Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/5XKRyhRzqnr8rLkvL1A_HTZy2Cc.roa
File: 5XKRyhRzqnr8rLkvL1A_HTZy2Cc.roa (raw, json)
Hash identifier: zIYLA4Ibjhk+Qr1OxZmK8TYaOkjC0SOa8jwXeylU+6E=
Subject key identifier: E5:72:91:CA:14:73:AA:7A:FC:AC:B9:2F:2F:50:3F:1D:36:72:D8:27
Certificate issuer: /CN=2809ab3504936a9aaa08ba919cd2345c34e729da
Certificate serial: 01856D788011CDFB59277C973774FA349223
Authority key identifier: 28:09:AB:35:04:93:6A:9A:AA:08:BA:91:9C:D2:34:5C:34:E7:29:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAmrNQSTapqqCLqRnNI0XDTnKdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/5XKRyhRzqnr8rLkvL1A_HTZy2Cc.roa
Signing time: Sun 01 Jan 2023 13:14:51 +0000
ROA not before: Sun 01 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206610
IP address blocks: 92.119.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:80:11:cd:fb:59:27:7c:97:37:74:fa:34:92:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2809ab3504936a9aaa08ba919cd2345c34e729da
Validity
Not Before: Jan 1 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e57291ca1473aa7afcacb92f2f503f1d3672d827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:95:89:95:fb:7e:db:89:1e:8e:37:0e:9e:
7f:13:c3:0c:1a:26:d6:a2:71:6a:78:c6:ec:bf:ec:
8c:c6:4e:90:4c:ed:fb:75:4f:9a:48:a8:a3:94:1f:
3d:e5:2f:ec:ca:0c:1d:2b:01:72:67:36:b6:97:4a:
1a:aa:62:7f:13:17:a7:50:f6:5e:89:4a:7f:86:d6:
a2:51:ad:52:bc:34:49:88:24:fb:87:01:0d:81:6e:
cb:03:26:2e:fd:8b:78:4e:12:4b:9e:d5:e2:18:88:
6c:b2:44:4f:10:13:23:f7:2c:0c:17:eb:df:02:1a:
65:49:e6:19:a9:eb:ef:a4:94:c3:cd:bc:82:f4:70:
77:08:88:24:a9:a7:69:0f:ef:89:4e:cf:0e:e5:de:
1a:c6:3f:7a:bd:aa:cd:d0:c6:46:a9:51:a5:82:cd:
59:ca:5e:7d:05:22:ae:3e:40:7c:ea:94:bf:11:7d:
83:94:d8:87:a7:ee:47:60:6b:5d:21:e4:54:15:62:
2d:57:11:f1:e7:b8:02:be:5a:db:99:04:36:ae:1f:
f4:71:9d:8b:72:6b:72:9d:1a:db:c2:b5:42:43:f0:
0a:37:f1:20:92:cc:f9:72:d3:0a:e8:b0:f5:21:db:
f8:d7:66:50:bc:13:e6:0b:e2:4b:04:05:41:41:c9:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:91:CA:14:73:AA:7A:FC:AC:B9:2F:2F:50:3F:1D:36:72:D8:27
X509v3 Authority Key Identifier:
keyid:28:09:AB:35:04:93:6A:9A:AA:08:BA:91:9C:D2:34:5C:34:E7:29:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAmrNQSTapqqCLqRnNI0XDTnKdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/5XKRyhRzqnr8rLkvL1A_HTZy2Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/KAmrNQSTapqqCLqRnNI0XDTnKdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.100.0/22
Signature Algorithm: sha256WithRSAEncryption
21:33:2e:f5:94:4a:35:3c:4b:f1:a8:b5:89:c6:77:98:01:41:
dd:5a:77:2a:2d:5b:79:a3:0a:a7:e3:35:26:b1:a8:aa:5b:52:
16:36:1e:c0:10:42:4e:95:f2:43:76:a1:1f:80:ee:c6:25:9e:
a1:06:94:df:f7:2f:93:eb:d9:a7:e2:b3:b5:1d:6a:0d:e5:17:
95:28:7e:9c:11:86:d1:40:d7:79:50:b2:91:47:94:74:6f:66:
55:eb:6f:30:9b:ee:2b:0e:d3:14:16:7d:13:db:dd:b0:fe:6b:
70:00:8b:92:52:9d:75:cd:83:29:f8:d4:6f:9e:21:9a:24:26:
49:8e:d2:62:4e:3e:08:08:1b:31:f5:f4:8a:3e:3e:5e:44:f2:
06:c1:3b:e6:05:f4:3c:62:29:8e:99:40:0b:91:ea:e4:94:94:
8c:e5:ac:3a:9a:7e:d3:96:37:85:b6:d2:a6:cb:4a:eb:8b:fb:
a9:c5:3c:b8:98:f6:6a:f0:43:b6:3c:0b:7d:89:11:71:ce:ab:
80:8a:fb:77:e4:0b:2f:01:ac:cd:11:e0:fa:35:14:48:e9:e2:
75:36:4e:6d:5b:23:b2:c6:f7:d8:4a:72:b0:11:7b:0c:e5:42:
3a:e4:0b:66:dd:76:4a:07:05:4b:55:65:b2:86:b0:e6:66:7a:
02:78:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:47 2025 by rpki-client