Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa
File: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (raw, json)
Hash identifier: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=
Subject key identifier: 01:3D:4D:2C:D5:19:F1:7D:31:0F:A4:5C:C1:93:1D:2D:D2:33:D9:93
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01957417ED0BB46C8297ACDA9BF767C66131
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa
Signing time: Sat 08 Mar 2025 04:51:19 +0000
ROA not before: Sat 08 Mar 2025 04:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 92.62.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:17:ed:0b:b4:6c:82:97:ac:da:9b:f7:67:c6:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 8 04:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=013d4d2cd519f17d310fa45cc1931d2dd233d993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:ed:01:0f:62:ef:8b:c4:10:09:16:3d:54:
d9:22:ab:3e:eb:b1:4e:a8:f0:42:95:49:74:8a:1c:
41:f6:14:1b:1f:82:04:ac:2a:eb:a5:46:db:02:7c:
4b:ec:03:9d:53:32:db:ab:df:9f:8e:6c:67:7d:1d:
5d:ba:9b:a1:02:c1:5c:81:f0:e1:1d:70:3a:98:8c:
db:ba:3a:86:4d:6d:2a:4e:d2:6f:1e:99:11:38:2f:
af:33:ea:02:18:7d:e2:74:d6:32:c6:e7:d8:34:88:
d5:97:ac:9b:18:06:3a:e9:d3:c1:28:ad:85:55:67:
3e:0c:01:12:f5:4a:f8:6c:b0:9a:7a:8f:b6:b7:8d:
29:e8:bb:8f:41:cc:71:7a:6c:23:86:86:11:74:1b:
e2:0e:98:41:b9:45:62:09:19:8b:6c:55:b2:00:67:
71:b7:0b:69:b3:d9:39:08:f7:cb:3a:0b:9a:24:d8:
f7:f4:a3:ab:ac:40:82:82:79:51:7c:2f:20:2d:9f:
e0:c6:e2:39:7d:69:ef:32:33:b0:8a:5e:d4:90:46:
65:3a:34:bd:06:b8:c1:4e:b6:be:23:96:ad:7f:ce:
e2:a5:09:15:aa:84:64:d7:17:69:64:f5:90:f0:09:
53:84:2a:67:94:92:2a:75:0d:3b:e8:6f:36:f6:40:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3D:4D:2C:D5:19:F1:7D:31:0F:A4:5C:C1:93:1D:2D:D2:33:D9:93
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:03:7f:1f:49:8f:13:55:19:12:f2:70:01:89:9f:43:57:33:
63:a8:c6:21:af:11:56:af:a0:a1:c6:5a:ca:bb:09:af:99:0f:
db:dc:f5:0a:89:01:28:51:3a:78:f9:47:ba:93:7a:a9:07:10:
33:d1:da:1f:f8:52:88:bc:a2:88:00:ca:dc:d8:f2:10:6f:fd:
7d:a4:da:ca:d2:15:cd:ce:cb:d6:1d:b0:03:ea:ed:dc:9b:cf:
af:ef:6a:34:4e:8f:c5:fe:19:69:a0:94:41:78:0f:74:bd:e9:
c3:da:40:b8:1b:60:7b:0e:b7:94:ad:5c:42:71:1e:27:00:95:
db:ac:9b:c7:4f:4f:b3:e1:ba:e5:b3:c5:71:0d:55:d2:9e:1c:
16:da:1d:37:9e:35:73:ca:68:44:5c:5c:9d:9b:d5:d1:72:7a:
8b:84:b7:d7:8a:9a:16:fd:f7:d9:72:5b:fd:10:9e:3e:80:a4:
c1:04:1d:d3:f7:a1:48:c3:fc:92:d4:f8:9b:b0:74:c6:01:7b:
6d:9f:d9:18:b4:c3:58:f8:57:3a:e4:66:bd:82:1d:26:54:16:
90:42:5f:88:85:dc:b6:5d:c5:30:25:37:7d:07:5c:2e:25:45:
59:c8:0b:91:74:a6:0f:8f:d2:98:6c:c6:c8:fb:4a:5b:f0:ba:
c3:4a:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:57 2025 by rpki-client