd:78:
95:8e:11:5f:55:76:ad:e0:65:84:fd:8a:16:90:3e:db:54:51:
e8:41:e3:e5:e6:cf:1a:d2:8d:7c:b4:7f:6d:03:03:01:96:a4:
4a:4d:7c:25:c1:df:4e:e9:e5:30:38:ec:8c:2d:82:d7:e6:f6:
1c:24:ce:51:89:a3:f5:7e:71:b1:ca:c5:36:9a:d7:df:e4:b7:
a5:ff:d7:56:5c:72:fb:36:95:05:fd:36:9f:a1:9b:03:7a:3d:
6a:8a:bf:eb:ae:05:9e:41:d7:52:4f:eb:5b:40:51:dc:4b:5e:
8f:72:ec:79:2f:06:b7:49:f1:61:24:5f:38:3d:96:44:90:1c:
23:7c:22:85:30:12:74:4c:b4:2d:8a:a7:d9:65:e0:d9:5d:db:
30:d7:7c:4b:c7:c3:63:30:0f:7f:23:d8:31:92:39:2a:4e:07:
ca:63:54:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:58 2025 by rpki-client