Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/m_4FbtjHWVHft-KPpwBsunRcnfM.roa
File: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (raw, json)
Hash identifier: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=
Subject key identifier: 9B:FE:05:6E:D8:C7:59:51:DF:B7:E2:8F:A7:00:6C:BA:74:5C:9D:F3
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B6455B7209995A9A4D11EA7461E101
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/m_4FbtjHWVHft-KPpwBsunRcnfM.roa
Signing time: Thu 02 Jan 2025 15:50:44 +0000
ROA not before: Thu 02 Jan 2025 15:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 92.204.128.0/20 maxlen: 24
151.106.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:45:5b:72:09:99:5a:9a:4d:11:ea:74:61:e1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bfe056ed8c75951dfb7e28fa7006cba745c9df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:a3:bb:11:29:da:2a:c5:a7:ce:a9:42:c5:
0c:1f:7c:1f:aa:74:fe:cb:30:fb:19:87:69:92:6b:
66:80:08:ae:a3:bd:8c:06:e0:ce:28:9e:24:a7:8a:
25:d0:a1:cf:d3:37:ab:72:06:66:e8:27:af:99:d7:
c2:d7:54:66:f6:7e:81:1a:fb:7a:70:b6:86:0f:5b:
b0:6a:3a:85:99:0b:bb:c3:4e:ef:0d:73:b5:a6:4f:
ed:09:98:ec:67:2f:c8:d2:c1:f4:2c:a1:05:e7:59:
2b:f1:9e:99:fd:22:05:a7:87:53:c7:c9:23:eb:1b:
b5:d7:04:c9:a4:6c:23:17:36:9d:4b:53:f3:8e:b7:
03:04:5d:7e:02:ae:cb:2d:41:22:29:e8:fc:92:e5:
3e:31:82:e0:1c:49:f1:de:b4:63:2c:89:d9:48:5c:
f8:8b:05:c1:0e:33:1c:d1:34:28:41:1b:ff:f1:86:
c4:7b:5b:4f:82:00:10:5a:34:fd:7e:b3:3c:7a:08:
3a:8d:65:05:15:5d:d4:36:41:32:ee:bd:23:0b:f6:
e4:d8:74:0a:68:f1:c6:96:18:81:93:7e:61:88:01:
3f:9c:02:7e:cf:0f:49:46:8f:39:65:fa:84:49:f4:
fd:49:38:22:bc:cf:7e:7c:ac:bf:e8:65:43:8d:90:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:05:6E:D8:C7:59:51:DF:B7:E2:8F:A7:00:6C:BA:74:5C:9D:F3
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/m_4FbtjHWVHft-KPpwBsunRcnfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.204.128.0/20
151.106.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:d9:67:dc:a2:ee:4a:57:01:e7:db:08:11:8f:f6:84:ef:78:
6c:f8:24:22:05:5e:c3:55:05:77:18:61:df:9d:db:d6:25:5d:
d3:75:37:a7:ec:0f:ee:ab:b9:e9:19:ab:cc:07:d1:54:b9:67:
69:fc:55:3d:6d:7c:17:14:99:cb:33:40:b9:fa:77:a0:70:d4:
4e:2d:5c:c6:5b:a7:33:e8:9a:2b:f8:9d:ca:13:09:ac:b4:30:
3e:76:af:2f:10:a0:f7:0c:eb:3e:ee:42:87:3e:bf:78:b9:30:
9f:de:46:c0:a0:13:85:04:9a:ed:c7:e1:8e:7d:be:ea:f5:4e:
c0:e0:5d:af:1e:0c:10:d2:24:e4:a9:d2:55:1c:d8:28:4d:7f:
0d:96:bb:9e:93:46:7c:3e:48:01:cf:0b:ae:e6:78:13:c7:4e:
1c:16:33:e7:7e:04:1e:93:99:9a:02:cf:b3:1e:2f:f7:8f:28:
05:23:1f:75:8c:f3:7f:0b:f2:0a:34:4d:95:50:54:cf:26:e7:
35:e3:6a:25:6c:54:8a:15:3d:33:06:d5:31:b9:d4:cc:f0:2c:
99:86:39:b4:fc:7a:7b:32:53:c8:80:3f:75:ff:03:8d:30:d3:
f2:aa:c8:59:d0:3e:73:31:59:cf:ba:d0:cd:63:ca:bc:82:e0:
19:9e:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:11 2025 by rpki-client