Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/AmHaFSYGFi1TzTpzXknUHEt-2Kg.roa
File: AmHaFSYGFi1TzTpzXknUHEt-2Kg.roa (raw, json)
Hash identifier: BIaRR7DCAUsB0YkU4052zACGK5zZ/heVKHKUFJ9C+vw=
Subject key identifier: 02:61:DA:15:26:06:16:2D:53:CD:3A:73:5E:49:D4:1C:4B:7E:D8:A8
Certificate issuer: /CN=2809ab3504936a9aaa08ba919cd2345c34e729da
Certificate serial: 018CC6B8FF895A766A685A43FC7855376EC6
Authority key identifier: 28:09:AB:35:04:93:6A:9A:AA:08:BA:91:9C:D2:34:5C:34:E7:29:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAmrNQSTapqqCLqRnNI0XDTnKdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/AmHaFSYGFi1TzTpzXknUHEt-2Kg.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206610
IP address blocks: 92.119.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ff:89:5a:76:6a:68:5a:43:fc:78:55:37:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2809ab3504936a9aaa08ba919cd2345c34e729da
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0261da152606162d53cd3a735e49d41c4b7ed8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:96:2f:9f:1a:4a:3b:d1:b7:65:30:84:d7:
79:ca:9c:72:56:20:8f:dc:55:d8:7b:3d:d3:04:2d:
50:b6:df:2e:d3:63:97:dd:31:64:68:1d:24:c0:36:
fc:4c:e2:e3:3e:73:a5:8e:44:13:03:e7:7d:73:e0:
e2:f9:f2:f8:7f:32:69:f5:76:21:3f:6a:2d:59:97:
85:a8:42:62:0e:00:e8:79:e1:82:a5:05:3f:0a:fa:
cd:5a:9a:e1:1d:2b:af:7e:4f:22:b5:83:77:34:13:
8f:c5:45:87:e6:21:96:d6:25:08:37:49:f4:b3:94:
99:b3:d8:2d:d3:4b:d4:21:5c:68:bf:5e:fc:b4:56:
94:43:26:d7:90:7b:43:76:01:10:44:af:6d:df:55:
2a:fb:cb:0d:da:05:f7:7d:0f:29:e4:46:7e:b8:ec:
2f:ee:1d:3a:ce:e7:a6:87:50:ac:86:94:ba:a2:37:
92:ee:da:80:dd:51:9f:6a:84:54:81:88:75:41:1b:
66:50:a4:1f:85:b5:39:66:b4:b4:ca:32:45:9e:8b:
52:ae:44:c0:38:0c:c1:56:c4:71:ef:a7:a5:ba:d8:
9b:aa:35:8f:66:5e:cf:97:2f:2d:93:b8:88:d4:56:
68:e4:ec:a9:a3:fa:94:a0:d0:cc:8f:ad:bb:8e:fe:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:DA:15:26:06:16:2D:53:CD:3A:73:5E:49:D4:1C:4B:7E:D8:A8
X509v3 Authority Key Identifier:
keyid:28:09:AB:35:04:93:6A:9A:AA:08:BA:91:9C:D2:34:5C:34:E7:29:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAmrNQSTapqqCLqRnNI0XDTnKdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/AmHaFSYGFi1TzTpzXknUHEt-2Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/KAmrNQSTapqqCLqRnNI0XDTnKdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:5f:31:ed:34:d8:a0:46:04:3c:f3:fd:e1:80:40:ae:fa:f7:
48:d4:f6:6b:8c:0c:44:19:a2:c8:3f:6f:98:40:67:ea:2c:9f:
e2:6c:f4:01:51:b8:50:54:87:c5:d1:78:f6:6e:fd:a2:8d:94:
fe:11:be:83:89:71:a5:f4:bc:6d:11:d0:3c:7d:74:98:87:3c:
45:e6:ae:89:b7:22:25:17:ed:cc:e5:37:0b:94:63:ab:a4:e1:
2a:d8:21:4d:61:6d:a4:93:77:2f:88:4a:a3:c6:85:a3:a9:cd:
0d:56:ff:95:3f:f9:fb:d9:91:51:59:76:8e:86:d4:43:60:24:
39:26:26:12:9e:96:db:cb:1f:4f:61:68:06:64:af:ad:41:c0:
4d:78:23:73:68:0b:0c:c5:64:df:bd:90:0c:c4:90:d2:cb:a7:
61:43:ff:fa:18:32:97:d5:58:50:5f:6d:3d:9e:0c:6a:fc:95:
b5:1c:c4:09:54:aa:94:31:86:b4:1b:0c:da:8d:d9:9d:ef:12:
75:85:dc:5e:df:c6:2c:89:7f:8a:99:07:ac:5b:e4:f8:01:00:
bf:b0:be:f6:f2:d3:91:36:b1:ed:2b:ba:de:5c:5f:a0:78:1c:
59:c6:3c:f5:c9:e5:a6:f3:3a:73:16:81:8d:87:38:57:ae:2b:
5c:2a:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:45 2025 by rpki-client