Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/7UYDYjcK9QG1kAzAVdRISMcK0fw.roa
File: 7UYDYjcK9QG1kAzAVdRISMcK0fw.roa (raw, json)
Hash identifier: sob5MfrYBgiKx+YfOtoKRqwcLnr1PeTeNg0kII/WuRY=
Subject key identifier: ED:46:03:62:37:0A:F5:01:B5:90:0C:C0:55:D4:48:48:C7:0A:D1:FC
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019428258D746FFDE8EBD358352ABCD6F387
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/7UYDYjcK9QG1kAzAVdRISMcK0fw.roa
Signing time: Thu 02 Jan 2025 17:52:17 +0000
ROA not before: Thu 02 Jan 2025 17:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214307
IP address blocks: 92.240.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8d:74:6f:fd:e8:eb:d3:58:35:2a:bc:d6:f3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed460362370af501b5900cc055d44848c70ad1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:c8:b7:9a:c5:07:56:ce:2a:0f:35:47:8a:
61:cb:29:3e:57:6f:94:7e:02:0e:d2:ad:a1:32:a0:
d8:20:d1:5f:4b:41:c5:5b:e3:15:52:74:58:4f:24:
4b:9a:78:38:4d:a0:ab:e4:af:a7:f4:63:5f:06:f6:
fd:d7:e5:b3:de:9e:db:f1:41:8b:95:72:1f:0e:ff:
de:d2:9e:8f:11:30:58:47:a7:3c:87:0c:a2:5f:68:
6f:39:81:19:9f:d7:c1:41:55:1a:60:eb:5d:31:40:
1e:d1:2d:d9:29:72:ec:d2:10:16:c3:cc:77:5d:3f:
e1:c2:67:ab:2f:d6:0b:29:4f:39:78:cd:a9:17:9d:
ee:de:f7:5f:7b:7c:13:d8:58:ff:30:66:e4:54:30:
3c:d9:f1:e4:b3:e3:bc:e0:9c:ee:09:d5:fd:30:b8:
b4:c7:63:e4:c7:a9:de:1c:87:64:63:11:d9:be:76:
27:04:0d:ee:97:00:e4:94:72:48:c6:c5:cd:b6:b5:
d4:6e:59:b2:0f:67:71:27:f3:fa:94:3b:f1:8c:b8:
71:a0:48:dc:e0:f7:af:70:19:df:c3:14:0c:49:c6:
02:c5:7f:da:62:3b:e8:be:39:52:16:60:ab:bc:9a:
16:fe:0d:42:7b:0d:5d:00:cd:a7:0f:df:b5:76:dd:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:03:62:37:0A:F5:01:B5:90:0C:C0:55:D4:48:48:C7:0A:D1:FC
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/7UYDYjcK9QG1kAzAVdRISMcK0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.148.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9b:85:cf:3b:10:2a:11:13:61:c3:a2:48:1c:0b:a3:1a:85:
eb:87:ed:1c:92:40:3d:6c:c5:f1:e8:84:28:05:c1:43:31:f1:
e4:e6:e7:95:78:21:ff:30:7e:4b:7f:2f:11:d7:0a:b2:73:0f:
f4:52:98:75:00:f7:85:4a:76:46:86:5a:06:93:77:27:38:de:
72:a0:fa:29:59:52:57:18:c6:1d:e9:86:f5:0c:2e:af:1f:1d:
e4:cc:56:ea:cf:69:c7:f9:2e:a4:cc:49:d0:2f:a2:41:da:8b:
2d:95:c9:0d:41:f2:c9:3f:5c:c9:0f:5d:19:f4:c3:ce:9f:39:
a0:e0:f8:bb:67:fd:75:2c:f6:11:bd:6e:44:ae:08:36:d0:47:
cb:27:55:4e:b3:92:a2:ef:fd:c8:b4:92:7b:b5:cc:3e:06:b7:
56:b6:1a:1e:46:ed:b2:3b:14:0f:e7:34:55:fd:b5:cf:4a:ce:
b2:a5:ef:64:c4:e6:2a:e0:ef:80:83:01:9f:7f:03:62:66:ff:
b0:5e:cc:a1:1f:86:3a:13:77:d0:52:c0:5b:18:ea:fe:1e:a8:
7b:da:43:45:f4:87:03:5b:86:ce:18:26:47:75:c2:1a:b3:4e:
80:0b:0f:99:78:21:21:67:6c:d8:01:5c:84:23:4f:66:45:94:
c9:f0:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:18 2025 by rpki-client