Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/uy4NeolDT3Z_TYfK4AqPHVghs80.roa
File: uy4NeolDT3Z_TYfK4AqPHVghs80.roa (raw, json)
Hash identifier: NdtFxp/Qje0dV01Y2OmTYdMEdvNMs8FGTfM5ZLNP5mg=
Subject key identifier: BB:2E:0D:7A:89:43:4F:76:7F:4D:87:CA:E0:0A:8F:1D:58:21:B3:CD
Certificate issuer: /CN=6827dc221544fc74215112a5812de196a2872e86
Certificate serial: 0190C5BBC0E2DB88CFC7E2AE5F835171FCB4
Authority key identifier: 68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/uy4NeolDT3Z_TYfK4AqPHVghs80.roa
Signing time: Thu 18 Jul 2024 12:05:34 +0000
ROA not before: Thu 18 Jul 2024 12:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29076
IP address blocks: 188.92.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:bb:c0:e2:db:88:cf:c7:e2:ae:5f:83:51:71:fc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6827dc221544fc74215112a5812de196a2872e86
Validity
Not Before: Jul 18 12:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb2e0d7a89434f767f4d87cae00a8f1d5821b3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:8e:f1:64:cc:ca:a3:b5:71:48:85:08:e0:
9f:1f:dd:fb:5a:c2:47:aa:02:15:e7:2f:71:c8:a3:
3e:ec:27:6d:87:ea:e6:49:22:9c:67:f3:07:a9:8b:
8b:cb:b7:c2:f6:ee:7d:11:83:2c:54:1d:f8:04:b6:
6b:4e:04:84:c8:bb:f7:d6:b8:32:df:ca:21:fa:19:
c9:1a:0d:17:85:cb:a4:1a:f8:4b:d3:53:71:4e:31:
9e:61:df:a9:be:10:b9:0d:d0:97:8b:3a:2f:41:ce:
fe:89:24:62:06:90:86:13:d8:0b:c7:9f:57:d8:0e:
54:27:08:ca:96:17:82:23:14:e4:63:d5:31:8c:29:
8e:b1:16:88:1a:15:9d:24:a1:b7:6e:34:8c:5d:1d:
c3:60:75:b9:8b:2e:4d:1f:2c:cf:72:b1:05:3e:92:
0c:d9:a6:4b:5d:c6:d0:f6:f3:21:4b:da:8f:bf:ab:
c1:3e:3b:38:56:4c:53:ea:41:46:2a:0c:04:af:cf:
21:70:bc:3e:95:8e:69:8f:01:7c:23:ee:05:c9:ac:
8c:89:a2:3e:e9:52:11:60:de:be:8a:f9:42:a0:06:
6e:93:0a:02:c7:d4:db:cd:7e:a6:ee:3f:fd:81:d2:
8c:5c:36:c8:6f:52:a9:24:4c:19:f1:7b:ac:49:07:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2E:0D:7A:89:43:4F:76:7F:4D:87:CA:E0:0A:8F:1D:58:21:B3:CD
X509v3 Authority Key Identifier:
keyid:68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/uy4NeolDT3Z_TYfK4AqPHVghs80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.180.0/22
Signature Algorithm: sha256WithRSAEncryption
93:0a:af:4c:f7:88:b9:91:0b:fd:08:18:d0:f1:2a:8e:ae:78:
2c:a7:3f:90:fb:15:aa:36:e5:e7:62:3e:37:0c:0c:6e:b1:a0:
0a:6a:0e:7d:05:8e:76:77:db:8e:ce:c0:b7:e6:89:ef:99:e7:
7b:1a:7a:35:a8:7b:15:44:ae:8b:b5:41:18:dc:71:ab:75:41:
3d:b8:a8:68:78:1d:41:58:6d:5e:d1:00:43:d4:7f:b1:98:a9:
b0:cf:57:9d:b5:c0:d2:19:98:f8:20:33:d0:9a:20:72:68:c5:
83:4f:a3:99:c1:f3:19:77:4a:23:35:fc:07:37:27:dd:5e:00:
3f:81:87:52:9c:86:06:e7:c7:f4:42:4c:89:1e:24:4c:4f:68:
9d:7b:ba:14:95:60:ba:6f:ff:95:23:a8:b5:4a:22:d1:be:81:
f1:80:7f:89:74:59:0a:dd:11:14:91:16:a2:51:75:9d:de:a8:
8d:f8:a2:df:77:6d:c9:10:19:03:20:58:16:d8:c4:7d:c5:b4:
61:e1:f0:dd:15:a9:ac:17:2f:07:16:01:87:34:13:3b:6b:79:
2c:a3:3d:7d:87:42:7d:f0:ca:c4:63:f6:ea:81:08:7e:84:fe:
f4:d2:0e:d5:f3:53:ad:56:b6:10:e4:dc:0b:c9:8c:fb:4a:bb:
fa:d4:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:19:36 2025 by rpki-client