Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VGjIJ6ufhVu2_N_OhvbZ1yzTcZg.roa
File: VGjIJ6ufhVu2_N_OhvbZ1yzTcZg.roa (raw, json)
Hash identifier: LwRRb1VEhOJ6Omo0zyvZ4RZDGAB1565yMh8tHek8S7M=
Subject key identifier: 54:68:C8:27:AB:9F:85:5B:B6:FC:DF:CE:86:F6:D9:D7:2C:D3:71:98
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281E3D2F0DBFADA79AEC92E8ED5E0F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VGjIJ6ufhVu2_N_OhvbZ1yzTcZg.roa
Signing time: Thu 02 Jan 2025 17:55:05 +0000
ROA not before: Thu 02 Jan 2025 17:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56371
IP address blocks: 92.247.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1e:3d:2f:0d:bf:ad:a7:9a:ec:92:e8:ed:5e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5468c827ab9f855bb6fcdfce86f6d9d72cd37198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:92:95:03:16:ba:6d:c1:ac:33:c6:80:82:
55:e6:c5:3f:ea:9f:67:2f:bb:a0:9e:ee:60:a4:4e:
99:6c:7f:cf:8b:ec:53:b3:6a:16:ab:7f:58:80:44:
e9:1e:b2:47:fb:f1:f5:80:c6:aa:13:6a:b7:62:89:
77:6b:f3:46:54:d2:38:9b:fe:95:d0:60:a9:f2:b3:
d8:ff:52:62:a9:f8:b2:66:30:16:fb:21:77:98:9b:
2b:4a:b5:26:6a:42:03:97:e7:32:b8:4e:fd:13:ca:
19:9d:f1:f1:5e:dd:10:da:b0:5b:8e:47:0f:9d:6e:
93:82:10:1c:04:5c:9f:3b:03:19:91:a5:37:b1:10:
c8:07:56:70:17:2e:51:a6:a0:ee:ce:d9:1e:2e:45:
39:9a:c7:f7:6b:31:b5:77:a8:01:a0:6a:af:55:90:
dc:6f:a5:e5:82:d2:a7:cc:c2:9d:c4:4b:2d:08:b3:
90:05:59:2f:18:ca:a3:89:58:71:16:1a:66:24:6a:
8d:76:58:a9:8e:da:c2:b0:7e:c8:6d:29:0c:37:c0:
ea:bf:55:ca:c9:f2:15:67:42:9b:45:a3:3e:93:57:
bc:ee:66:57:0e:e2:50:70:3e:f4:95:91:78:9a:19:
a7:ef:f8:37:28:60:76:17:f1:3c:b1:54:f9:d0:e2:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:C8:27:AB:9F:85:5B:B6:FC:DF:CE:86:F6:D9:D7:2C:D3:71:98
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VGjIJ6ufhVu2_N_OhvbZ1yzTcZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ec:55:48:81:bd:e8:5d:68:8a:8d:7c:f0:79:3c:c5:47:a9:
26:a6:b1:96:19:86:fb:46:9f:6b:20:1b:75:3f:a3:4b:4a:66:
13:c0:da:2a:a3:a3:05:6e:a4:cc:eb:46:58:ca:02:3b:d8:13:
e0:51:59:95:e0:a3:83:6a:03:a3:0a:58:6e:58:ca:4e:4a:94:
d5:16:dd:a3:ad:06:45:47:9c:cf:33:c2:eb:f4:38:cf:be:ce:
60:20:bf:db:62:b0:4b:c2:b0:7f:e5:1a:36:ab:e3:c2:1c:12:
62:39:50:3d:ec:47:ca:53:28:a4:fb:64:27:8c:96:85:65:78:
c4:08:43:2b:a3:f0:7b:38:66:be:cc:64:1c:db:96:e0:cc:01:
d5:ed:ff:30:99:49:e8:82:b0:7e:8e:f5:e1:9c:dc:61:ba:cd:
ee:a8:90:09:98:21:05:1d:a3:63:84:2c:04:e4:49:81:b7:8c:
9a:ea:03:9a:fb:36:75:99:b6:e9:9e:c5:93:74:70:6e:10:09:
05:f6:f1:db:b2:43:5d:63:3e:d9:17:03:74:b2:b4:33:a0:ca:
28:4f:29:a6:39:58:aa:9b:33:01:21:b7:67:77:a6:f6:25:f1:
8b:1e:cc:2e:f3:85:fa:f1:70:f7:78:a2:9e:53:0a:eb:58:4f:
10:8f:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:50 2025 by rpki-client