Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa
File: qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa (raw, json)
Hash identifier: lgA7RrHTvmHBvzE9swyzozhILfgUmn/MQgrElmqhrAU=
Subject key identifier: A9:77:C3:74:F5:C0:B4:1A:B3:32:50:51:6C:6F:5D:F1:26:52:B9:15
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA3605B0E663121FF65C69A6EA45BD
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 185.92.25.0/24 maxlen: 24
185.92.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:36:05:b0:e6:63:12:1f:f6:5c:69:a6:ea:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a977c374f5c0b41ab33250516c6f5df12652b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:b2:eb:97:8f:c3:29:6b:e6:63:c2:cf:7d:
47:81:31:76:d0:15:58:4b:68:c4:e8:9a:32:f0:30:
05:cb:ad:52:dc:8a:6f:4a:39:aa:e4:9d:6d:de:e5:
16:09:e7:cc:cb:3b:a9:a0:6e:7e:62:07:82:90:74:
55:54:ae:97:a2:ec:be:39:2a:e2:29:e0:0f:2c:9a:
38:3b:c9:53:a4:d4:26:de:68:69:20:b4:7a:87:82:
c0:04:7d:32:53:1f:cc:5a:c8:f0:d4:48:c8:4a:b4:
c6:7a:ce:67:03:f7:ff:db:74:c2:26:e9:a3:fb:6e:
f8:c1:55:1b:4f:2a:3a:db:75:a0:11:0e:d6:c0:95:
b1:d7:0e:be:79:fa:4c:f1:f6:db:c6:b6:d5:43:d5:
f2:7a:57:9f:00:14:15:ca:2f:19:84:64:92:a0:4d:
69:33:cd:6b:e4:d1:86:96:37:27:85:78:f3:e2:fe:
40:1e:f7:d5:b6:69:fa:b7:c0:93:d1:c1:0b:a8:32:
59:7d:4d:d6:15:b2:2c:72:17:55:e7:0e:6e:3b:c7:
ce:7b:aa:fd:87:8b:f2:fa:24:33:25:c6:bf:c3:ac:
54:53:50:54:34:a1:1c:79:5c:b7:4c:af:ef:88:06:
db:e8:af:f6:5d:18:31:15:42:fd:15:fa:b6:82:71:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:C3:74:F5:C0:B4:1A:B3:32:50:51:6C:6F:5D:F1:26:52:B9:15
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.25.0-185.92.26.255
Signature Algorithm: sha256WithRSAEncryption
73:ae:d8:41:46:9d:40:3d:9a:fa:6f:40:61:3a:bc:2d:f9:8d:
7d:84:85:78:9a:60:ca:25:92:8e:02:5d:1e:ab:52:10:86:98:
ac:9b:9d:15:19:53:3c:5e:e4:4f:80:8d:c7:b8:44:d1:e3:a0:
c6:47:9f:d3:34:70:c4:a4:52:82:db:26:90:12:dc:15:53:a2:
0b:39:d3:ad:51:01:8b:3c:b8:60:67:73:b1:5e:71:57:0c:03:
7e:d7:fb:1a:f1:7e:c5:f6:3e:93:db:cd:ba:b8:f1:3b:65:bc:
0d:98:30:70:ce:1b:25:78:58:7f:21:cb:e0:12:9b:16:79:fb:
77:36:b5:2b:d5:a9:7e:95:f2:be:e8:97:b3:b8:8c:da:77:9a:
81:a1:bb:6f:fa:23:42:4a:d5:9b:6a:5d:ff:d1:ca:82:47:f1:
0f:ee:d7:59:8b:fb:58:29:a2:ea:26:92:b2:ce:56:8a:b2:97:
3a:70:2a:b5:7d:af:cb:cf:c5:1e:40:d8:8c:89:5e:43:6a:af:
07:3d:28:b3:ca:69:c0:cd:ff:01:f0:1d:e2:c4:c7:54:1a:fc:
be:2a:42:a2:61:c4:a6:39:fa:1d:d5:a6:f4:65:36:7d:83:21:
bf:f3:5f:07:08:1b:17:2a:8f:31:36:58:de:17:ab:74:9d:ca:
a4:59:e2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:10 2025 by rpki-client