Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/92XnD0AmYRTKMauy0c_EF97G3og.roa
File: 92XnD0AmYRTKMauy0c_EF97G3og.roa (raw, json)
Hash identifier: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=
Subject key identifier: F7:65:E7:0F:40:26:61:14:CA:31:AB:B2:D1:CF:C4:17:DE:C6:DE:88
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019427482ACFC24033ABCA120C68A06C1F5D
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/92XnD0AmYRTKMauy0c_EF97G3og.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 109.237.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:cf:c2:40:33:ab:ca:12:0c:68:a0:6c:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f765e70f40266114ca31abb2d1cfc417dec6de88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:7f:50:93:da:4e:42:21:e8:16:16:38:96:
53:eb:bd:32:62:9f:b4:f2:00:ad:48:46:f5:48:8d:
15:db:93:6c:c7:21:2a:04:a3:5d:92:70:b9:1d:64:
5f:cc:32:11:da:d1:53:78:bd:5c:77:e7:0d:7c:24:
23:8c:de:df:e4:6a:15:bc:41:21:c8:a2:85:90:d2:
ae:6b:bf:cc:21:f3:20:80:7a:1a:e8:43:82:72:d0:
db:74:f2:61:0b:97:15:f9:20:be:07:ac:71:6a:8a:
65:b0:bb:d2:33:39:73:28:0c:5e:a6:93:8b:72:d6:
c0:4c:1c:99:a1:45:a6:48:b6:cc:77:85:69:dc:66:
79:8c:d5:1a:a7:27:0e:52:c1:bb:f9:ed:7b:c3:40:
56:2f:ff:eb:87:db:c9:7c:9a:54:78:0b:d6:5c:3c:
1e:16:6f:c8:bd:ab:b3:8c:63:92:84:73:94:46:6e:
e4:e5:d2:7d:55:a8:08:94:f2:71:6c:cd:b1:38:59:
25:1e:f6:60:c2:38:2f:d6:e5:e9:94:e9:4c:de:47:
3e:b2:b4:1f:14:18:0a:b6:c1:59:ac:00:d2:5b:d3:
93:64:1a:93:b3:da:b0:59:ef:aa:55:e2:8d:aa:8a:
40:dd:27:5f:45:57:83:45:57:ae:25:49:2d:9f:9e:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:E7:0F:40:26:61:14:CA:31:AB:B2:D1:CF:C4:17:DE:C6:DE:88
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/92XnD0AmYRTKMauy0c_EF97G3og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.96.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4b:9a:94:00:35:fd:11:35:e8:fe:cb:d5:0b:89:83:ec:34:
af:2a:b2:51:38:00:9e:5c:07:7f:df:cd:ec:e1:b9:90:29:22:
34:0f:b2:5d:2e:b3:e1:05:62:b6:2c:8f:29:df:9d:5f:5b:42:
81:4a:5e:13:79:60:b1:df:2a:81:82:28:34:b0:26:12:ef:0f:
8e:c1:58:be:d1:4f:a5:78:cf:81:2c:a1:a8:d0:49:97:a5:5a:
a3:d6:34:37:e4:68:45:8a:40:0d:17:95:4a:61:ca:25:26:83:
37:5d:8d:9a:88:78:26:2d:73:57:c2:91:bf:30:c5:d0:54:90:
9e:1d:cb:6c:99:e7:67:c3:25:80:a4:18:70:0e:c9:41:3a:8f:
a2:7e:85:62:3f:a1:75:9c:b3:38:53:95:3c:87:10:9b:60:be:
ac:e8:0e:eb:3c:3f:14:01:6b:fe:92:2a:30:0c:fd:0f:15:bf:
48:0c:e5:e3:26:35:6e:3f:55:8a:6e:b4:81:01:fa:ae:7d:e5:
c7:e4:e8:6a:40:92:66:bc:d2:8d:6f:c9:d7:a9:93:24:92:10:
ae:f6:c4:26:32:cc:57:b1:e6:aa:63:e9:07:e4:18:34:fc:d3:
7d:29:0b:19:3c:4c:7e:27:0d:93:6d:f3:44:b4:c1:44:91:74:
80:1e:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:45 2025 by rpki-client